This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
File: dpU2g0Agk0lSKX69t4GJNXsToUU.mft (raw, json)
Hash identifier: gUOpLMiGBg0/CP+5E9ZmuYptfufn90Y8uGGNZDeTrl8=
Subject key identifier: C2:1A:1B:80:74:9B:60:90:45:30:E4:DB:7F:32:7A:EC:65:52:09:98
Authority key identifier: 76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45
Certificate issuer: /CN=A9111623/serialNumber=769536834020934952297EBDB78189357B13A145
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
Manifest number: 0135
Signing time: Sun 07 Dec 2025 02:53:01 +0000
Manifest this update: Sun 07 Dec 2025 02:53:01 +0000
Manifest next update: Sun 14 Dec 2025 02:53:01 +0000
Files and hashes: 1: dpU2g0Agk0lSKX69t4GJNXsToUU.crl (hash: jFHnXj8UJUZ38xWDEM2FenIE3L/6aHrCjZa9OgozSz8=)
2: CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa (hash: Fsngn3T1P2F9caL/353bXgiO502hh5tKTNXu5S+xNYY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl
rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 02:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111623, serialNumber=769536834020934952297EBDB78189357B13A145
Validity
Not Before: Dec 7 02:53:01 2025 GMT
Not After : Dec 14 02:53:01 2025 GMT
Subject: CN=6934ec0d-16fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:67:ac:5d:e1:1b:16:9a:7a:bd:01:e1:c4:
b8:5d:bc:be:e9:d5:53:59:b5:4e:95:97:4a:21:4d:
2d:a0:4d:e2:3b:d4:ed:c9:89:1e:d8:f5:1f:ee:fd:
d7:b6:79:51:b4:d4:12:51:b4:7f:57:93:ad:27:db:
68:ee:59:cb:db:2c:f8:83:c0:6d:cd:19:b9:14:b5:
8e:62:7e:a0:ea:9b:3b:d9:a3:c1:6a:18:d6:50:f2:
c5:c0:17:3d:1e:a8:08:93:1b:96:7b:23:58:19:2d:
38:dd:ee:85:51:f5:12:17:ae:9e:5e:fa:0f:59:12:
f5:14:ea:6d:15:51:14:9e:6e:4d:51:88:f6:4d:08:
1e:f5:f6:ee:0e:b0:f0:ae:b1:7e:95:38:b0:6a:c8:
cb:23:49:08:d5:2f:96:99:1d:6e:79:d3:24:9a:0c:
fb:17:a3:fe:88:04:d8:8a:bd:15:ed:01:6c:49:99:
25:f1:99:33:3b:c9:e0:4a:aa:6e:b9:32:10:a9:5b:
f9:0d:22:97:6f:ed:26:ce:57:24:d5:07:b6:12:3f:
37:18:10:24:af:71:64:d4:c8:a0:a8:bf:b1:a5:19:
12:73:17:4a:87:36:2e:fe:02:f9:19:29:2a:a5:89:
85:09:db:6d:70:c5:a2:07:d8:af:a9:4f:14:5f:51:
11:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1A:1B:80:74:9B:60:90:45:30:E4:DB:7F:32:7A:EC:65:52:09:98
X509v3 Authority Key Identifier:
keyid:76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:6e:e0:0a:9b:f9:d8:d2:c7:de:1e:54:d8:4f:69:46:e1:48:
9a:0f:54:75:70:98:0b:fd:a1:89:10:ab:6e:f3:eb:0e:22:af:
25:4a:c3:7b:0e:b9:65:b5:2a:10:18:b6:11:6e:94:95:ae:3d:
d8:10:47:19:86:fc:14:50:ad:47:d7:99:b9:ba:42:da:5a:5e:
a6:ab:63:48:3f:c1:1d:48:ce:c8:53:64:5a:9c:09:8d:0c:ee:
ab:75:15:73:fb:c6:f3:9f:97:17:94:8e:01:c4:68:e4:15:f5:
f3:11:8a:79:9d:02:4c:9d:7f:38:b8:0d:6c:0a:ce:1d:6e:f7:
02:f3:e5:bb:62:d9:66:0f:ed:5c:f7:01:b1:6a:26:9b:ca:6f:
87:c5:a8:2d:a9:0b:80:6a:69:1f:b7:af:41:5d:32:4b:4d:f2:
6c:af:f7:fe:c6:66:ba:67:ed:73:9c:b2:2b:75:59:58:dd:11:
ed:85:2e:b1:8c:9e:de:4d:7b:9c:8c:5a:50:33:d7:6b:d0:4d:
b0:2b:4c:fa:b8:5e:82:fe:94:9d:5c:87:61:bd:eb:ef:a6:1b:
10:95:0a:ba:aa:c6:04:c7:b3:a5:3e:56:74:1b:23:6b:6b:7f:
f3:36:ca:ce:62:b1:f9:d4:e0:df:5f:a1:3d:e3:38:87:6c:8f:
2c:d6:8d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 16:16:40 2025 by rpki-client