This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft
File: dw8omR3mSPiWHFfA3NrX1YtKafQ.mft (raw, json)
Hash identifier: 8AL6u19SJIQC2ZEbB0To+z76e0kA+8F1A/58yl8ZGOg=
Subject key identifier: 4C:AA:D1:5A:41:01:77:C1:F6:FC:7D:6A:B1:AD:D0:67:74:D1:B0:39
Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4
Certificate issuer: /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4
Certificate serial: 09FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft
Manifest number: 09EE
Signing time: Mon 22 Dec 2025 19:17:37 +0000
Manifest this update: Mon 22 Dec 2025 19:17:36 +0000
Manifest next update: Mon 29 Dec 2025 19:17:36 +0000
Files and hashes: 1: dw8omR3mSPiWHFfA3NrX1YtKafQ.crl (hash: DXRwfsrdJ3NMT0vqS+zbrq1HVk5M/ffruQJ5yHSYM9A=)
2: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (hash: wJNkPrAZnAwunRdATcEif4I0/3DklspHznNyGIiQ8LI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl
rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2554 (0x9fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916699C, serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4
Validity
Not Before: Dec 22 19:17:36 2025 GMT
Not After : Dec 29 19:17:36 2025 GMT
Subject: CN=69499951-43f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:08:8d:b7:5f:36:d5:6e:81:f6:44:bf:45:
53:52:f8:e3:60:08:2a:06:b4:b7:ca:59:b8:4d:e3:
26:f1:41:2c:a9:83:99:8d:4c:23:fd:f4:ef:09:ca:
7f:fd:16:07:bc:8b:c7:99:94:9c:43:15:82:e5:fd:
b1:65:f8:18:11:4d:86:06:bf:06:16:82:d2:e2:50:
7e:7d:54:76:f7:6b:fe:33:fc:0b:41:73:8e:f7:2b:
6a:76:61:4e:fe:e6:e2:9b:d8:20:45:00:b4:7d:a8:
fc:24:dc:a2:09:27:32:00:ad:48:fc:a0:d4:c2:af:
ab:8e:39:a3:79:e1:37:d6:0a:e4:ce:18:e3:57:b1:
56:d3:cc:19:77:66:69:54:cd:25:9b:c6:80:fa:ac:
f3:09:45:f3:04:a6:51:8f:a5:01:12:ab:4b:bc:2d:
7c:cd:3f:7d:b9:0b:52:72:d0:e0:d0:2c:d7:a1:bf:
ba:85:52:15:d4:ee:b7:2c:ac:65:26:ab:5a:b5:38:
9f:22:c2:11:71:61:c3:e6:fd:66:9f:f5:ae:67:0a:
60:b4:cf:7e:8c:e7:8b:e1:2a:45:75:79:4b:8f:06:
71:e7:92:b1:c9:3a:42:6a:f2:ae:16:b0:70:93:6d:
08:d9:79:bb:98:d9:e7:86:76:97:8f:15:83:11:9c:
65:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AA:D1:5A:41:01:77:C1:F6:FC:7D:6A:B1:AD:D0:67:74:D1:B0:39
X509v3 Authority Key Identifier:
keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a8:14:ca:dd:25:c6:2e:9d:be:e3:19:f9:8d:ba:dd:54:e6:
a2:37:a1:ff:c5:30:a9:f8:f4:83:d6:17:3e:fc:2c:77:ed:2f:
72:9d:50:f4:ef:fc:2c:0f:ae:13:2c:86:5b:21:09:3e:cf:bf:
7b:09:5b:f1:9b:79:94:cf:f6:a1:f3:3b:41:51:cc:e5:73:da:
0a:70:73:17:e9:4c:ef:97:d5:19:54:1e:d1:8c:45:b4:03:79:
66:09:75:eb:0e:31:0e:12:64:b1:de:e5:a3:5f:cc:5f:4b:90:
9a:a8:91:c6:3e:ad:2c:fd:5a:93:fb:29:39:0c:87:b4:73:48:
17:25:bd:e7:48:a6:af:1f:63:66:e9:61:99:96:16:19:74:ef:
a6:32:14:29:e1:2e:ae:99:73:90:31:bd:36:45:a9:ec:41:81:
ad:d4:c5:95:59:53:ee:f9:21:a7:9f:ea:9b:d0:ae:f7:cb:eb:
b2:b3:50:6a:5d:3e:92:a0:71:7c:79:34:02:a4:7b:eb:dc:d5:
e4:a8:33:e9:ad:f1:73:5b:95:f5:b1:a4:ec:f3:c2:e3:12:31:
a8:8b:01:17:d0:3a:68:1f:4c:a6:59:90:df:8e:1b:2e:c2:e1:
6a:9e:4c:51:57:25:bc:d2:ac:89:68:53:c6:d2:d0:97:dd:51:
91:9c:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 22:42:26 2025 by rpki-client