This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
File: DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json)
Hash identifier: YqVkEdKRqoSpvEtan7JI5E14Arg+W30jzPv6b5BJi+c=
Subject key identifier: 65:9F:46:E5:E6:26:5D:FD:22:D0:F6:9D:71:02:70:32:93:59:FA:7A
Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Certificate serial: 0E70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
Manifest number: 0E65
Signing time: Thu 18 Dec 2025 17:33:44 +0000
Manifest this update: Thu 18 Dec 2025 17:33:43 +0000
Manifest next update: Thu 25 Dec 2025 17:33:43 +0000
Files and hashes: 1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: wMU1svtHsQWb3Ljzr0J90gKXUFETZ9tYJVA5ByGizZA=)
2: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: M2L1TDDyX72ReECKnE9vUgAsmnB0Pz4FwQ7PdyDyDV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3696 (0xe70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Validity
Not Before: Dec 18 17:33:43 2025 GMT
Not After : Dec 25 17:33:43 2025 GMT
Subject: CN=69443af8-a5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7a:66:3e:a7:51:15:98:76:0c:50:05:07:90:
27:89:c0:38:76:a2:1a:ea:23:51:dc:6c:82:18:ce:
4d:21:3c:18:4e:1b:58:51:39:6f:32:e5:40:8a:65:
79:c3:62:82:fb:16:0f:0d:bd:4b:32:9e:98:46:7d:
1c:3a:50:c8:81:18:74:4b:43:e5:0f:b1:33:03:f0:
7c:02:80:62:72:62:8d:84:78:ad:3a:17:55:cb:f8:
d2:a3:9f:64:e8:7d:17:f9:cf:d6:5c:c5:d3:f7:23:
e7:3c:dc:28:13:5a:d1:51:2a:12:ad:22:47:1e:f3:
fa:2b:a0:bf:f2:d7:20:58:61:0a:3e:1a:d1:56:7b:
5e:c0:47:5a:08:20:56:b0:96:69:78:d9:62:11:8f:
f2:d6:4d:3e:23:b9:ae:c9:e4:26:d6:81:a4:f7:64:
0c:9f:79:16:c6:69:27:4b:19:48:6e:a3:02:0e:7e:
42:15:07:89:a7:11:ff:da:fb:68:0e:55:58:4f:45:
a3:11:1f:ed:71:d6:ab:aa:38:d5:82:52:f7:59:9b:
5c:dc:0b:b0:cf:05:56:42:a8:e8:7b:ed:cd:cb:3f:
56:4b:0f:ff:bb:5c:f1:83:aa:bb:14:a1:01:e8:67:
f5:c7:10:9e:f2:f0:09:71:27:92:04:35:29:e8:92:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9F:46:E5:E6:26:5D:FD:22:D0:F6:9D:71:02:70:32:93:59:FA:7A
X509v3 Authority Key Identifier:
keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:91:e5:e9:32:cc:a0:66:c4:e7:ee:17:6e:60:11:69:51:84:
de:a7:1c:97:8e:08:61:7f:60:d6:ac:e4:86:59:50:6f:39:8c:
84:f2:b0:2c:81:09:34:f5:df:55:1d:38:28:b4:72:54:48:45:
93:da:9f:03:3e:19:f1:36:d5:70:49:10:37:50:63:41:9f:0b:
16:62:94:cd:6c:da:c7:78:2b:1a:16:c6:af:35:c9:a3:7d:17:
45:34:2c:97:44:56:e7:db:d8:a4:f0:14:3d:05:f2:ed:c4:0a:
ce:e0:18:60:d3:56:f4:05:f3:21:bd:71:30:7e:28:96:71:6d:
ba:68:5a:66:c6:5d:8a:26:30:d2:7f:9c:6f:e9:d8:e1:87:fa:
be:1d:c5:46:10:75:66:75:95:0e:df:61:21:1a:76:63:1a:10:
fe:b0:21:d0:1e:0a:9c:f6:cc:39:ae:1e:71:5d:66:c0:5b:3f:
c5:c6:83:30:55:fe:2b:24:6d:62:49:ad:f4:c9:64:12:39:8f:
dc:35:f1:69:db:5f:11:ab:77:37:fd:0e:f6:07:f6:ad:a3:22:
7e:e1:a6:25:9a:b3:60:27:ac:9e:71:04:fa:bc:cf:68:2b:38:
23:58:b0:cd:6d:e1:3c:79:e5:43:75:10:bf:ba:73:72:ab:3e:
6a:d4:e8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:22:46 2025 by rpki-client