This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
File: dUx6CJILdd5uGzejtUuNUyXY33M.mft (raw, json)
Hash identifier: ZTowflRs8FjR4HIgL3jn8wlITsAXwLYDvejshM1AZ+4=
Subject key identifier: F2:4B:05:78:97:28:22:92:78:1C:F2:45:DD:24:06:E9:D9:64:7E:EB
Authority key identifier: 75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73
Certificate issuer: /CN=A9160C86/serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
Certificate serial: 0414
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
Manifest number: 040C
Signing time: Thu 04 Dec 2025 22:55:03 +0000
Manifest this update: Thu 04 Dec 2025 22:55:02 +0000
Manifest next update: Thu 11 Dec 2025 22:55:02 +0000
Files and hashes: 1: dUx6CJILdd5uGzejtUuNUyXY33M.crl (hash: 9bN9SgeGYzl9jH9j3r1SewOUegqN9E+WYu3ynEU3y6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.crl
rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1044 (0x414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C86, serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
Validity
Not Before: Dec 4 22:55:02 2025 GMT
Not After : Dec 11 22:55:02 2025 GMT
Subject: CN=69321147-6cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e0:d0:40:da:1c:90:2f:fe:2e:24:c4:a4:25:
5c:d5:97:6e:ff:95:4e:ff:67:e4:f7:78:db:8a:84:
a6:71:a8:69:a9:78:8f:34:94:c2:7d:da:23:46:18:
7a:70:39:c6:64:3d:3e:fb:9e:78:09:24:f4:24:7a:
f2:7f:ce:93:06:83:0f:83:32:d4:ae:0d:39:94:cd:
56:3d:0c:15:b7:f2:52:f9:34:57:3e:8d:d1:58:50:
06:eb:4e:39:e2:24:96:3a:95:c5:bd:e7:fc:21:15:
0f:3f:9a:d8:6e:1b:1e:74:6d:5b:3e:c6:58:3f:53:
cd:ec:0b:f4:17:90:b8:5d:e8:28:ce:cc:32:09:85:
88:53:af:b5:ee:7d:e7:05:eb:a8:a2:5f:e6:1e:b0:
94:5a:22:0d:0c:ce:80:42:7b:35:2f:26:44:fd:f3:
bf:1a:5a:20:2f:35:68:84:e0:06:a4:7e:78:3e:0f:
0b:f1:6a:ad:04:23:b4:21:90:23:71:67:ad:c2:37:
42:f1:d1:bb:1d:34:74:1d:f1:f6:f2:72:34:6b:e0:
35:a0:ab:29:34:e1:c3:b9:68:39:a9:0e:75:cc:7c:
a9:eb:89:e2:f1:ed:58:b4:81:70:f6:ad:4b:6a:37:
17:83:0c:57:91:42:d1:7a:88:ab:bd:b4:37:5a:16:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4B:05:78:97:28:22:92:78:1C:F2:45:DD:24:06:E9:D9:64:7E:EB
X509v3 Authority Key Identifier:
keyid:75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:57:aa:c2:c0:4d:36:e2:3d:c5:b0:d6:5f:b3:58:36:8f:5f:
53:44:40:07:c5:94:c0:03:d1:d9:7e:d3:d3:c5:58:36:f1:95:
2c:4c:bc:c5:c9:5b:4d:b8:57:19:5c:a6:55:d7:6c:68:44:ce:
1b:93:f5:7f:fb:58:d0:ab:f0:e9:38:53:0b:46:ba:d0:00:4f:
67:8f:0f:50:16:1d:7e:1d:60:db:0b:84:4f:91:ba:6d:84:9c:
07:fb:18:c7:ad:8a:cc:e6:8f:5f:a1:eb:6f:d9:e0:49:85:87:
dc:05:c6:4e:32:52:7f:fd:06:33:3f:79:a4:8a:2d:2b:7f:4b:
3b:b9:47:20:a9:9b:85:b6:80:0e:f8:08:61:7b:ec:39:30:95:
ff:de:d1:e8:6a:0b:51:5d:92:4d:04:32:4c:9b:19:b0:db:5c:
85:ba:4e:34:e2:44:6c:b0:ee:5b:be:02:9a:28:4e:6e:6d:98:
6a:3b:49:d8:a8:ae:a3:25:5c:b9:29:2f:2d:67:0a:11:f2:1f:
46:80:f9:4b:3f:66:cf:43:37:24:78:af:a9:0c:37:ed:8a:e3:
9e:bc:9d:09:4a:21:56:00:ae:28:bf:ce:66:61:7f:2f:18:bf:
f4:a7:24:3d:6a:79:73:ef:78:82:7b:5f:fd:f9:0d:03:9f:03:
fe:b1:96:30
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBDODYxMTAvBgNVBAUTKDc1NEM3QTA4OTIwQjc1REU2RTFCMzdBM0I1NEI4RDUz
MjVEOERGNzMwHhcNMjUxMjA0MjI1NTAyWhcNMjUxMjExMjI1NTAyWjAYMRYwFAYD
VQQDEw02OTMyMTE0Ny02Y2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6ODQQNockC/+LiTEpCVc1Zdu/5VO/2fk93jbioSmcahpqXiPNJTCfdojRhh6
cDnGZD0++554CST0JHryf86TBoMPgzLUrg05lM1WPQwVt/JS+TRXPo3RWFAG6045
4iSWOpXFvef8IRUPP5rYbhsedG1bPsZYP1PN7Av0F5C4XegozswyCYWIU6+17n3n
Beuool/mHrCUWiINDM6AQns1LyZE/fO/GlogLzVohOAGpH54Pg8L8WqtBCO0IZAj
cWetwjdC8dG7HTR0HfH28nI0a+A1oKspNOHDuWg5qQ51zHyp64ni8e1YtIFw9q1L
ajcXgwxXkULReoirvbQ3WhaYuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJLBXiX
KCKSeBzyRd0kBunZZH7rMB8GA1UdIwQYMBaAFHVMegiSC3Xebhs3o7VLjVMl2N9z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM4Ni84M0NDNDlFMDk5
RjMxMUVDQjU4RUM3MEVDNEY5QUUwMi9kVXg2Q0pJTGRkNXVHemVqdFV1TlV5WFkz
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RVeDZDSklMZGQ1dUd6ZWp0VXVOVXlYWTMzTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEM4Ni84M0NDNDlFMDk5RjMxMUVDQjU4RUM3MEVDNEY5QUUwMi9kVXg2Q0pJTGRk
NXVHemVqdFV1TlV5WFkzM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAOV6rCwE024j3FsNZfs1g2j19TREAHxZTAA9HZftPTxVg28ZUsTLzF
yVtNuFcZXKZV12xoRM4bk/V/+1jQq/DpOFMLRrrQAE9njw9QFh1+HWDbC4RPkbpt
hJwH+xjHrYrM5o9foetv2eBJhYfcBcZOMlJ//QYzP3mkii0rf0s7uUcgqZuFtoAO
+Ahhe+w5MJX/3tHoagtRXZJNBDJMmxmw21yFuk404kRssO5bvgKaKE5ubZhqO0nY
qK6jJVy5KS8tZwoR8h9GgPlLP2bPQzckeK+pDDftiuOevJ0JSiFWAK4ov85mYX8v
GL/0pyQ9anlz73iCe1/9+Q0DnwP+sZYw
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:09:57 2025 by rpki-client