This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
File: dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json)
Hash identifier: g4Dhh9DMhYU73xyBHfspeluf7liUdSn+rUlp6KtieXY=
Subject key identifier: 88:9D:B2:57:E9:4D:F6:F6:4C:7F:D1:DB:DF:8B:7D:D8:23:43:7A:52
Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
Certificate issuer: /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Certificate serial: 039A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
Manifest number: 0396
Signing time: Sat 06 Dec 2025 23:22:26 +0000
Manifest this update: Sat 06 Dec 2025 23:22:25 +0000
Manifest next update: Sat 13 Dec 2025 23:22:25 +0000
Files and hashes: 1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: PyuJeAtJgkPa4qvcjWsUXpx486z5ric3gPuZqGuwxwo=)
2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: w37S3Bt2sSTPCiMAqtrHuEG6jTfY7XCc/TsnG1ZQfsg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl
rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922 (0x39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Validity
Not Before: Dec 6 23:22:25 2025 GMT
Not After : Dec 13 23:22:25 2025 GMT
Subject: CN=6934bab2-c3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:43:83:00:6f:cc:d8:1d:1f:06:be:fb:30:
f0:d9:54:ac:ed:2b:cb:03:d9:46:4c:e1:69:24:30:
c5:0d:6d:96:eb:1f:20:b6:46:7c:77:f2:1f:bd:a1:
29:29:a2:52:81:c6:3b:b6:1b:7b:82:64:34:db:72:
df:51:73:4d:80:a9:02:1c:29:8b:31:97:6a:40:1a:
22:85:25:76:ea:ed:e0:af:b9:92:29:4f:88:c3:f8:
6d:7c:2b:20:6c:2c:1e:e5:70:cd:d3:bc:6c:b3:a5:
49:4e:8f:5e:06:7d:41:39:56:1d:18:c9:75:4f:f9:
f4:5e:87:f3:81:26:8c:2c:c1:2c:59:b6:27:17:ef:
f9:7d:96:73:87:28:83:01:90:1c:90:9a:05:b0:e4:
80:f8:35:b5:e9:4a:5b:2f:a3:0d:13:d8:37:bc:a7:
2d:9c:a7:4b:41:5a:26:60:82:3a:06:77:32:c5:f8:
f5:f1:9c:88:9e:d5:10:0e:88:a0:cf:4c:f2:87:0e:
dc:2f:01:d5:52:d5:ae:92:29:fd:40:ce:f9:c5:cd:
ae:45:e9:08:11:19:53:d3:0c:41:05:c3:ba:ea:0b:
02:0f:9a:45:b8:61:f2:f3:d2:cd:a0:d0:ac:fc:64:
66:c0:dd:e9:8d:d4:05:7f:e0:ec:1e:e8:31:83:c3:
34:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9D:B2:57:E9:4D:F6:F6:4C:7F:D1:DB:DF:8B:7D:D8:23:43:7A:52
X509v3 Authority Key Identifier:
keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d4:05:2c:f5:ad:67:c5:c8:21:90:bc:da:7a:ed:d5:02:f7:
bf:74:8f:59:ef:ab:eb:3f:70:a7:14:3b:04:b0:88:16:a7:33:
10:ea:23:47:59:f9:3e:26:13:0e:96:f5:19:c4:bb:6e:19:51:
5a:fc:ac:e5:0a:c5:0c:89:b5:43:50:ff:e9:55:be:4d:0a:37:
a1:4b:6d:81:66:48:6b:1c:e6:9b:33:09:13:81:0e:27:16:97:
f7:7c:bb:6f:d0:ef:36:82:94:34:de:62:95:d0:87:1a:df:af:
ee:97:97:f4:b1:4a:60:6a:e6:9e:f1:35:7c:51:9d:ff:6e:2b:
f7:52:bc:84:c0:65:fd:1c:06:3c:52:25:4d:b0:6e:45:8a:f3:
ff:a4:c4:e0:f4:33:8b:d0:06:d3:6c:20:e7:20:e0:11:93:9d:
eb:28:42:2a:9c:dd:48:87:c3:1c:39:79:85:21:f1:85:86:10:
a6:bd:d1:f6:36:85:d2:c0:4b:2e:bc:5a:25:75:97:bd:fd:1b:
ed:ae:16:ff:99:e8:34:0b:81:dc:4f:ba:5d:54:38:3e:a2:6a:
86:9c:33:33:d4:a4:f5:58:68:e3:33:82:46:b6:b9:16:70:89:
1c:15:46:07:3e:2c:f6:b4:a6:38:c7:2f:87:0c:c9:3f:39:25:
a7:f7:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:58:28 2025 by rpki-client