This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
File: dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json)
Hash identifier: G/Kxvma4Vso5u4pTBm+VGMEXuQ0KKVdE3YSseBDtduE=
Subject key identifier: 01:53:E2:6A:E4:85:B6:2E:48:EA:B6:AE:51:BA:BB:53:A9:DF:11:ED
Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
Certificate issuer: /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
Manifest number: 01BD
Signing time: Sun 21 Dec 2025 02:15:41 +0000
Manifest this update: Sun 21 Dec 2025 02:15:41 +0000
Manifest next update: Sun 28 Dec 2025 02:15:41 +0000
Files and hashes: 1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: ydaejEGqpWnJJvlkHJexLfTBosUoyEg+93RcEJiRoqw=)
2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: 6LgZz9VjDAr6MMe5pXsyjBo64OXT91fOAbUroJrtOs4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911898E, serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Validity
Not Before: Dec 21 02:15:41 2025 GMT
Not After : Dec 28 02:15:41 2025 GMT
Subject: CN=6947584d-a0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:9b:73:12:bc:ab:1f:87:a6:1a:e3:e4:02:
0a:f7:23:e6:57:c0:6d:b2:45:cd:9f:58:d8:b7:74:
88:5a:de:05:53:a9:b7:9c:82:db:cc:da:5a:d8:db:
e9:d3:69:13:a7:e1:a2:e6:8e:c0:a0:72:29:13:f6:
5d:aa:b1:a2:48:56:97:8a:d8:f4:ce:21:f5:09:b7:
bd:74:40:32:21:51:91:4d:46:9e:da:ef:ff:c4:53:
8c:57:a4:99:94:c6:92:fd:23:22:a1:01:f6:c2:7d:
e7:14:8f:a8:21:c6:6e:4c:ac:86:4b:9f:db:7a:58:
50:c7:15:f9:90:be:a7:08:a3:c0:fc:f3:c9:3d:c2:
44:93:06:59:91:68:b6:e7:4b:97:46:88:0d:57:d5:
c8:4f:8e:5c:fc:de:27:92:c7:37:93:e6:49:e9:41:
0a:7d:d2:98:47:59:2d:ef:92:c0:99:e8:2e:68:40:
38:38:80:5c:5d:ad:9a:71:e4:da:a2:26:9b:a8:cb:
71:ef:57:43:d2:13:c3:08:20:3d:5b:43:69:4b:51:
2b:9b:0e:ee:d5:20:45:49:68:8e:5b:6c:a9:20:e5:
f9:ad:40:da:0d:3e:ee:42:03:10:e0:6c:8a:a5:86:
34:4f:77:69:19:a0:bb:7e:71:58:07:17:b0:d7:90:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:53:E2:6A:E4:85:B6:2E:48:EA:B6:AE:51:BA:BB:53:A9:DF:11:ED
X509v3 Authority Key Identifier:
keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ea:1a:91:66:27:2b:06:62:b1:85:2a:d4:13:a7:bf:a0:67:
81:8c:2c:e3:37:5f:d7:4f:ca:a7:af:4e:b3:07:9b:be:d4:b4:
27:c5:57:6a:bf:f6:67:0b:91:61:5c:3c:c6:79:74:7c:1d:3d:
3d:bb:fc:f1:9e:a4:67:02:80:21:8e:11:71:ad:54:e0:b4:f5:
0c:01:f9:7c:3e:bc:37:4e:8f:48:64:3d:9c:35:f9:51:2b:58:
8b:e0:2b:39:b6:1d:35:72:fa:f8:94:ac:f8:70:bf:a5:aa:10:
e9:b7:a9:ff:73:17:87:ac:5f:1e:19:43:3a:a1:a5:92:0d:51:
f0:ec:bb:de:03:2e:5c:55:e1:e1:39:aa:54:09:85:a9:6b:27:
44:e1:8c:88:bb:b0:95:ec:95:4e:2f:c5:91:8b:f5:2a:84:6a:
f6:36:3f:5e:bc:d4:a2:e2:27:e8:23:3f:f5:af:6e:ee:b7:ad:
d7:d2:e4:9e:d7:03:8b:98:99:9e:c5:4c:ee:8b:6f:b8:e7:49:
c0:aa:96:44:cf:14:ec:3c:5b:6b:01:c1:94:87:d4:07:c6:b3:
40:a7:90:5b:99:53:9e:c7:18:2e:be:bf:78:88:bf:a4:f4:e6:
c5:5f:68:c0:4e:06:ee:44:29:89:51:e4:ef:da:60:b4:6e:9a:
47:7b:ee:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:15:30 2025 by rpki-client