This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
File: _D34EL_Cm_HPvwqvpWOX65tMq3c.mft (raw, json)
Hash identifier: C3xTEe1uDuoQiotE38vfd+HhmKklyl6+Y33z+fVNCDQ=
Subject key identifier: 0D:29:F8:9E:35:EE:72:3A:3E:3F:59:04:09:70:8A:C6:CF:D8:61:A7
Authority key identifier: FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77
Certificate issuer: /CN=A916269D/serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77
Certificate serial: 0BBF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
Manifest number: 0BB8
Signing time: Sat 06 Dec 2025 18:14:42 +0000
Manifest this update: Sat 06 Dec 2025 18:14:42 +0000
Manifest next update: Sat 13 Dec 2025 18:14:42 +0000
Files and hashes: 1: _D34EL_Cm_HPvwqvpWOX65tMq3c.crl (hash: NLwFQEa8abPoUHGQAEhubRZC+uMqeOz98Nmgx/PaNz0=)
2: EDA2987A32A211EA87A1561DC4F9AE02.roa (hash: v4jt1ZjQNLJGtpWh7ObVJNt/5KBfDnWWuYACdukBsQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl
rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3007 (0xbbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916269D, serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77
Validity
Not Before: Dec 6 18:14:42 2025 GMT
Not After : Dec 13 18:14:42 2025 GMT
Subject: CN=69347292-0feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:eb:97:07:87:58:57:1f:ba:2e:fc:f7:30:
79:11:d2:e6:fc:ca:96:1d:f5:41:9a:77:b2:2b:e1:
69:bd:e5:c4:ef:56:6e:7e:c1:2b:b0:9f:20:67:29:
72:e8:9f:2e:61:4a:08:0c:b6:3d:e4:a7:78:2a:c6:
d3:df:47:dd:65:31:e5:0c:b5:cc:17:43:ad:00:dc:
a4:af:79:53:ff:ad:0c:a7:6d:1a:99:4b:ec:4d:77:
d4:37:8a:12:a7:c4:1a:13:97:2a:fa:4c:e0:4e:8d:
46:06:bf:b2:f2:97:ed:64:43:37:0a:26:1e:54:1c:
27:5a:0a:59:45:76:90:30:7d:48:68:1b:33:ac:b0:
85:27:3c:7c:54:45:85:d0:78:79:66:3b:5a:2e:cb:
0b:fd:19:6f:df:af:57:0d:3a:35:01:72:81:b5:5e:
46:e0:44:1f:72:bc:8e:70:c7:41:5a:9c:e0:dc:f7:
38:2a:c1:dc:c1:ab:80:7d:c1:fe:30:b0:e5:c2:0e:
69:2d:e8:b6:b2:d2:8e:6e:c6:3c:8a:48:cb:27:30:
a3:b5:3e:ae:2f:09:8a:d6:31:26:cf:b1:8f:4b:d4:
14:0e:4b:af:48:97:ff:78:f0:68:99:9a:80:e2:d6:
db:5f:6b:7a:c7:49:1e:d6:52:64:26:a7:e5:16:30:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:29:F8:9E:35:EE:72:3A:3E:3F:59:04:09:70:8A:C6:CF:D8:61:A7
X509v3 Authority Key Identifier:
keyid:FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5d:e9:f9:45:09:bf:09:7a:4f:96:e4:20:7b:45:51:ea:24:
0d:4a:8f:06:77:e0:b2:38:3f:08:03:5e:1e:58:2f:6f:5d:bd:
8f:04:87:92:a8:35:8c:2e:56:b3:97:3a:5d:4f:af:97:0e:8b:
f0:d0:1d:cf:d4:a3:7c:94:aa:4a:11:74:97:ba:c3:9e:ad:80:
90:c2:d4:99:47:e7:a5:8c:78:9d:22:d8:4b:ea:10:8a:3e:bb:
79:e6:7b:32:c7:eb:ae:6f:50:6f:42:98:ca:01:f2:62:3d:0a:
8e:27:ec:45:02:0d:c3:e3:89:8f:25:8e:5d:56:c3:e8:0e:fd:
5b:e5:76:07:f2:61:4a:3a:dd:be:4e:7b:82:3d:6b:50:03:17:
da:ca:20:ec:1e:49:f0:8a:b9:eb:49:6c:b7:af:a6:dd:d1:e0:
84:98:21:be:4f:69:9c:b9:41:a3:ea:83:d6:42:b3:76:6d:56:
23:0c:c5:bb:c3:93:18:cd:d3:a2:49:9c:78:17:2c:c2:45:f6:
9c:d9:07:fd:77:2d:6a:9a:5d:aa:5b:75:2b:a1:ae:03:fc:be:
af:3d:0d:93:cb:41:ac:51:d3:d7:6c:52:46:30:2f:c6:bc:b7:
60:d5:f4:5d:4b:79:08:df:b3:16:16:5e:a3:0e:8f:f4:d8:29:
9b:20:dd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:58:38 2025 by rpki-client