This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft
File: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft (raw, json)
Hash identifier: p3HO6kBJ7yrj+quOdx15sbuO6NQLtVb5fM3rotQWffs=
Subject key identifier: 7E:F9:8A:47:9C:B9:54:CE:2D:EA:D7:19:03:EF:AB:11:CD:1F:18:11
Authority key identifier: F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC
Certificate issuer: /CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft
Manifest number: D1
Signing time: Fri 05 Dec 2025 03:45:09 +0000
Manifest this update: Fri 05 Dec 2025 03:45:08 +0000
Manifest next update: Fri 12 Dec 2025 03:45:08 +0000
Files and hashes: 1: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl (hash: +Nv8jHgLbycAqCnZWJ3Rpu70LgFmSa+/xJzGqhgb3TA=)
2: 10B69CB69A7811EFB88E9513C4F9AE02.roa (hash: h0Ix2v/co1mQt8N7/1X7T+jzKKiC9C9BGQ0eCb34Oxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl
rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DD87, serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC
Validity
Not Before: Dec 5 03:45:08 2025 GMT
Not After : Dec 12 03:45:08 2025 GMT
Subject: CN=69325545-d166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:78:fd:f6:04:ae:2d:1a:a9:f3:4f:a4:03:5f:
5c:fc:1c:eb:70:61:35:5f:56:17:b4:8e:4b:14:84:
1e:cb:d5:09:0b:01:f2:e0:52:29:ea:28:ab:62:2d:
c4:b7:bf:af:73:70:f5:33:21:3b:8b:ea:f1:a9:95:
cf:84:65:88:fc:c4:d1:50:70:8a:84:b5:f0:8e:f0:
34:aa:60:1a:9b:b5:f1:87:2d:bc:a3:27:be:4a:d4:
e9:93:a6:45:68:80:57:ab:cf:c1:91:0d:2d:9c:d8:
14:5c:cb:a9:2c:ef:7f:18:2f:ee:6b:d5:d6:5c:45:
aa:c8:56:da:af:c5:30:0d:10:67:fa:1c:67:86:29:
1d:1a:f1:3c:3c:1e:16:d9:ad:2d:7d:b9:21:5b:08:
aa:b2:52:3c:be:4e:55:c6:ac:c3:ea:f8:a2:19:10:
b2:e7:37:cb:3b:fc:53:15:e7:a9:d7:60:2c:18:3b:
0a:dc:c1:46:de:4b:f9:51:1c:a2:18:ba:d2:cf:86:
f0:20:33:ca:47:34:24:39:bb:7a:8c:9b:66:e0:8f:
29:f3:eb:b3:7f:51:fe:1a:8b:33:e9:e1:e8:c0:57:
94:3f:d8:0b:f3:d5:55:a9:75:d8:82:77:f3:a8:20:
01:4c:2e:13:bd:66:96:bc:18:f4:a2:11:82:c5:28:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F9:8A:47:9C:B9:54:CE:2D:EA:D7:19:03:EF:AB:11:CD:1F:18:11
X509v3 Authority Key Identifier:
keyid:F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:50:91:f4:15:8b:cc:e6:58:58:0e:5b:be:38:27:59:73:75:
07:62:4d:d7:f6:cb:f4:fc:a0:a1:3d:e0:8d:0d:69:12:90:c5:
79:93:9e:3b:a7:b6:a8:86:f2:ab:a4:01:0e:9f:d6:cc:82:4a:
86:4e:4e:62:6b:0a:bb:02:7c:28:fc:b4:ff:4d:b3:00:24:43:
82:6c:37:2b:9a:09:22:31:a1:be:4a:07:2c:92:c1:0f:fd:a0:
f7:de:b5:53:24:ee:7d:d9:1a:fa:5c:e4:99:a3:e5:e0:36:9e:
cf:f7:39:a1:cd:d5:b2:ae:f7:d7:3f:4e:66:de:b3:f9:4b:7d:
19:12:18:db:13:c5:7b:cd:c0:a3:ff:e5:7f:0b:42:50:5f:b0:
db:cd:ee:50:9a:85:2a:b8:1e:60:b1:ed:6d:bb:d7:c7:d6:d8:
f7:53:05:a4:8e:50:d8:32:5f:96:34:82:04:04:fd:04:31:bb:
fe:b6:1e:ed:69:5a:9a:9e:77:83:6b:7b:bf:09:ba:d9:a1:fb:
49:5a:1b:14:3a:0c:79:e1:ab:70:bc:54:ac:11:8c:a4:52:5f:
58:a4:07:39:22:c0:35:61:13:b6:78:e2:4a:d1:f9:be:0b:f5:
05:f3:3f:a2:84:60:e8:9b:5c:03:23:7d:db:76:24:f5:58:d9:
16:af:e8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:09:57 2025 by rpki-client