This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft
File: PDml0ZGM9lqyVjMi8PXxQwmme48.mft (raw, json)
Hash identifier: 6Ln4BSk9kjl3Ovb/XW+Vb90OjWG5ah3S22oxQz0g5sA=
Subject key identifier: A0:33:15:1F:F4:ED:CF:91:5F:CB:29:2E:E2:57:D8:88:07:27:C3:D9
Authority key identifier: 3C:39:A5:D1:91:8C:F6:5A:B2:56:33:22:F0:F5:F1:43:09:A6:7B:8F
Certificate issuer: /CN=A91E2F2C/serialNumber=3C39A5D1918CF65AB2563322F0F5F14309A67B8F
Certificate serial: 09F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft
Manifest number: 09DE
Signing time: Mon 22 Dec 2025 19:22:20 +0000
Manifest this update: Mon 22 Dec 2025 19:22:20 +0000
Manifest next update: Mon 29 Dec 2025 19:22:20 +0000
Files and hashes: 1: PDml0ZGM9lqyVjMi8PXxQwmme48.crl (hash: w4Vwtfmf/hVYKVq3DKIN6davSdL/X1/RQUL0i6c+fgQ=)
2: DE07328A778911ECBD9C7748C4F9AE02.roa (hash: V37MROUsA/Vlywtiw7YJvjwfZWxefXilScjM3KKgLC0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.crl
rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2544 (0x9f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2F2C, serialNumber=3C39A5D1918CF65AB2563322F0F5F14309A67B8F
Validity
Not Before: Dec 22 19:22:20 2025 GMT
Not After : Dec 29 19:22:20 2025 GMT
Subject: CN=69499a6c-d6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:e6:9f:57:74:b6:0c:13:e1:f8:40:e5:29:
66:52:50:1b:e3:74:fb:86:ff:70:ca:16:80:64:66:
ed:54:67:3e:5a:a9:ad:4d:43:d6:35:b8:03:db:2e:
2a:37:97:d1:de:b6:fd:f2:50:25:34:58:0a:14:f1:
cd:23:cc:de:9f:2e:d3:de:8a:70:f8:13:7b:bb:c8:
5a:19:2f:44:93:f7:93:a0:6a:89:86:8c:38:5a:f1:
8c:ab:ba:73:38:24:0a:77:09:00:f3:23:1d:0d:77:
6e:d0:c2:ea:3b:2c:47:38:8e:17:8b:c1:1e:a8:5d:
27:f0:25:71:de:27:63:ee:73:c0:d8:3d:bc:db:98:
2e:8e:d2:cf:ec:4f:08:95:47:f3:35:00:3a:a7:f2:
8d:d7:07:ad:04:1f:2e:e7:c4:0c:7f:f7:0a:46:da:
3d:b2:5d:29:f4:15:ff:32:6c:86:a2:56:6d:9a:b6:
d6:14:54:a5:b2:fd:ca:7f:dc:8f:a9:4f:91:b5:ed:
3c:3c:84:fb:c1:e0:1d:30:32:d5:30:ef:f9:95:7f:
53:56:12:a4:0d:b8:08:b7:69:9e:c1:4a:ab:24:1a:
43:d2:94:67:28:80:24:a2:83:23:3d:f8:b6:7d:de:
8a:c5:69:4c:4e:69:64:45:da:19:ea:43:a3:8b:c1:
40:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:33:15:1F:F4:ED:CF:91:5F:CB:29:2E:E2:57:D8:88:07:27:C3:D9
X509v3 Authority Key Identifier:
keyid:3C:39:A5:D1:91:8C:F6:5A:B2:56:33:22:F0:F5:F1:43:09:A6:7B:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:6d:46:3c:ad:ef:0e:db:8a:66:cf:3f:03:20:25:70:be:81:
96:be:05:da:10:84:40:c4:9e:12:42:16:84:6d:f9:73:ed:6d:
4b:4a:e7:a9:52:bb:96:63:e9:15:fc:39:9f:7b:c8:ff:09:94:
18:06:d2:20:3c:11:1f:99:2c:68:21:10:96:75:61:98:27:2f:
1f:9c:e2:c3:c9:5a:33:0d:4a:ee:15:3c:7c:dd:e2:1b:d9:cb:
96:15:63:43:67:5a:16:33:50:e5:e2:ee:54:d1:43:e7:4b:ef:
03:17:77:99:0a:1d:c9:c0:10:d6:8a:16:96:99:e4:72:22:d0:
8d:ff:c6:d0:a1:ee:3a:40:31:67:0a:50:8e:09:fc:27:11:ad:
6f:f1:00:43:43:9b:d6:e6:c1:bd:54:0a:2f:76:cd:f9:8a:04:
0d:4e:c1:5b:46:37:83:c7:ba:e2:28:c6:40:c0:7d:a5:14:80:
2b:8c:06:40:71:a6:ae:ce:b4:42:3f:f9:1b:ee:df:e3:de:d9:
be:8d:0a:e5:a3:d0:85:84:69:d3:5d:0c:ec:9e:83:a0:a2:c4:
7c:6d:5f:c9:6e:8b:59:fb:65:43:94:0d:56:37:de:74:08:42:
46:4a:eb:0f:58:41:a7:42:25:c4:14:2c:88:dc:85:bb:91:ac:
45:e2:6c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:45 2025 by rpki-client