This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
File: dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json)
Hash identifier: W4W1AbBEce8U25TYM7Orhj6xcylzETn+U6SDJuyybqI=
Subject key identifier: FA:B6:F8:A7:B9:DE:F6:FF:E5:46:D8:A3:40:18:35:73:B7:2B:09:BA
Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
Certificate issuer: /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Certificate serial: 03A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
Manifest number: 039E
Signing time: Mon 22 Dec 2025 23:45:42 +0000
Manifest this update: Mon 22 Dec 2025 23:45:41 +0000
Manifest next update: Mon 29 Dec 2025 23:45:41 +0000
Files and hashes: 1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: U0g1fSWkqUNQnwaQcuKVso/DEC9dHWfiapquqk71AgI=)
2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: w37S3Bt2sSTPCiMAqtrHuEG6jTfY7XCc/TsnG1ZQfsg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl
rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 930 (0x3a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Validity
Not Before: Dec 22 23:45:41 2025 GMT
Not After : Dec 29 23:45:41 2025 GMT
Subject: CN=6949d826-fd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:d4:82:fd:24:b0:4a:8f:49:4f:2e:26:37:
00:af:d4:f2:58:23:5a:d1:a1:6f:8e:06:00:ab:76:
68:c7:83:8d:4c:65:7b:02:2b:46:66:75:72:0d:1e:
cd:1e:7c:41:e1:eb:c1:f5:4e:ed:9d:16:01:39:96:
f4:61:c1:2c:76:d3:fb:a0:24:cd:ae:73:1f:d0:ab:
9a:ea:e3:ea:d0:ab:9b:a8:0f:c7:f3:d9:f3:c9:d3:
a8:99:c5:d8:57:f2:f7:18:2a:cf:08:d3:fb:75:f6:
b0:96:70:8a:5e:89:8f:d0:00:f5:db:66:3c:c8:2d:
27:7e:fb:f4:57:e0:7c:f9:be:3b:f8:4d:b1:5a:01:
b7:cc:58:35:97:3a:38:d8:da:23:db:09:3a:52:fb:
4a:c0:19:b3:c4:ac:ac:30:3c:a8:d0:1d:bc:46:a0:
f7:9a:20:fe:28:3d:d7:e1:ad:15:c5:b8:5b:a9:e2:
3e:e4:57:e5:8a:1e:e7:25:a6:3d:bd:40:4e:fb:d0:
26:b9:28:47:14:b7:94:87:27:b2:9f:b4:e6:16:32:
15:df:01:ed:f6:e4:b7:fa:56:a2:eb:f5:ae:8b:48:
0a:c4:b5:5d:f0:f0:c0:8a:d7:b7:75:e3:e5:6e:a9:
1b:f0:79:f3:a4:b7:b8:94:d2:99:20:69:ba:37:2d:
82:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B6:F8:A7:B9:DE:F6:FF:E5:46:D8:A3:40:18:35:73:B7:2B:09:BA
X509v3 Authority Key Identifier:
keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:d2:d9:e3:2e:32:0d:30:39:48:e4:ce:60:fe:01:dd:ab:e9:
1e:c3:4b:d8:c5:5c:6f:fc:c2:87:14:66:15:7f:6e:88:d7:cc:
ba:21:f4:7d:4a:c8:9f:f5:00:f8:75:16:19:a4:02:8d:00:c0:
e9:ad:f6:c0:33:e7:9c:73:8f:0f:25:f2:e2:e6:8b:19:f4:26:
6f:b0:9e:28:47:41:28:86:31:03:67:21:cf:23:89:a7:44:e6:
df:23:c4:4d:0d:8f:ea:42:c9:7d:eb:78:a2:f8:3f:5d:95:2e:
f2:8d:c4:7e:68:50:fa:b5:1b:f0:0b:fc:4c:6d:81:7e:be:e7:
af:01:34:82:3c:46:91:fa:dd:30:67:ff:7b:83:e6:55:c0:69:
a4:15:c5:0f:51:71:50:13:7a:d7:d2:6d:f7:17:9d:ff:34:cd:
94:4f:e8:73:2f:df:ef:87:c4:d1:84:3c:fa:b8:e0:f0:5c:51:
70:d6:0c:ed:30:c5:4d:7c:d4:f5:e1:e6:b3:a7:d3:14:f2:a5:
6b:e1:0a:d3:45:db:02:e8:73:fa:18:1e:8f:d4:1d:81:27:4c:
34:30:05:71:9a:fa:ed:4d:b1:94:82:57:81:03:eb:94:8d:72:
b1:bd:6d:b4:c6:72:d2:f9:a9:b9:39:fa:a1:8e:86:89:bf:1b:
fa:ac:e9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 22:42:28 2025 by rpki-client