This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
File: wDouaJYDIEoCs4vve5CDsQJ2JpE.mft (raw, json)
Hash identifier: aZP7cQqsU7agZEygoQBtsBSl0/kBRA1yvcJZz76ya9E=
Subject key identifier: FE:B5:19:AC:0E:05:E3:17:9B:EB:D9:5A:BD:0D:7A:97:39:28:81:7A
Authority key identifier: C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91
Certificate issuer: /CN=A919C7B8/serialNumber=C03A2E689603204A02B38BEF7B9083B102762691
Certificate serial: 0649
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
Manifest number: 0643
Signing time: Mon 22 Dec 2025 21:51:26 +0000
Manifest this update: Mon 22 Dec 2025 21:51:26 +0000
Manifest next update: Mon 29 Dec 2025 21:51:26 +0000
Files and hashes: 1: wDouaJYDIEoCs4vve5CDsQJ2JpE.crl (hash: R9eCAj+qMf0pUWNJkw4a7ssfMwvaCMH6pUrqq8LQaTA=)
2: F8A90D48B7EA11EB91C5D25EC4F9AE02.roa (hash: 3oYf4D2aeCXu56f8mNAcOhJ4M4El8ji8s2gDvwvZjUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl
rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1609 (0x649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C7B8, serialNumber=C03A2E689603204A02B38BEF7B9083B102762691
Validity
Not Before: Dec 22 21:51:26 2025 GMT
Not After : Dec 29 21:51:26 2025 GMT
Subject: CN=6949bd5e-795d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:e5:ee:51:a2:c0:9c:09:59:20:38:d6:c3:
e3:22:67:5d:bb:31:f2:c4:3b:9e:a7:57:74:44:9c:
81:b2:eb:5f:f8:74:6e:80:98:d4:fa:ea:69:d5:b6:
9a:55:fb:af:5d:5b:34:03:b8:5f:87:f9:8d:b7:ba:
69:cc:ce:ff:14:e0:d0:c1:d9:b6:ec:05:6c:f2:d7:
bd:50:c3:5f:a8:89:15:0f:15:1c:78:b3:cf:a2:6e:
c3:4c:0d:d2:cd:42:70:89:40:5c:c9:0d:7d:e6:c9:
57:e2:7f:54:e8:1a:ba:ac:40:1b:0a:36:52:a6:ec:
db:21:15:14:a3:45:68:a1:25:e4:71:d0:a4:91:bf:
be:4b:8f:e5:4c:0b:13:3b:f8:87:32:92:cd:4f:ee:
d3:6c:18:7b:4e:e5:a5:c6:8c:b7:f9:8c:41:a8:05:
6c:b6:b7:87:c9:35:b6:28:b9:15:83:85:79:74:4e:
bd:1e:05:2a:33:69:a9:30:2c:5a:54:01:33:22:73:
f2:2a:9d:10:54:dc:83:26:31:95:97:1c:b3:7a:c2:
d1:73:68:00:39:16:7a:30:67:d7:d8:4d:d1:3f:47:
15:51:f2:ef:55:b7:25:78:57:9c:f0:2c:f6:2c:e8:
e3:49:aa:66:7b:8f:9d:39:f9:82:8d:97:19:0e:41:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B5:19:AC:0E:05:E3:17:9B:EB:D9:5A:BD:0D:7A:97:39:28:81:7A
X509v3 Authority Key Identifier:
keyid:C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9a:f9:61:b6:d6:f0:c2:b3:d5:ae:67:cc:00:2e:b0:a9:09:
8c:81:f9:7b:ed:10:65:06:4e:f9:1f:5f:aa:5c:34:f8:7f:53:
e8:45:b9:fe:8d:46:35:6e:de:c0:2a:14:f5:9a:55:94:a8:48:
5e:4d:86:ec:73:df:db:36:7e:48:31:c0:fc:04:94:5e:a3:fc:
e7:bb:e1:c4:7d:d0:49:d8:a7:51:ef:9b:84:2e:c5:5c:67:24:
73:07:6b:cf:2c:e8:cb:ad:82:ab:98:12:5b:0a:c3:dc:a8:aa:
e8:65:5e:25:70:bb:07:b3:50:10:b9:1a:ab:77:f3:38:57:37:
31:3f:c4:94:dc:e1:eb:3f:23:41:ea:41:f4:69:ce:83:0c:57:
0b:57:cf:c4:b2:35:a8:97:f1:26:aa:c3:84:b1:e0:ea:05:bc:
2f:ab:5b:59:6a:45:f6:db:70:7d:d3:10:5b:5b:ee:be:8d:01:
45:84:28:21:a1:c2:8e:8f:8f:f2:91:a4:39:0a:8c:a3:f7:74:
a7:86:63:b2:cd:8d:b3:0e:fb:19:07:eb:c8:89:e2:75:8d:d2:
51:64:f8:51:c6:0f:7c:44:68:31:63:14:ae:ba:56:81:4a:7f:
d5:98:13:2c:1d:ae:28:ea:18:44:87:35:46:20:5c:90:ac:b6:
15:c3:21:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:09 2025 by rpki-client