This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
File: dK62Py8dqVfWWCCWT_ed8PWTgAw.mft (raw, json)
Hash identifier: MIWsAFfrA2VCD2sB55vdSOWmpowh2ZKTz6/JMPxQjIU=
Subject key identifier: CF:FA:6E:50:C7:2E:8C:98:9D:72:0B:84:32:0E:68:CD:BB:BC:14:CA
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Certificate issuer: /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial: 02D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
Manifest number: 02A8
Signing time: Thu 04 Dec 2025 23:58:41 +0000
Manifest this update: Thu 04 Dec 2025 23:58:40 +0000
Manifest next update: Thu 11 Dec 2025 23:58:40 +0000
Files and hashes: 1: dK62Py8dqVfWWCCWT_ed8PWTgAw.crl (hash: rRytllI4XO53vA9tbIE4G8rfpPEjMlkHhoO5MXqAjGI=)
2: 73FB6A56C81111EF84B47370C4F9AE02.roa (hash: 19Q9ciLF2mqVCutKu+ubSmagDMhh0FBpvKCM1p2gos4=)
3: 1E5E9AEAC81211EFB612B471C4F9AE02.roa (hash: /7O0svxINSlS4h6CHNvkkVyolkM0J8xKIkWquXRaHIo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Validity
Not Before: Dec 4 23:58:40 2025 GMT
Not After : Dec 11 23:58:40 2025 GMT
Subject: CN=69322030-eec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:d3:af:f8:7e:c5:44:93:2c:75:84:e6:68:
15:f3:26:4b:25:50:f6:4f:0e:3d:0a:61:52:93:64:
39:03:1e:45:c9:dd:d6:23:6b:ca:6f:5b:52:a0:b4:
bc:27:35:5e:08:32:4d:e9:2d:ef:40:9d:f3:2d:b7:
8d:97:0f:40:70:88:89:56:75:9e:b0:7e:4d:a6:ed:
a8:74:94:dc:1c:2f:f3:6e:66:bc:62:90:35:47:45:
bc:ad:72:15:77:43:f6:82:5e:88:51:5d:39:ff:80:
b7:6d:e0:bf:8a:ab:eb:e0:2d:85:61:3c:9c:ca:1e:
d0:d6:ea:d7:03:67:f8:53:b1:4f:21:ce:5b:5b:b8:
b4:7b:47:2e:43:f4:9b:af:7d:ca:4f:9a:4b:80:8f:
db:53:08:0d:f1:37:df:66:45:00:09:48:fd:32:d0:
2d:92:3e:a0:33:57:12:93:bf:eb:e7:42:15:fa:93:
98:17:9c:ee:7f:f1:62:2e:f5:df:17:e4:af:46:d9:
d4:15:be:36:c0:84:a4:c8:6e:30:fd:4f:9b:d8:b7:
48:c2:8b:34:31:f7:30:ba:ee:c0:74:17:0a:05:26:
5b:d2:1d:bc:08:23:fd:65:a1:9e:9a:8f:72:7b:20:
8a:b4:ae:54:12:df:cb:6e:83:dd:1b:1c:59:6d:1b:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FA:6E:50:C7:2E:8C:98:9D:72:0B:84:32:0E:68:CD:BB:BC:14:CA
X509v3 Authority Key Identifier:
keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:20:3d:fa:f2:7b:30:58:79:0d:18:45:c2:5b:85:c9:35:15:
d2:0a:af:4a:33:59:ef:49:1d:d6:c1:63:42:f3:27:2d:e9:e6:
76:08:c6:b6:59:40:bf:36:7e:3b:a6:02:23:84:f0:79:9a:ba:
b8:95:4e:04:ac:b7:34:ae:fa:44:6b:ab:c7:0f:b6:cb:d8:80:
ab:41:bc:ea:0f:b5:c9:8d:70:39:f5:4d:1c:60:54:ce:a3:65:
9b:ec:bb:f7:89:af:25:67:77:de:b3:48:97:cf:0b:91:4c:12:
1e:35:c2:a2:42:ff:97:53:4e:bd:33:ee:7f:da:87:f1:7f:4b:
86:33:ca:be:74:3b:29:be:c6:46:91:2f:2d:09:b2:52:6b:2d:
1b:62:15:4a:df:1e:f8:43:90:3a:c9:18:0b:b2:10:cb:cd:b6:
2e:03:fd:5e:2d:41:9f:d4:bc:41:49:13:47:09:9a:7e:53:b4:
a1:96:19:f0:2b:e6:7a:40:5e:4c:fb:79:3d:eb:cd:f1:f4:15:
48:42:b5:41:b1:a9:a2:bc:86:54:34:b9:06:5c:5b:af:6f:ee:
c6:3a:f3:b5:fd:ef:b6:60:87:9b:03:f6:af:53:8e:b5:53:ff:
c1:57:d9:ee:ff:2d:ad:f0:8f:5d:f4:40:ea:bd:01:7b:2f:4d:
7b:a1:17:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:23:06 2025 by rpki-client