This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
File: dnhyvdDvgmpkldgSahOfxASTgA8.mft (raw, json)
Hash identifier: 29nhKddRqT5P5dbHyxqTJcQw54Z+VKhMCChzZO9EIPw=
Subject key identifier: E3:F5:8A:3F:5C:4D:67:AF:5F:B5:A0:0D:92:15:3B:21:10:E3:47:A7
Authority key identifier: 76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F
Certificate issuer: /CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F
Certificate serial: 1014
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
Manifest number: 0FEF
Signing time: Thu 04 Dec 2025 17:04:07 +0000
Manifest this update: Thu 04 Dec 2025 17:04:07 +0000
Manifest next update: Thu 11 Dec 2025 17:04:07 +0000
Files and hashes: 1: dnhyvdDvgmpkldgSahOfxASTgA8.crl (hash: tqLLMb1MYL8OzF+8q4eep0sBD1DmQoGajDI7vhOAUgI=)
2: 5B3CBC209BEA11EFBCB36227C4F9AE02.roa (hash: eOv7pTte1ye/67eHb4Pi9oh8uZ/8IpesFY1S9J5aGIE=)
3: 5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa (hash: ms+qR7zeYqI6JEXHK3rNQAxzRQXIEiuzImbKZbjKLOE=)
4: 5C1DBC489BEA11EFBCB36227C4F9AE02.roa (hash: p1wuomi4ih0De5e/76yoAEIXaN4ZewrXgvfIRvH8XLQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl
rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 17:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4116 (0x1014)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B67D1, serialNumber=767872BDD0EF826A6495D8126A139FC40493800F
Validity
Not Before: Dec 4 17:04:07 2025 GMT
Not After : Dec 11 17:04:07 2025 GMT
Subject: CN=6931bf07-f464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:98:e1:ca:b4:bb:f0:b8:52:ee:f0:ef:d3:
76:c0:98:b2:87:d8:e3:67:43:4a:de:ec:79:d4:9e:
ea:1a:a6:74:2b:80:ae:fa:21:58:eb:7c:9c:fe:a4:
43:71:19:9e:90:57:30:15:d5:bd:61:0c:ae:ee:21:
03:58:75:75:e7:c5:6e:f0:61:ab:13:0c:3a:5a:4f:
36:90:7e:9b:4c:eb:ce:62:33:06:8b:07:58:38:38:
8b:7a:12:a5:59:62:ae:56:02:2d:1d:2b:10:5a:e7:
ad:42:4a:4d:c7:7d:88:f4:6e:a5:36:1e:c6:f6:2f:
1b:cb:35:1e:31:d2:8f:aa:97:9a:d2:84:6b:09:c0:
9c:5c:62:9a:1b:d3:33:de:30:17:1b:7d:c7:be:f5:
1c:63:98:b2:c5:33:bc:f0:22:9c:e6:21:13:9a:6f:
5d:f8:19:21:09:14:ac:69:65:a4:ee:84:fa:ba:a8:
e9:39:93:73:12:6a:ad:d5:9a:e9:4a:fa:f0:10:1d:
84:0b:f3:e6:9a:f6:67:ee:9c:3d:5d:f6:e7:ca:c5:
3d:5b:05:3b:e0:40:a6:c1:bb:14:89:90:ff:31:d6:
eb:41:e8:20:37:b1:92:4a:e1:98:0b:61:3b:d8:8d:
b4:b1:17:b4:a1:45:3d:3c:04:e5:ad:2c:33:23:dc:
ef:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F5:8A:3F:5C:4D:67:AF:5F:B5:A0:0D:92:15:3B:21:10:E3:47:A7
X509v3 Authority Key Identifier:
keyid:76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:fb:03:f7:7d:a1:41:88:e8:b5:b2:97:db:24:94:76:d9:7c:
68:5a:2e:90:b7:37:15:0e:6b:5d:d7:6c:63:2f:b3:de:44:59:
be:81:62:0d:ea:ae:7b:78:9a:67:79:76:0b:0e:f6:bc:88:f8:
8a:6b:92:18:41:ec:9f:a9:c0:f1:d7:97:db:9a:c0:13:f0:a3:
58:d1:4f:b8:4a:a8:8a:16:5a:07:13:44:ae:a5:ae:e9:e6:de:
70:d8:39:03:bb:bf:e1:64:ef:1b:82:a7:78:20:92:6b:d7:b2:
da:8b:35:fa:b4:07:54:3c:2e:ae:cd:bb:c0:4d:f6:21:94:32:
f4:09:f3:82:f9:da:32:51:2b:7b:ee:80:78:9d:42:d8:61:b2:
8e:e6:59:4e:f9:66:87:93:cf:b7:bc:7c:64:85:9a:d7:1b:bc:
f8:f9:80:57:dd:1e:9c:50:ff:96:ec:22:8e:e2:4d:e3:9b:91:
fa:f2:97:fe:16:35:40:83:d6:12:cf:85:a6:2b:d6:e4:48:8f:
43:10:f2:77:18:de:41:ed:4d:23:09:91:07:ac:0f:d2:76:d0:
2e:fd:7f:3f:ff:15:b8:c1:02:85:ec:10:b8:ab:ef:56:88:7b:
d9:4d:b2:ee:c3:bb:13:e9:eb:a4:e5:cc:54:3d:5e:37:d6:81:
72:c7:94:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:27:27 2025 by rpki-client