This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
File: DAUkO371VhHkCk279_5-kSCSplI.mft (raw, json)
Hash identifier: GmwPiZ70YwkRyD5PcsiPwTGaW984oGRbtmWgv1/iS+o=
Subject key identifier: 75:F4:B7:15:9B:8B:17:CB:FD:A3:21:A2:BC:CF:31:D4:25:65:5C:0F
Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
Certificate issuer: /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
Manifest number: F3
Signing time: Tue 23 Dec 2025 04:17:34 +0000
Manifest this update: Tue 23 Dec 2025 04:17:34 +0000
Manifest next update: Tue 30 Dec 2025 04:17:34 +0000
Files and hashes: 1: DAUkO371VhHkCk279_5-kSCSplI.crl (hash: 56FL1p+4stBRvmb93w0aCRjki3ezhqlTQlA9Gqy2KnE=)
2: 04EFECDA6F3411EF833F4C23C4F9AE02.roa (hash: y48q8nHX1JhR9dequdXIPjSajeit5DAhtA6kzockY/Y=)
3: 04679AF66F3411EF833F4C23C4F9AE02.roa (hash: lMcw8S12urhXxI0eoOsXqOKcaqH3ZsED3AjjGI9Ju6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A8E2, serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Validity
Not Before: Dec 23 04:17:34 2025 GMT
Not After : Dec 30 04:17:34 2025 GMT
Subject: CN=694a17de-a1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:76:da:dc:09:5a:19:ca:ab:18:2a:87:b4:da:
9d:ac:c2:d3:bb:34:c0:2e:6c:ee:fb:bb:d3:6b:c3:
89:4e:43:18:46:cf:83:04:1f:0a:7a:78:26:8f:df:
f7:26:cb:b0:b5:03:6f:ae:aa:5a:80:fd:5b:8a:8a:
2b:17:a8:a3:1a:26:d6:7c:43:f9:45:45:59:a1:d7:
8a:88:48:2f:38:f1:b1:52:61:6d:a2:4a:83:f8:11:
21:04:4d:55:bf:0e:cc:80:ee:e0:f5:63:88:e9:7b:
c8:3d:38:6a:c4:72:67:20:51:88:a3:bd:3d:d6:39:
44:15:e8:a7:53:22:dd:32:60:6e:ce:e9:7e:09:6d:
c7:6f:c8:b8:c9:f5:38:3a:a5:99:0b:ed:eb:70:db:
71:e2:6c:4f:2a:2e:6a:92:4e:7d:59:4a:81:94:7f:
4a:f5:ab:b7:bf:ba:de:04:91:8b:d1:a2:dc:a8:60:
27:ca:9e:0c:07:f2:94:a2:74:00:30:f2:49:1e:62:
6e:2a:df:8e:78:9a:67:0c:59:d6:04:d4:d3:2e:6b:
e7:21:85:54:2b:5a:a7:44:23:93:9e:0e:92:b9:48:
3f:e4:97:dd:9c:16:7a:80:71:d7:22:e2:6d:31:a4:
14:db:bc:c0:8a:cb:01:e9:7c:cc:04:d3:e5:a8:95:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F4:B7:15:9B:8B:17:CB:FD:A3:21:A2:BC:CF:31:D4:25:65:5C:0F
X509v3 Authority Key Identifier:
keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f5:4f:43:79:16:5f:47:cc:8e:56:bd:3a:8f:a1:3c:00:66:
91:10:ea:aa:bf:e0:e5:c6:4e:b9:10:14:46:0d:e8:1f:51:e0:
5a:47:29:27:4c:1a:94:3c:b3:17:c0:33:53:f2:bc:83:67:18:
78:1b:56:93:02:cc:5d:b7:ad:fe:11:72:8b:a7:ab:1b:43:a2:
fe:0b:73:91:10:33:d8:57:f2:6f:34:9c:37:ed:f3:44:68:b9:
a0:fd:d3:c1:28:65:26:10:5a:98:66:d5:86:21:b9:5f:57:39:
25:b2:65:72:1b:b8:31:68:34:03:96:06:0e:57:e9:41:e0:2d:
68:1e:66:8a:14:ab:33:f3:d9:1b:77:d5:6e:f9:60:b2:0b:8d:
af:85:e9:74:7d:f0:65:1c:d8:95:6c:b9:e9:63:b5:26:65:eb:
56:1d:8a:af:63:79:6d:fb:4a:89:8d:dc:c2:5d:e9:b2:f2:72:
5d:e6:1d:1f:e9:1e:12:e9:80:d8:cb:d9:40:ea:89:d4:d7:cf:
d9:18:c0:15:77:52:58:69:09:df:68:e8:94:cd:0e:95:34:28:
be:dc:b6:ab:3b:e3:d8:af:d0:fc:f8:c1:ee:fd:75:81:e1:c2:
d3:97:4e:97:89:78:e1:08:08:8e:84:0f:7c:c6:6d:8c:0b:4b:
af:31:43:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:13:56 2025 by rpki-client