This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft
File: DBvOAktD_dqH85YV2ZS6NwYkbFA.mft (raw, json)
Hash identifier: u+WhuU/H0oPMUNs4jtddc6aL7Vt2KUuXp/C3EpBvlRk=
Subject key identifier: CE:EC:CC:D1:14:E4:E8:D4:20:DE:B3:26:CD:C5:2C:1C:8A:49:17:B6
Authority key identifier: 0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50
Certificate issuer: /CN=A911A739/serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50
Certificate serial: CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft
Manifest number: CB
Signing time: Fri 05 Dec 2025 03:48:15 +0000
Manifest this update: Fri 05 Dec 2025 03:48:15 +0000
Manifest next update: Fri 12 Dec 2025 03:48:15 +0000
Files and hashes: 1: DBvOAktD_dqH85YV2ZS6NwYkbFA.crl (hash: igT1lt8jtFL2z5XaKSox7okJBCg4GpAwZdc+EFBhmog=)
2: 41121A8C9F5211EFA8F8A056C4F9AE02.roa (hash: vRtRviaQ6XNpWyRhEwggmiLTt0iFQyzvKucYtEN77kc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl
rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A739, serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50
Validity
Not Before: Dec 5 03:48:15 2025 GMT
Not After : Dec 12 03:48:15 2025 GMT
Subject: CN=693255ff-4013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:bf:cf:74:0f:99:9b:c8:98:12:75:2c:6d:
6a:26:5c:f9:2c:b5:bc:be:31:81:3a:dd:b5:4c:73:
64:8f:66:63:de:df:16:87:f0:56:85:52:cb:ba:58:
d9:da:d6:f8:a6:48:59:6e:b0:9f:13:a8:39:5f:03:
61:28:31:ee:00:dc:2c:e3:c6:9f:50:d4:c9:0d:d5:
bb:4f:4f:5f:04:e0:fb:70:dd:1c:ac:f1:88:7d:e3:
93:b7:3d:85:f9:7e:4e:70:fb:c9:6e:84:6d:05:b2:
12:02:5b:76:b1:74:5d:db:cd:8b:8b:b3:b9:b5:4b:
8b:6a:6d:b2:d5:99:e2:e8:f5:ab:6c:f0:e6:dc:db:
2b:f3:9a:f3:7e:2f:78:ba:5c:d8:dd:d2:42:cb:9a:
36:0a:e4:0e:7a:28:9b:97:9c:bc:e1:f4:bd:e7:98:
e8:85:10:c7:b3:1c:41:1c:c8:0b:77:33:fd:f9:2f:
79:e0:62:af:f2:5d:b6:0e:2e:4c:e9:50:f2:c2:f7:
a6:3c:a3:6d:90:90:ae:70:f3:80:76:0d:59:77:9b:
33:d7:e0:9f:74:aa:f2:56:48:bf:25:68:80:df:26:
aa:f8:3b:80:55:fd:c2:a3:a3:ee:73:dd:f7:2c:d2:
f5:77:39:ae:04:49:0f:9e:ad:c4:03:5d:9d:89:b9:
0b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EC:CC:D1:14:E4:E8:D4:20:DE:B3:26:CD:C5:2C:1C:8A:49:17:B6
X509v3 Authority Key Identifier:
keyid:0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:66:58:b2:c5:87:d9:e1:ae:83:4e:19:9e:d8:e5:79:27:93:
2a:03:58:8b:66:84:5b:3f:ad:9f:29:7a:22:1a:18:33:ab:c6:
d6:16:c1:9e:f4:f6:84:35:2a:4e:72:73:03:2a:d4:8e:79:81:
9e:71:c8:29:8d:e6:f8:0f:16:86:85:b3:9b:65:f2:72:da:3e:
96:f5:a6:fb:13:44:92:30:15:49:d9:52:f5:2c:6f:d6:d8:b5:
74:24:4c:6e:68:82:af:9c:88:ca:e3:e8:21:61:c4:9a:6d:af:
b4:e9:9d:86:51:18:6f:1c:d0:05:66:c6:41:8e:b1:79:9f:d6:
0b:d9:4d:99:80:df:07:46:39:b5:7e:bb:0a:5e:b8:46:45:fa:
91:07:b7:a7:2c:53:b0:5c:21:c8:eb:35:b1:f9:72:0d:f8:8b:
a9:08:4c:e4:65:5f:60:9d:1c:bf:0d:56:13:fd:ab:6d:59:b4:
3d:cc:69:a2:9e:57:a7:df:e0:bd:a0:3a:7b:ac:b2:33:72:b5:
38:f0:f5:e5:fb:8d:62:98:db:1e:56:9b:38:62:f8:01:c0:e1:
49:10:cb:6e:9a:85:c7:41:8c:a3:30:aa:a1:9c:b2:64:14:d7:
b9:d9:93:3d:2d:82:c5:ec:50:82:45:93:9d:80:ac:2d:ba:2c:
7a:cc:24:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:28:23 2025 by rpki-client