This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
File: DL7Sere2gbyZZqziRPy_KX5lyhk.mft (raw, json)
Hash identifier: s2KsOpf2Vcq3zOGa51MopXNkt93JYfu3aeu6IGzOMHc=
Subject key identifier: EC:E0:4C:98:B9:20:10:7D:B8:EA:EF:17:30:C8:5D:D0:FD:C5:DF:0E
Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19
Certificate issuer: /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
Certificate serial: 0538
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
Manifest number: 0530
Signing time: Mon 22 Dec 2025 22:36:58 +0000
Manifest this update: Mon 22 Dec 2025 22:36:57 +0000
Manifest next update: Mon 29 Dec 2025 22:36:57 +0000
Files and hashes: 1: DL7Sere2gbyZZqziRPy_KX5lyhk.crl (hash: 0/Cx44WBy+//zJY2z8C+dsSLae7lROjLHBjUhFXTKHI=)
2: 8A190AB66D1011EFA13D6E2BC4F9AE02.roa (hash: AAv9iRZkCrIdjmlojo08VQ3Lr0iHsrSZtwCxTUl/qrA=)
3: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (hash: RwcRY83ScxlbqM04nHpwXB0Y4y38xjFyFzwqEWYpGkc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl
rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
Validity
Not Before: Dec 22 22:36:57 2025 GMT
Not After : Dec 29 22:36:57 2025 GMT
Subject: CN=6949c809-da7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a7:c8:ae:a3:35:e4:5c:9a:48:49:8e:3d:5b:
e0:bb:5b:af:92:54:95:9e:01:4c:4a:7f:41:07:9c:
6e:30:5d:6e:98:e2:f6:70:d1:81:8d:ab:d2:2a:26:
c8:c1:ff:af:30:e9:69:87:44:5c:82:8c:56:b7:cc:
12:96:5c:81:ea:55:cd:d7:b0:bf:2a:1d:88:47:ca:
6c:54:bb:16:26:c0:7e:98:ac:c1:05:23:99:2c:e5:
a8:66:9a:cd:27:b5:75:25:98:39:6c:d1:a4:11:71:
e1:a6:d4:dc:d7:bc:20:35:4e:5f:cf:41:03:71:3b:
9a:a1:61:63:04:cf:b8:64:f2:fd:79:2f:4d:d9:1d:
a6:96:06:c0:56:e7:2a:79:5f:84:fd:d6:a1:16:d1:
f1:15:58:0c:92:4a:f5:ad:43:e3:11:97:e0:89:34:
41:32:06:ee:90:64:23:b8:d5:fd:89:bd:b0:8e:c8:
1d:72:50:f7:80:f2:3c:1d:56:e2:41:db:c3:cf:4d:
43:16:e9:ad:20:a1:19:28:35:80:f1:0e:1a:e9:45:
58:6e:68:66:af:d1:a7:eb:36:6e:7f:d9:93:e0:9b:
5b:b7:5d:0b:fb:d2:3d:78:90:35:c8:21:cd:84:93:
65:70:3a:bf:68:36:9f:90:d2:ca:d1:7f:01:1c:51:
39:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E0:4C:98:B9:20:10:7D:B8:EA:EF:17:30:C8:5D:D0:FD:C5:DF:0E
X509v3 Authority Key Identifier:
keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:90:7b:6b:2e:d2:9d:8a:5f:78:e6:59:68:b8:c0:f1:b5:5f:
df:27:0e:b1:b8:ca:20:39:cb:f7:de:9e:f3:39:cf:79:4e:06:
4f:bd:61:e9:45:98:93:d6:8f:3d:d5:2f:86:2c:a3:80:f8:ab:
69:21:15:e5:5f:ba:3c:09:35:a6:4c:58:83:fb:53:53:e4:e0:
b8:f1:5b:74:0f:b0:73:72:e9:13:6b:1c:37:ce:b1:2a:c6:b3:
75:58:86:6d:49:44:ef:fe:f6:a1:17:13:62:f4:60:46:ee:6d:
63:32:b4:6f:b8:63:c7:77:2b:62:ec:b1:8e:af:51:84:f3:41:
fe:33:4c:16:71:fb:55:47:f3:0f:91:a7:38:d3:a4:60:66:9e:
db:d3:ee:4e:6c:b3:24:06:15:f1:d3:af:b0:fd:96:b7:51:b8:
21:00:1c:ca:f6:a9:80:5e:24:49:16:16:13:a5:85:7f:06:ce:
3d:ea:cd:45:08:6f:5e:af:af:09:c7:62:bd:cc:b6:6e:42:d3:
45:a1:7c:7d:26:5e:2f:c3:c1:57:28:a9:01:43:75:37:37:f6:
fd:93:aa:79:82:29:20:07:16:92:38:ab:e4:1f:8e:6a:95:fe:
ea:c8:9b:74:98:b0:76:1a:6d:aa:56:25:2d:51:65:7b:dc:69:
93:91:a4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:19 2025 by rpki-client