This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json)
Hash identifier: 9ci0Ic5xh7Bpqt6ez6G3af/iSKOlantGuu4QK6CEG+U=
Subject key identifier: EB:1B:67:70:57:23:B2:CF:8C:61:FF:DA:81:04:04:10:73:C3:3C:32
Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Certificate serial: 17C4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
Manifest number: 17A0
Signing time: Sat 06 Dec 2025 16:11:03 +0000
Manifest this update: Sat 06 Dec 2025 16:11:03 +0000
Manifest next update: Sat 13 Dec 2025 16:11:03 +0000
Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: w+EMYAUZIZXH2HrVEmudNPp+dgo1EUHcW1DVQ1YHAIY=)
2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: WZaPuq2ePLoM0KjlrMWH8IWVHfB/Av+7ec0Tgw3cu6Q=)
3: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: YlusDdL6GSsVTm6aqUoc8SPstBv7LDPsMKGOZ35QMHY=)
4: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 28BPEKV85FSPKq/CUsjxZqA9dsNxiffYXaIe9r8e36E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6084 (0x17c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Validity
Not Before: Dec 6 16:11:03 2025 GMT
Not After : Dec 13 16:11:03 2025 GMT
Subject: CN=69345597-8a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d4:38:f7:6b:09:4d:2d:c8:62:07:29:70:b1:
7a:6a:a4:61:d5:30:fb:df:bd:7b:af:0e:92:2b:4b:
ad:40:41:3f:8b:b8:59:a0:2e:c4:13:18:cb:cc:f3:
ed:1a:37:77:79:27:1f:89:a5:64:37:bc:c7:b1:31:
f3:97:0e:ac:53:2e:e7:35:59:2d:23:7b:9c:4f:90:
18:b8:d7:11:2d:68:84:91:24:44:e4:d1:29:06:1a:
80:00:61:34:07:73:66:87:c0:58:0d:ed:32:ef:42:
aa:62:9f:d1:8f:da:2d:73:85:0f:aa:40:cb:f5:4e:
c9:a0:de:b8:de:52:d3:46:89:f9:fd:a1:c6:51:09:
e6:20:47:99:7c:e2:1c:9f:77:a2:97:fa:03:ca:db:
3f:e3:be:c1:5b:ea:cc:26:24:3f:45:e5:16:0f:8b:
64:1e:d3:97:a9:f7:82:72:9d:70:51:87:f3:84:e9:
6a:71:3a:79:d2:b6:1e:97:cc:43:d6:55:c6:fa:f8:
2c:36:f4:06:71:6c:81:d4:ca:41:08:20:7c:15:85:
53:50:4c:14:f5:6e:34:0e:5e:77:99:ed:61:c8:0a:
36:b4:a5:ba:c6:e1:d0:9e:5a:49:e6:85:8c:87:be:
b1:0c:b3:54:49:eb:5a:a3:73:1a:49:09:de:c0:b0:
16:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1B:67:70:57:23:B2:CF:8C:61:FF:DA:81:04:04:10:73:C3:3C:32
X509v3 Authority Key Identifier:
keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ee:85:95:9e:32:07:b5:05:a1:ed:f5:0a:2b:e5:68:22:32:
3d:5f:88:cf:3a:30:2a:6a:08:4c:2b:e0:0a:a6:0f:d6:40:5c:
3e:e8:1c:5e:67:7f:5e:72:9e:c8:60:4f:7f:67:62:53:b4:1f:
13:d3:a0:aa:11:dd:a0:f0:69:aa:14:b8:f0:51:87:1e:e7:ec:
0e:0b:78:75:02:ea:82:ef:60:e1:3d:b6:95:ca:af:08:81:9c:
7c:1c:cd:25:ac:5d:18:9f:1b:fe:98:92:42:90:30:1a:21:1d:
8d:c3:da:27:48:e4:2e:7d:eb:b6:48:a9:49:f4:02:c6:2a:ac:
fe:91:35:83:55:30:3b:df:90:0e:1d:07:2e:af:e3:da:bc:b5:
88:ab:f2:9c:fe:56:f3:fe:3e:4a:61:a5:f0:7d:9c:19:7a:ff:
b3:d3:4a:59:af:b0:b6:d6:b7:41:a3:1b:b0:ce:08:53:fb:74:
3a:60:1c:fa:87:dc:18:22:bc:07:82:8a:51:66:46:75:1c:0e:
0f:66:20:2d:78:21:28:8f:a1:aa:26:cc:76:5f:07:a7:49:8c:
5b:85:9b:77:aa:71:51:e6:86:3b:af:2f:c1:73:c5:e4:01:c9:
09:f8:e7:05:0f:8a:d1:be:82:75:21:11:36:c1:e6:69:83:77:
4c:0f:07:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:51:16 2025 by rpki-client