This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
File: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json)
Hash identifier: vjS7f6ZvV1WGxfqvxCgisrziKH6BLxUOgy1jnd8N83o=
Subject key identifier: D7:F5:7B:2A:A6:59:D8:D3:B8:2F:59:35:97:7D:DA:C8:FE:26:30:DC
Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
Certificate issuer: /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
Manifest number: 0153
Signing time: Fri 05 Dec 2025 02:22:13 +0000
Manifest this update: Fri 05 Dec 2025 02:22:13 +0000
Manifest next update: Fri 12 Dec 2025 02:22:13 +0000
Files and hashes: 1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: 5Vpw5YPQxUD22qoerQKBFWfsv603HNqRHwG3dTYf6fs=)
2: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: /tXzmPJpbFpT9Ng+OXe5R9OW1iH2k8GOdLq7rPEZELc=)
3: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: C5+FDRdQyQalYR2P8dEPuBXkPFwg+NEWC9TQl/hqp1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Validity
Not Before: Dec 5 02:22:13 2025 GMT
Not After : Dec 12 02:22:13 2025 GMT
Subject: CN=693241d5-4657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:0f:33:a5:cd:7a:ea:ef:7e:81:cf:4d:2d:
43:a3:72:ff:ea:3f:d7:df:98:b1:d3:24:f7:25:8d:
be:5a:97:0c:aa:4a:fe:dd:e7:0a:f1:ce:52:ca:65:
d2:47:65:33:b7:b8:d9:33:ee:94:b5:93:bd:43:e4:
5d:1a:8c:a3:01:82:9e:66:8d:dc:bc:17:6b:e5:78:
aa:32:69:0f:df:70:f2:23:fe:5e:4b:d0:30:2a:15:
87:44:4b:02:2b:e4:3c:4a:b1:4d:04:30:42:c2:c9:
7c:05:dc:c6:9b:09:1a:fe:44:85:0d:19:e1:f1:12:
64:c3:7c:ec:c2:5c:e0:28:ce:d2:3f:4c:03:72:17:
b7:ff:13:7b:69:51:a2:73:1c:6c:86:d4:65:b7:0c:
b9:13:5a:11:32:73:1c:ad:6b:eb:8f:29:24:66:cd:
5c:66:eb:ad:d4:2e:df:82:05:6c:51:13:01:c3:85:
0e:2d:b9:b4:8d:ec:91:15:3b:a5:14:0e:28:87:e7:
2f:d2:e8:29:6a:78:67:5d:62:d9:3f:67:a6:f7:c0:
8c:f4:60:3a:92:a0:ff:a7:af:76:de:f7:ac:a8:f5:
5e:27:44:b2:ea:cd:54:3e:89:3a:44:74:b3:53:4b:
43:22:f0:15:3d:95:78:59:a8:60:ce:bb:64:32:a8:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F5:7B:2A:A6:59:D8:D3:B8:2F:59:35:97:7D:DA:C8:FE:26:30:DC
X509v3 Authority Key Identifier:
keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:07:f5:6b:09:ad:95:84:e7:1c:2f:26:35:c3:2e:2e:99:21:
29:17:20:10:57:6f:a5:dc:84:6d:0c:a4:0f:51:8e:b2:22:0b:
4d:47:0c:da:23:bb:32:7e:f7:84:a9:78:c3:8f:ce:f3:fc:54:
0a:24:a5:9a:ab:17:77:bb:61:79:9b:90:f6:b9:89:36:a1:25:
27:19:d0:00:2f:3b:15:89:6b:1f:45:22:03:39:5e:04:7b:cb:
dd:8e:98:e6:bb:bf:ac:69:12:53:87:5a:90:4b:73:c4:1e:28:
25:c1:67:0e:b6:2c:46:fa:2c:e3:64:29:79:87:c8:7a:92:48:
10:db:ae:3a:e1:4e:e1:f5:6d:5e:16:c1:58:d1:46:33:f2:f1:
92:63:90:ce:92:ea:3a:be:ca:85:03:71:09:7c:e8:ac:d7:52:
8f:0e:b7:1c:0f:76:44:06:25:bd:16:ae:73:0a:c9:03:e8:f4:
fc:b8:25:89:e4:d5:b1:7f:73:d0:5e:bd:50:2b:43:0f:e9:3c:
2c:3c:e8:51:21:74:ef:38:ae:e5:23:86:64:5e:65:83:6a:dc:
5c:58:08:11:a3:96:20:8e:a8:c5:ee:24:31:ba:98:5a:b5:06:
b1:cf:bc:c7:8e:61:f6:3b:10:d3:f4:fa:76:65:4c:56:e7:a9:
6a:1b:c4:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM2NTExMTAvBgNVBAUTKDc2RDZGQTdDRjlCRjhFNDE1RjJGNDI2MTlCODA0Mjg4
NzYzRTY3QTIwHhcNMjUxMjA1MDIyMjEzWhcNMjUxMjEyMDIyMjEzWjAYMRYwFAYD
VQQDEw02OTMyNDFkNS00NjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyvEPM6XNeurvfoHPTS1Do3L/6j/X35ix0yT3JY2+WpcMqkr+3ecK8c5SymXS
R2Uzt7jZM+6UtZO9Q+RdGoyjAYKeZo3cvBdr5XiqMmkP33DyI/5eS9AwKhWHREsC
K+Q8SrFNBDBCwsl8BdzGmwka/kSFDRnh8RJkw3zswlzgKM7SP0wDche3/xN7aVGi
cxxshtRltwy5E1oRMnMcrWvrjykkZs1cZuut1C7fggVsURMBw4UOLbm0jeyRFTul
FA4oh+cv0ugpanhnXWLZP2em98CM9GA6kqD/p6923vesqPVeJ0Sy6s1UPok6RHSz
U0tDIvAVPZV4WahgzrtkMqhtuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNf1eyqm
WdjTuC9ZNZd92sj+JjDcMB8GA1UdIwQYMBaAFHbW+nz5v45BXy9CYZuAQoh2Pmei
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzY1MS8zMzRGNjhDOENF
RUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2prRmZMMEpobTRCQ2lIWS1a
NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R0YjZmUG1famtGZkwwSmhtNEJDaUhZLVo2SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzY1MS8zMzRGNjhDOENFRUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2pr
RmZMMEpobTRCQ2lIWS1aNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXB/VrCa2VhOccLyY1wy4umSEpFyAQV2+l3IRtDKQPUY6yIgtNRwza
I7syfveEqXjDj87z/FQKJKWaqxd3u2F5m5D2uYk2oSUnGdAALzsViWsfRSIDOV4E
e8vdjpjmu7+saRJTh1qQS3PEHiglwWcOtixG+izjZCl5h8h6kkgQ26464U7h9W1e
FsFY0UYz8vGSY5DOkuo6vsqFA3EJfOis11KPDrccD3ZEBiW9Fq5zCskD6PT8uCWJ
5NWxf3PQXr1QK0MP6TwsPOhRIXTvOK7lI4ZkXmWDatxcWAgRo5YgjqjF7iQxupha
tQaxz7zHjmH2OxDT9Pp2ZUxW56lqG8QB
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:21:24 2025 by rpki-client