This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
File: dF_08GOrXRceBSUbMeKUpLx5c7E.mft (raw, json)
Hash identifier: Z/T4gH2Ynz7mbectuDeFT55wKKK7m9l11boLGkEdHcQ=
Subject key identifier: 68:74:E5:5B:73:9B:6F:22:17:C6:03:1C:BC:02:62:4F:F1:1A:11:00
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 0ABD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
Manifest number: 09C2
Signing time: Thu 04 Dec 2025 19:38:24 +0000
Manifest this update: Thu 04 Dec 2025 19:38:24 +0000
Manifest next update: Thu 11 Dec 2025 19:38:24 +0000
Files and hashes: 1: dF_08GOrXRceBSUbMeKUpLx5c7E.crl (hash: kVaO9wVr5d8EVI7jxeoyFA9vkuJCHK/G5YIWs7Sze3c=)
2: E0039822DDDD11EF84C13A22C4F9AE02.roa (hash: lbNcfGSFcHGLdiGqKxJXuzYk9QV0WuySnsT7ZvlBLqg=)
3: 4E6E940C612211EB8166284BC4F9AE02.roa (hash: a5J9PDQVvcHeLKxKb14WDmG3jv/OMTIc+XWYxdwGt6o=)
4: E94D73BE291D11EF86792873C4F9AE02.roa (hash: dowWmS2+GrA/SccPksGdC382kVU9uvWZVM3rSJsXis4=)
5: 315D1630DDD911EFBAA4D977C4F9AE02.roa (hash: NUkuchRnyJjRENiwi+cYcDAlphVxU0XuijXJvH5rkTM=)
6: 4020FFBCF80111ECAC7ADB0CC4F9AE02.roa (hash: sfhbrvmWZN0HTJsAuG8NcAIzTv9LRqIxX3DkvwLrq9Y=)
7: B80A9FF60B4111EF919B0B7DC4F9AE02.roa (hash: buhZUfibEPWavi+od5Sw2bq6zRhsMhR3vDnZi9BT1tE=)
8: 55124B02F3C511EFAD4ACE37C4F9AE02.roa (hash: WktupYVzkCjg2qhgISNBXZORICo8JzqJSoqbAy2Hf4Y=)
9: 20AF7940433811EFA525DA49C4F9AE02.roa (hash: 2oFRAIGJwFsX3KWWcFiv6OrfAOAa+Hq3KH8AUmaTYqo=)
10: 7C9D0D66546811EBBF7C8469C4F9AE02.roa (hash: JOvybgg2jcuOGP5t9np4qRPwbNxkY6LW1FTtlslJbQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2749 (0xabd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Dec 4 19:38:24 2025 GMT
Not After : Dec 11 19:38:24 2025 GMT
Subject: CN=6931e330-09d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:49:7b:a4:00:88:34:d1:b3:a5:dd:e1:69:
46:e1:e8:7b:26:e8:64:33:f7:9d:aa:e3:c9:92:08:
5d:fa:12:54:c5:49:71:e6:2f:21:06:33:a3:99:58:
a1:7a:38:be:e4:6b:b7:3d:26:1e:64:36:8a:0a:4a:
89:08:70:27:9c:a6:4c:c8:8d:47:1e:8d:76:66:14:
dd:67:65:6a:8b:22:90:57:4f:2d:c6:58:ea:36:50:
68:6e:d2:7b:32:80:d0:75:1d:a9:95:94:4c:75:9c:
27:31:e2:0f:51:c5:92:ea:6b:3d:3a:03:19:4e:eb:
86:e1:48:05:75:ab:70:75:ea:24:5f:12:e8:1c:ca:
1e:72:78:d4:d6:3b:e8:9c:f2:11:95:6a:8f:b1:a0:
12:4e:35:42:71:d3:8f:15:46:76:50:84:60:7b:a9:
a4:15:64:d1:d0:fa:a0:81:4b:fe:c2:42:42:e8:bb:
20:46:40:2d:c6:c9:40:c0:14:db:71:cd:68:b8:1b:
28:c6:f4:ed:e1:a5:fb:46:c4:d6:96:c6:b8:3e:27:
5d:a0:3f:12:5a:32:42:c1:5b:4f:39:b1:c1:56:ad:
c1:fc:8a:39:a1:18:44:c0:08:f0:8e:95:74:b1:c2:
f8:10:67:dd:96:44:e7:be:ed:5c:fa:d1:96:3c:b0:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:74:E5:5B:73:9B:6F:22:17:C6:03:1C:BC:02:62:4F:F1:1A:11:00
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:c4:90:5b:97:5f:55:96:3c:2a:ab:31:ff:b8:70:b2:df:75:
9d:d9:07:da:65:0f:15:60:cc:33:ed:56:c1:88:2f:39:40:ac:
b0:67:95:07:2c:e6:19:07:1c:bf:1d:32:4e:87:ab:7f:11:92:
01:69:2d:ba:ac:8c:37:8a:4e:7c:69:4b:5d:0f:5c:5b:fc:98:
88:4e:56:3e:fb:21:9a:0f:89:72:e0:7a:ed:09:b4:10:df:a0:
99:57:c5:69:53:1b:2b:73:e7:61:ec:81:4c:f2:92:3f:f3:33:
8f:bd:21:cc:b1:c0:cf:9b:69:0c:b4:a8:5f:b0:28:ae:74:c3:
34:bc:71:42:3b:4a:23:04:65:0f:14:65:3b:c7:83:3a:c4:d9:
c1:a5:45:ce:06:a5:10:4d:4d:a3:51:91:f6:e4:3a:61:00:f9:
42:a2:57:50:48:1f:e9:7f:b9:5a:c0:3f:b1:e0:64:26:d5:f5:
64:aa:e7:64:bb:2b:73:1c:66:d6:69:72:1a:27:c5:93:ef:c2:
7a:0b:ed:16:14:ba:91:d9:14:66:72:05:8a:48:45:8a:4c:32:
da:86:b9:2d:a2:78:91:dd:3e:72:f6:fb:b5:d3:6b:ad:a6:87:
87:6b:37:90:3f:0a:5d:82:41:a5:8f:11:83:09:f4:be:db:af:
b1:d9:57:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:01:37 2025 by rpki-client