This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft
File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json)
Hash identifier: wBR2AD51XH5ykbqS3ajGioqwrbsHo69pwwgJvnOHAtc=
Subject key identifier: E7:F3:43:14:AB:B6:5D:76:82:D1:31:65:B7:92:AC:81:1A:EC:4F:07
Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02
Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702
Certificate serial: 94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft
Manifest number: 92
Signing time: Fri 05 Dec 2025 04:25:55 +0000
Manifest this update: Fri 05 Dec 2025 04:25:55 +0000
Manifest next update: Fri 12 Dec 2025 04:25:55 +0000
Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: gv2mvzTOixd5O5C679WVVYTYLm5vJ0AKDadi2DSIuo4=)
2: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: BMK5egNvgRPb4zFSiHjhQ8AJphJuXdtk94523bl6Tzs=)
3: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: waSBCEbcYlolsmBXhQe06r7v3tswwJfsDI5vXs6FVRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl
rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702
Validity
Not Before: Dec 5 04:25:55 2025 GMT
Not After : Dec 12 04:25:55 2025 GMT
Subject: CN=69325ed3-3026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:65:69:d3:a2:71:0f:3d:d1:ff:49:b2:b0:
21:23:47:76:9a:e9:67:f5:3f:30:bf:9d:9e:cc:65:
90:72:4a:0c:8a:82:f8:09:0d:fb:b9:ac:8e:40:e9:
32:4e:3d:7d:3e:a7:01:e7:94:c7:28:5e:25:42:1b:
2b:14:7b:64:aa:f2:88:6f:d3:91:62:1e:22:20:4f:
f4:3d:5b:58:fe:a3:0d:65:d2:40:c1:bd:80:85:15:
c0:0d:1f:d6:e8:04:85:10:81:06:50:7b:fb:04:2c:
30:fa:c2:ef:2d:ea:aa:c6:67:da:7b:95:22:06:af:
f0:2e:d2:e3:16:14:80:24:1f:c6:c5:c3:33:1d:29:
2d:a3:75:38:fc:62:ac:ca:92:53:ab:29:92:63:f1:
57:fd:7a:53:40:62:2b:9a:24:c1:f2:9e:5f:23:42:
ef:5b:19:ef:48:c6:ed:51:3e:3a:e5:68:cf:7b:c5:
d1:26:5d:28:2a:49:ec:a7:0b:e1:d7:83:ca:2b:a4:
c2:76:f7:51:d1:ad:57:a3:fc:db:85:bb:32:87:c5:
18:ab:e5:0b:06:1b:88:42:95:67:92:95:ae:df:03:
2c:4d:47:22:c8:71:05:c5:2f:a7:99:8b:e4:89:30:
f6:98:6c:af:14:01:3f:40:cd:81:e2:a3:41:51:ed:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F3:43:14:AB:B6:5D:76:82:D1:31:65:B7:92:AC:81:1A:EC:4F:07
X509v3 Authority Key Identifier:
keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:de:76:fd:60:3d:b8:f4:c5:06:8c:6f:ab:a8:4a:2f:76:3b:
d5:06:25:cb:5a:7d:80:be:29:3b:d7:2e:51:80:2b:6a:a6:d6:
92:2d:22:3f:13:9c:a4:71:97:1e:a1:39:1b:49:ea:68:ad:1d:
07:43:b2:ac:d7:60:31:29:61:70:f4:68:73:4d:87:1c:2b:37:
d2:72:65:70:27:60:f8:db:92:9a:3b:2e:96:d6:e2:37:65:ef:
b6:f7:80:f4:d8:33:66:73:c0:6f:f8:5f:a3:96:a2:4c:58:8d:
34:c0:a4:1b:15:76:47:05:1e:be:c6:4e:fd:70:5d:94:77:e8:
87:9c:f8:78:c4:61:b0:c2:bf:4c:94:37:95:a0:a0:c9:17:da:
d6:a6:95:c5:af:0e:8a:41:9b:74:99:c9:ae:db:82:71:c2:7a:
f1:fc:ba:3f:af:60:33:d9:8b:0a:b2:30:7c:a9:bf:3e:13:28:
5a:3a:1c:b6:4c:09:14:de:d5:e6:89:8a:f1:3d:7d:39:5b:39:
08:73:b2:20:f4:ac:5f:9c:86:52:cd:9d:19:20:68:f2:1c:db:
9c:ec:13:1c:ff:db:f6:aa:4e:3a:1c:51:81:17:19:d0:59:24:
e1:ad:3e:37:30:7d:e0:ac:ac:e7:bd:c7:21:ce:70:94:51:de:
71:f4:9d:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTZCNUQxMTAvBgNVBAUTKDBGRTA2MzI0RjE3ODdDOEYyMTRGQkVBRTY3RDg4NkQy
MkY4MTY3MDIwHhcNMjUxMjA1MDQyNTU1WhcNMjUxMjEyMDQyNTU1WjAYMRYwFAYD
VQQDEw02OTMyNWVkMy0zMDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArHBladOicQ890f9JsrAhI0d2muln9T8wv52ezGWQckoMioL4CQ37uayOQOky
Tj19PqcB55THKF4lQhsrFHtkqvKIb9ORYh4iIE/0PVtY/qMNZdJAwb2AhRXADR/W
6ASFEIEGUHv7BCww+sLvLeqqxmfae5UiBq/wLtLjFhSAJB/GxcMzHSkto3U4/GKs
ypJTqymSY/FX/XpTQGIrmiTB8p5fI0LvWxnvSMbtUT465WjPe8XRJl0oKknspwvh
14PKK6TCdvdR0a1Xo/zbhbsyh8UYq+ULBhuIQpVnkpWu3wMsTUciyHEFxS+nmYvk
iTD2mGyvFAE/QM2B4qNBUe2O1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfzQxSr
tl12gtExZbeSrIEa7E8HMB8GA1UdIwQYMBaAFA/gYyTxeHyPIU++rmfYhtIvgWcC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkI1RC85OEZEMUE0MkYx
QzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJOGhUNzZ1WjlpRzBpLUJa
d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NkI1RC85OEZEMUE0MkYxQzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJ
OGhUNzZ1WjlpRzBpLUJad0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQ3nb9YD249MUGjG+rqEovdjvVBiXLWn2Avik71y5RgCtqptaSLSI/
E5ykcZceoTkbSeporR0HQ7Ks12AxKWFw9GhzTYccKzfScmVwJ2D425KaOy6W1uI3
Ze+294D02DNmc8Bv+F+jlqJMWI00wKQbFXZHBR6+xk79cF2Ud+iHnPh4xGGwwr9M
lDeVoKDJF9rWppXFrw6KQZt0mcmu24Jxwnrx/Lo/r2Az2YsKsjB8qb8+EyhaOhy2
TAkU3tXmiYrxPX05WzkIc7Ig9KxfnIZSzZ0ZIGjyHNuc7BMc/9v2qk46HFGBFxnQ
WSThrT43MH3grKznvcchznCUUd5x9J0M
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:04:26 2025 by rpki-client