This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
File: DcXOSilPLJOAqRNe4fBTByikzaY.mft (raw, json)
Hash identifier: du83fsdnb4EMUx4NxCT/Gs8B71Tpnj1bG6KjOStiwwk=
Subject key identifier: EB:6C:C9:D7:A8:72:EA:53:64:90:F0:17:CC:D5:E3:DE:92:38:AA:73
Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6
Certificate issuer: /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
Certificate serial: 34FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
Manifest number: 34F1
Signing time: Sat 06 Dec 2025 15:05:16 +0000
Manifest this update: Sat 06 Dec 2025 15:05:16 +0000
Manifest next update: Sat 13 Dec 2025 15:05:16 +0000
Files and hashes: 1: DcXOSilPLJOAqRNe4fBTByikzaY.crl (hash: mYJ7QxP6vLngc/NwGAVUJViTvSI8axI/3bC75gb7rTE=)
2: 7FE5F2CEDB9411E9832A463AC4F9AE02.roa (hash: Sw4ihe/uH6fmIDPdKoxmP7xAVXuq4ul6aZ2AD9s5AWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl
rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13563 (0x34fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B4DB, serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
Validity
Not Before: Dec 6 15:05:16 2025 GMT
Not After : Dec 13 15:05:16 2025 GMT
Subject: CN=6934462c-d3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:39:48:c8:f2:47:4f:7a:82:34:90:b7:5f:
45:d4:12:a4:f9:d8:cd:08:b6:11:8a:8c:b5:ff:b3:
6b:4b:d1:8d:f5:b6:02:5e:58:5a:ea:48:68:43:8e:
fa:8d:ba:48:37:8f:6d:c6:87:8c:e2:37:29:f1:eb:
63:76:6d:a4:e4:89:cb:97:04:c6:00:cb:50:db:3b:
fa:10:2f:7b:21:a3:fe:4f:0d:6e:07:4e:d4:60:29:
e0:97:a9:f1:2a:3c:b5:d4:ed:97:a5:2c:2c:24:dd:
d4:00:31:cd:5e:05:39:24:d6:6f:d9:f7:2a:91:a9:
87:fe:a0:17:74:c5:18:2c:74:6f:b2:77:63:90:e0:
09:49:12:f2:e0:35:c0:b4:f4:f0:c7:58:f0:db:05:
5b:94:34:b2:64:6a:38:b0:b7:d6:1d:e6:21:e6:b2:
54:3f:29:74:86:44:2b:89:73:ef:18:7c:52:ec:7c:
45:16:2d:bb:d3:e3:ed:28:71:59:75:d6:f1:c4:5c:
c3:56:ee:b0:9a:70:de:2b:72:f5:74:6b:e5:63:24:
f7:ee:e7:35:e5:6f:be:6e:ed:ba:3d:f0:a9:a3:3d:
a3:9a:29:45:01:29:8d:f8:51:c9:07:dd:83:72:3f:
d8:e3:5e:8d:0b:1f:e2:f7:58:a3:6a:57:a3:97:0f:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6C:C9:D7:A8:72:EA:53:64:90:F0:17:CC:D5:E3:DE:92:38:AA:73
X509v3 Authority Key Identifier:
keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ca:7e:a9:16:c4:15:23:dd:30:41:cf:61:b4:1b:26:91:52:
12:c3:16:79:90:9b:ea:44:bf:b9:1d:36:21:dd:a9:cb:cb:00:
b7:b1:3a:03:71:e3:fb:d4:d4:6a:b3:ac:54:c0:46:68:05:2b:
e6:c2:09:41:e5:55:10:93:78:d8:ec:4a:47:1e:5a:c5:c6:fc:
7b:ae:3a:e9:99:2e:c7:da:2f:a8:ee:eb:b8:52:b7:75:7a:90:
7c:a0:d6:39:f5:97:90:97:f2:dd:08:e5:0c:1f:96:a2:7f:dd:
55:d3:bb:35:c5:0a:29:ca:79:fd:e1:5c:5b:c4:4e:2b:d1:a4:
92:ef:18:14:b2:71:94:11:60:5b:c1:d9:51:77:23:9f:b3:8e:
13:8b:a7:6e:e8:2d:21:80:1c:42:2e:b5:e1:6f:51:d1:ea:9b:
29:42:7a:18:ef:7a:09:72:c3:32:6a:f1:7d:78:73:af:88:fb:
ca:e9:30:ad:9c:0e:45:f4:29:66:cf:8f:f6:90:77:43:b7:67:
8f:5c:ff:7b:18:ce:90:92:ba:27:93:1c:fd:34:ac:12:ba:18:
5e:b2:97:3e:e7:b9:75:88:46:87:28:6f:ed:d9:22:df:cf:38:
f3:35:77:9e:bf:2c:56:c0:9a:33:45:7f:ee:6b:1f:6d:af:92:
55:5f:9e:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI0REIxMTAvBgNVBAUTKDBEQzVDRTRBMjk0RjJDOTM4MEE5MTM1RUUxRjA1MzA3
MjhBNENEQTYwHhcNMjUxMjA2MTUwNTE2WhcNMjUxMjEzMTUwNTE2WjAYMRYwFAYD
VQQDEw02OTM0NDYyYy1kM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxAU5SMjyR096gjSQt19F1BKk+djNCLYRioy1/7NrS9GN9bYCXlha6khoQ476
jbpIN49txoeM4jcp8etjdm2k5InLlwTGAMtQ2zv6EC97IaP+Tw1uB07UYCngl6nx
Kjy11O2XpSwsJN3UADHNXgU5JNZv2fcqkamH/qAXdMUYLHRvsndjkOAJSRLy4DXA
tPTwx1jw2wVblDSyZGo4sLfWHeYh5rJUPyl0hkQriXPvGHxS7HxFFi270+PtKHFZ
ddbxxFzDVu6wmnDeK3L1dGvlYyT37uc15W++bu26PfCpoz2jmilFASmN+FHJB92D
cj/Y416NCx/i91ijalejlw8s5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtsydeo
cupTZJDwF8zV496SOKpzMB8GA1UdIwQYMBaAFA3FzkopTyyTgKkTXuHwUwcopM2m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjREQi81QzUwMjk2QzFE
QTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExKT0FxUk5lNGZCVEJ5aWt6
YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RjWE9TaWxQTEpPQXFSTmU0ZkJUQnlpa3phWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjREQi81QzUwMjk2QzFEQTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExK
T0FxUk5lNGZCVEJ5aWt6YVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsyn6pFsQVI90wQc9htBsmkVISwxZ5kJvqRL+5HTYh3anLywC3sToD
ceP71NRqs6xUwEZoBSvmwglB5VUQk3jY7EpHHlrFxvx7rjrpmS7H2i+o7uu4Urd1
epB8oNY59ZeQl/LdCOUMH5aif91V07s1xQopynn94VxbxE4r0aSS7xgUsnGUEWBb
wdlRdyOfs44Ti6du6C0hgBxCLrXhb1HR6pspQnoY73oJcsMyavF9eHOviPvK6TCt
nA5F9Clmz4/2kHdDt2ePXP97GM6Qkronkxz9NKwSuhhespc+57l1iEaHKG/t2SLf
zzjzNXeevyxWwJozRX/uax9tr5JVX56u
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:26:30 2025 by rpki-client