This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
File: dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft (raw, json)
Hash identifier: a0xicjju5SGEeM5jhd4zRmlnFyyowJ+nbTdLYfLU50k=
Subject key identifier: DB:13:8B:50:8E:B0:05:F3:4E:D0:91:E5:9E:FF:60:DC:B2:B0:15:70
Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
Certificate issuer: /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
Manifest number: 0211
Signing time: Fri 05 Dec 2025 00:33:39 +0000
Manifest this update: Fri 05 Dec 2025 00:33:38 +0000
Manifest next update: Fri 12 Dec 2025 00:33:38 +0000
Files and hashes: 1: dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl (hash: nNFgr5pLiW7npjV1GeUun4+esPmYeIwc0JM0tLoQerg=)
2: 05E078B2A5D211EDBC42DA12C4F9AE02.roa (hash: DPyqPkT0neP2hvNy+hn6VREMN9M60vGzkrQgZGHU27c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91828F3, serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Validity
Not Before: Dec 5 00:33:38 2025 GMT
Not After : Dec 12 00:33:38 2025 GMT
Subject: CN=69322862-45c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:8f:a1:cd:90:92:ce:d3:62:13:e8:d1:df:
67:3c:72:5d:6b:75:55:f3:9b:cd:32:e3:97:ab:a3:
7f:7e:88:4d:23:1a:df:0f:d9:5d:64:89:44:bb:ce:
88:ca:f0:4f:08:14:5c:81:10:a9:82:8a:27:9e:75:
0b:ca:bb:51:e9:f8:f5:c3:2b:79:60:76:3b:ed:73:
bf:e2:20:5f:f5:39:bd:c1:e5:c1:76:66:b9:62:d8:
94:be:4a:8e:20:76:45:22:b9:6b:6c:7c:14:5c:7a:
37:27:3f:6c:d2:fc:38:eb:97:c7:55:bc:38:e2:36:
09:fd:75:7b:8b:ea:ab:e9:a0:9b:6c:d7:17:ad:10:
2d:78:9c:9f:85:2c:6f:a8:05:69:81:d4:af:b0:e0:
1b:8f:ed:d5:b5:64:fb:43:99:45:96:d1:ec:3d:a4:
6d:21:02:35:5f:0e:e5:f4:4b:d2:ac:6c:82:83:19:
1b:da:28:36:eb:14:84:c6:90:21:95:e7:72:a1:f5:
3d:af:cb:c7:37:b6:38:17:84:42:e0:d0:52:ee:b7:
1b:6e:09:4c:7d:87:de:f5:b3:80:6b:85:60:f1:00:
65:c7:24:c3:ed:4b:46:30:45:e0:c1:9b:17:07:49:
d3:36:6c:ba:7f:19:5d:cb:fc:1e:25:a1:4c:5e:5b:
60:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:13:8B:50:8E:B0:05:F3:4E:D0:91:E5:9E:FF:60:DC:B2:B0:15:70
X509v3 Authority Key Identifier:
keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:d0:61:69:4a:f4:36:b6:8f:5b:7b:03:c1:7b:f1:12:3b:1a:
ed:9c:ef:67:33:bc:d9:3b:32:e5:a9:cf:d9:07:b2:b4:03:f2:
a5:72:86:a2:80:8a:27:1c:f3:ae:6f:84:17:dc:51:33:17:45:
7e:6f:cb:1d:68:ed:8a:4e:1c:6d:bb:43:c3:42:9f:8b:89:c0:
1a:69:83:a6:5b:9d:8b:e9:22:b9:88:4e:11:8a:26:65:38:c7:
4d:15:4d:b9:8c:f8:ce:d1:b9:5d:4a:c0:65:f0:3e:12:67:30:
f4:af:3b:78:55:61:c5:68:0b:a7:51:49:d8:02:a9:54:a6:7d:
30:82:b2:e1:6e:c9:34:72:63:2b:87:e5:25:ba:24:01:3d:a6:
a3:fd:87:a4:58:a7:cc:6c:e5:36:8f:ed:c3:81:97:9e:ad:91:
6b:e0:b2:41:85:d1:29:3f:61:50:a4:76:5e:cd:3c:85:31:52:
7c:55:48:a7:9e:9c:db:04:74:f1:85:2a:ba:02:00:07:42:1a:
c3:b5:42:f4:f1:d6:6c:5d:f1:17:ab:4a:66:ca:06:4c:37:e0:
40:80:65:07:97:11:61:fc:5e:31:05:3f:10:c3:06:eb:e3:22:
f7:11:39:a4:82:f6:6e:f9:9a:1a:69:20:76:49:e3:c7:e5:ea:
ff:6a:2f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:59:33 2025 by rpki-client