This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
File: DAUkO371VhHkCk279_5-kSCSplI.mft (raw, json)
Hash identifier: BvB5LiBSGMKCDUD86CdeS+LDGrkc93zRzUO80M7wQwo=
Subject key identifier: 98:A2:62:3D:5F:E6:6C:B0:BB:F2:ED:82:BE:A1:50:24:03:D2:3F:F0
Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
Certificate issuer: /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
Manifest number: EA
Signing time: Fri 05 Dec 2025 03:26:33 +0000
Manifest this update: Fri 05 Dec 2025 03:26:33 +0000
Manifest next update: Fri 12 Dec 2025 03:26:33 +0000
Files and hashes: 1: DAUkO371VhHkCk279_5-kSCSplI.crl (hash: qSCx5S9bCF77+4FimcqEtueWefHpYXx4QZ+iodV+Jb0=)
2: 04679AF66F3411EF833F4C23C4F9AE02.roa (hash: lMcw8S12urhXxI0eoOsXqOKcaqH3ZsED3AjjGI9Ju6s=)
3: 04EFECDA6F3411EF833F4C23C4F9AE02.roa (hash: y48q8nHX1JhR9dequdXIPjSajeit5DAhtA6kzockY/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:26:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A8E2, serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Validity
Not Before: Dec 5 03:26:33 2025 GMT
Not After : Dec 12 03:26:33 2025 GMT
Subject: CN=693250e9-6123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:a4:4d:34:6c:26:06:db:b1:88:90:06:fc:
51:0d:40:e8:12:1d:82:22:5e:9c:bd:f0:c1:3b:be:
1d:6c:fd:24:22:4a:70:14:d7:8a:3d:32:c7:0d:84:
29:b9:47:f9:4b:ee:1b:86:6c:00:74:4f:3e:f3:99:
70:97:c7:58:a6:55:3f:2a:4c:af:05:1c:7f:77:56:
b5:3d:9f:50:d7:b8:d4:51:16:65:3d:8c:39:e3:df:
cf:a4:58:b7:9e:df:65:ad:2e:58:eb:b7:d2:07:fe:
e7:7e:61:62:66:79:42:ac:92:fe:4a:0c:04:36:3d:
9e:68:ae:67:93:c1:cf:b9:23:4f:e0:6a:b0:ac:0c:
b8:e4:8b:43:97:55:09:7a:56:f9:43:20:b5:01:2f:
70:13:2c:42:d3:73:57:10:1a:55:53:e2:2b:dd:b1:
05:4a:c1:ce:d5:40:c3:6d:8a:c0:44:b4:5a:c0:cd:
73:d6:53:c0:0d:dd:2d:c9:43:3a:c6:91:c2:0d:73:
27:7b:5d:f2:63:4e:66:8b:b5:d3:94:16:37:36:0c:
7c:06:79:95:29:09:8f:df:c9:0b:ca:be:c2:fe:34:
07:18:02:0f:13:8b:61:bd:58:f5:7e:eb:81:f4:fc:
58:6b:ac:60:b8:aa:1e:04:37:d7:cb:20:b3:6e:e0:
df:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A2:62:3D:5F:E6:6C:B0:BB:F2:ED:82:BE:A1:50:24:03:D2:3F:F0
X509v3 Authority Key Identifier:
keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:9d:01:f1:9d:04:43:78:d5:90:d1:2e:f2:53:3d:11:a5:fa:
55:1a:d6:66:72:c7:10:39:9e:1b:87:3a:31:dd:26:60:d5:d1:
4b:c1:44:5c:ce:a9:36:27:66:e6:16:18:7d:f6:20:cc:04:72:
a5:58:d5:83:a5:82:14:cb:f3:e9:bd:bb:4a:7e:d3:7f:75:d6:
d0:7c:df:a4:8f:31:cb:8e:46:56:fe:d6:cd:9e:ba:0c:51:01:
59:9d:2b:35:eb:0c:94:36:3a:44:20:e6:68:e0:ba:7a:93:8e:
5b:bd:f0:62:18:10:ea:34:81:62:44:ae:b6:11:68:b2:f2:2a:
4d:d4:bf:e0:c9:27:2c:69:b3:8f:2b:5f:e2:03:b7:16:59:61:
c7:67:8c:5b:57:54:0c:66:f7:ae:a1:11:ce:cd:cc:d7:a4:d3:
73:7d:1c:f9:bb:4f:4f:6b:37:6a:e5:ba:60:b0:86:f2:70:e5:
39:89:b1:c2:5b:73:af:07:8d:d0:b2:6b:2a:f0:9e:87:db:94:
be:c5:38:2f:8b:98:3f:88:4f:64:8e:8c:2e:6b:20:59:b4:fe:
4b:01:9e:de:d1:aa:d3:b9:64:f0:63:c1:79:fc:47:c5:22:95:
f9:77:e6:e1:99:d2:ee:72:8a:e2:c7:74:d4:48:9d:59:19:40:
34:6c:86:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:33:41 2025 by rpki-client