This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
File: DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json)
Hash identifier: faC0NsSpin64FBtZFh1J6qy4zlAZFvRgO0bkWrCRzx0=
Subject key identifier: CE:4D:A6:A3:13:7D:8F:68:77:5A:21:C4:CA:02:65:B9:E5:65:CC:DA
Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Certificate serial: 0C6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
Manifest number: 0C5E
Signing time: Sat 06 Dec 2025 17:56:17 +0000
Manifest this update: Sat 06 Dec 2025 17:56:17 +0000
Manifest next update: Sat 13 Dec 2025 17:56:17 +0000
Files and hashes: 1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: PhHt1uvbu1ZFLTZyAUk1Kc5fSCVY1fndjyTzss75EWw=)
2: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: wzXZlkexc5sjvRQO55tIhvKG7H8TjPJiYMXMwF75NaU=)
3: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: s9oCtHipBgMZ52edn5qYpaiYwsdO5HeOHXixZ4PKFRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3181 (0xc6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Validity
Not Before: Dec 6 17:56:17 2025 GMT
Not After : Dec 13 17:56:17 2025 GMT
Subject: CN=69346e41-185f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:37:14:86:0d:89:74:ff:74:f1:6e:00:0e:
15:f2:f1:50:18:fb:0a:64:87:47:98:16:b0:65:22:
25:62:f9:6e:68:3a:a3:bf:d2:75:48:5d:ad:a7:e6:
c0:dd:f5:d0:75:ca:27:55:27:30:fe:c8:6d:35:6d:
cb:3e:61:e3:3e:98:f3:33:27:bf:7d:c0:15:82:f2:
40:eb:37:07:22:e4:ad:c0:e6:62:96:a9:de:b0:b2:
74:e7:ec:e3:8f:8e:a8:e2:40:69:46:1d:3a:88:77:
dc:53:5c:6d:db:a2:a0:3b:d7:d1:6f:16:ed:21:3e:
54:ec:cc:d7:51:87:9b:3a:60:76:f5:84:70:6b:09:
de:b1:1b:85:05:f9:ca:97:58:af:a3:14:04:32:d0:
a9:79:87:a4:23:ca:46:c8:bc:0b:29:90:07:aa:6d:
6d:39:48:50:cc:ee:e1:0a:93:f6:da:5d:e8:8a:23:
f0:c8:96:00:2e:23:4d:db:6c:a7:c0:7f:83:ab:82:
29:a3:a2:16:ad:1e:9c:1d:2c:f4:e3:d5:45:16:fa:
40:1a:13:19:16:68:9b:39:e2:5c:d0:d5:88:7a:58:
9d:73:d0:fa:75:25:10:1a:dd:6f:a5:26:07:59:60:
7e:18:13:4a:86:41:7b:cd:ac:2b:07:d3:8f:c2:14:
54:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4D:A6:A3:13:7D:8F:68:77:5A:21:C4:CA:02:65:B9:E5:65:CC:DA
X509v3 Authority Key Identifier:
keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f8:be:fc:da:fd:cf:b1:e9:f8:9d:2c:dd:63:bb:93:f6:52:
9e:51:18:93:1b:47:92:90:14:2c:76:79:b6:cc:89:d9:7d:3c:
b6:1f:aa:34:28:ab:77:a3:b9:bf:cd:6f:75:64:ad:73:09:6f:
47:16:cf:33:97:fb:04:81:2e:67:1b:b8:72:0c:ec:97:8e:7a:
29:17:dd:a2:88:5b:f5:8f:56:e7:81:08:71:13:ba:e0:3a:77:
3d:2c:d1:d9:d3:a4:21:cb:ed:2a:70:87:31:0b:d1:7b:8e:5f:
b0:39:30:7a:59:b9:43:47:de:47:fa:93:28:11:18:ef:74:53:
0c:c4:da:36:58:f0:87:a4:69:d0:fc:34:a3:32:04:6b:ce:c4:
bb:20:7d:30:bb:01:e6:98:c7:82:48:31:1e:ba:79:ac:25:3e:
77:8d:97:e0:14:45:03:f6:01:27:7a:df:4e:f5:54:df:13:34:
ce:90:36:ac:52:da:6d:89:85:c9:e4:71:32:8c:48:2d:70:3b:
62:a3:9e:86:b4:3f:a2:6f:ec:ff:60:6a:d2:6e:d9:bf:a7:06:
50:37:e1:03:5f:ed:c9:3c:ea:7d:e9:f8:b4:72:9a:2e:15:da:
ce:f7:c6:3c:b2:ef:45:7b:69:d6:17:41:86:f4:86:fe:49:f4:
ef:84:f1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:13:48 2025 by rpki-client