This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
File: rdfp-5VrvujwEu3elUJI2bXWWMY.mft (raw, json)
Hash identifier: 6HqLSGIUA1kgabZwomecaoUhvUeC6aS+PEqnJJTtenY=
Subject key identifier: 3C:BE:66:D3:69:53:0D:B0:96:B6:65:0E:0A:55:97:7A:86:F3:A6:8A
Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6
Certificate issuer: /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6
Certificate serial: 086C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
Manifest number: 0862
Signing time: Thu 04 Dec 2025 19:47:42 +0000
Manifest this update: Thu 04 Dec 2025 19:47:42 +0000
Manifest next update: Thu 11 Dec 2025 19:47:42 +0000
Files and hashes: 1: rdfp-5VrvujwEu3elUJI2bXWWMY.crl (hash: nfkMWRNL6YGq/G8NWWVBQroqXJ6E/fX/Rtoy8CoMFp0=)
2: A4711C4A23BA11EFA8BACF1BC4F9AE02.roa (hash: sI83SKQ1KIXzAI6k70Vt5zWHUlxvGed2ohcbiQweEnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl
rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2156 (0x86c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91330D0, serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6
Validity
Not Before: Dec 4 19:47:42 2025 GMT
Not After : Dec 11 19:47:42 2025 GMT
Subject: CN=6931e55e-ded6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:c1:6d:a5:bb:78:f9:01:63:fb:34:4c:ba:
92:65:81:1d:b1:34:59:88:f0:03:59:85:86:89:57:
b2:3b:88:ef:6c:44:98:fc:e0:fa:72:d4:79:6d:2e:
9f:7e:e7:46:c7:d0:aa:fd:3c:d4:9d:be:1f:3c:c0:
c5:66:b3:eb:36:6e:ec:b3:b7:80:d0:c6:2c:b8:43:
8e:2f:2b:f9:e3:87:68:0f:14:58:6d:ca:8d:bb:5a:
60:37:ee:41:e5:3e:d2:0b:e3:88:5f:cc:59:68:f5:
32:f9:6f:f1:a1:1d:93:29:86:d0:b0:48:ff:7c:50:
04:80:c1:c5:de:94:84:0d:5b:17:54:7c:a7:5c:32:
1b:56:ac:c0:21:9d:05:9c:01:8f:bf:f6:1c:94:61:
86:7e:13:fe:f9:75:72:77:0c:c5:92:fc:28:72:de:
01:72:91:5a:a7:64:8e:f3:49:e7:b7:a5:9f:f8:1c:
7e:e8:68:a4:83:95:10:50:7b:0a:9c:99:26:bf:8a:
0f:e5:e9:59:70:4d:87:a0:f3:65:88:6f:77:48:41:
67:43:8e:64:c0:13:00:64:26:f3:0c:0e:63:ec:72:
39:71:91:f1:1b:d0:3f:76:23:49:45:8e:38:90:e8:
e1:6e:4d:d4:48:d8:f5:99:4e:2c:65:20:b4:07:35:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BE:66:D3:69:53:0D:B0:96:B6:65:0E:0A:55:97:7A:86:F3:A6:8A
X509v3 Authority Key Identifier:
keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4f:61:06:aa:d1:76:c8:6f:5b:03:d8:b3:34:8a:b1:54:c4:
da:a4:a2:ff:f9:11:25:4b:ec:1e:34:ed:1e:3a:51:f9:bd:b2:
cc:d8:7e:b7:8b:a3:50:73:8c:89:fa:bb:3d:54:c7:01:70:67:
fa:74:68:a5:60:fc:c0:42:26:bd:62:15:2e:e8:46:2e:bb:c4:
15:99:0f:b5:5e:24:60:a4:d0:10:12:63:51:21:52:c1:79:ce:
56:77:60:36:40:63:7f:5e:1b:83:3f:09:54:55:20:e2:7a:4e:
8d:5b:cd:cd:89:bb:03:d1:34:eb:c9:65:8b:8d:63:3f:49:d0:
49:1a:65:0e:d3:21:80:ae:8a:e1:86:f1:0b:69:7d:2c:d7:1d:
b0:fb:e9:d6:eb:24:59:d6:b2:5c:e2:82:86:fd:74:08:2f:ea:
74:21:53:71:75:4c:29:53:9d:f0:10:fa:5e:42:66:6c:67:5b:
5a:a8:27:00:4d:7f:0b:2b:c8:ec:c3:87:48:14:52:cd:c7:5a:
8a:be:bf:c7:d4:a9:eb:d9:d7:d4:45:9a:72:c0:8c:61:a2:ec:
37:c4:9f:a1:69:c8:11:d2:96:b6:9f:e7:4e:a3:3c:08:94:e4:
17:78:21:b4:a1:75:76:f7:2c:15:4a:67:13:e2:e3:37:b2:9f:
fb:81:12:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:23:34 2025 by rpki-client