This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
File: DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft (raw, json)
Hash identifier: CkJjPlbRRf2TQdx7kNne1gDCvcFbr956GxrBy+1gCZ4=
Subject key identifier: B5:BE:F4:CB:E6:83:0C:41:39:39:6B:09:59:71:6D:62:F7:44:25:42
Authority key identifier: 0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87
Certificate issuer: /CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87
Certificate serial: 34F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
Manifest number: 34EC
Signing time: Sat 06 Dec 2025 14:41:59 +0000
Manifest this update: Sat 06 Dec 2025 14:41:57 +0000
Manifest next update: Sat 13 Dec 2025 14:41:57 +0000
Files and hashes: 1: DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl (hash: xeRdDStMRS38rQJMAJ2zDDI4t3U40pMi9sWxGE757ec=)
2: 06CCBE4AED9A11EA9D06C66BC4F9AE02.roa (hash: r3JWgar+Qi2GIwJz7gdsqO3bZMMx2m4iwFJF3cbd3+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl
rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13555 (0x34f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199990, serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87
Validity
Not Before: Dec 6 14:41:57 2025 GMT
Not After : Dec 13 14:41:57 2025 GMT
Subject: CN=693440b6-3b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:e9:df:e4:4c:d0:5c:ff:5c:7a:d1:c7:31:
f3:2f:1a:b5:b5:b5:4f:02:e0:cc:e6:69:32:6f:ad:
49:55:67:61:d9:62:b9:b3:41:7a:6c:fd:2d:8c:38:
ac:87:4f:21:ba:9c:f2:14:82:5b:22:ad:db:a7:85:
34:47:4c:ef:c4:2a:55:38:56:3f:38:28:b1:9a:75:
35:e5:00:f0:af:da:cb:ea:38:83:40:cb:fd:85:7b:
d2:8e:ce:f7:07:37:ec:f1:4b:5c:16:1c:4a:36:36:
e5:22:96:2c:d9:ee:37:ad:4c:ff:0c:1b:21:11:86:
97:47:d1:98:f7:64:90:f2:38:53:38:87:21:9c:b4:
61:ec:7d:bb:58:20:17:51:fc:cd:78:12:24:40:c6:
72:f8:c4:87:73:ec:43:97:df:e9:a1:df:f6:f1:ea:
ec:99:da:3f:19:9d:b3:51:f3:e8:fb:9d:66:d0:49:
15:d7:8e:06:d6:ab:15:ff:84:aa:9a:80:13:14:31:
70:8b:1e:0a:8b:41:dc:aa:bd:02:80:b6:bf:77:07:
87:d3:02:50:41:06:48:12:7f:eb:31:6f:27:a5:0f:
48:8b:7e:97:e1:83:cf:9d:45:d1:4c:48:8a:ea:ec:
9e:0b:9f:08:96:20:90:a6:6e:79:f9:d0:ec:8a:7c:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BE:F4:CB:E6:83:0C:41:39:39:6B:09:59:71:6D:62:F7:44:25:42
X509v3 Authority Key Identifier:
keyid:0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f9:51:5f:70:1e:52:4b:ce:47:94:e3:1d:97:07:7a:70:42:
fe:84:0b:db:b6:d6:1b:e9:ca:27:e1:07:9d:f4:f5:00:b2:5d:
d2:f3:e8:55:8c:1a:97:a9:d6:7c:20:dd:4e:f8:af:3e:f2:98:
1d:e6:38:a4:1b:4d:e0:08:1b:51:fb:3c:7d:51:6a:24:ce:0c:
37:36:ed:1f:a3:18:b3:b6:4a:ec:b4:be:40:50:7e:29:18:71:
6b:87:66:43:85:ca:58:ad:e0:cc:4e:af:97:e6:73:41:8e:e4:
a3:45:86:57:f3:c7:25:ba:9e:f4:ef:a5:e7:06:ab:2c:69:30:
09:54:b7:55:1b:e2:e0:91:c0:17:58:6e:10:f0:3a:7f:cf:57:
26:bc:45:08:bd:e7:88:52:e0:f1:8b:24:6e:7c:09:49:e8:3b:
63:0c:f3:63:3b:29:7b:50:d2:2e:8a:51:24:e0:2c:72:f6:48:
15:bf:d1:ab:26:74:29:4c:aa:68:5a:2a:13:6f:9d:2b:09:36:
ef:3d:34:43:fb:ef:ef:f2:e5:79:0f:45:5d:56:14:2a:83:65:
19:cb:51:ca:c4:d8:5b:78:d8:4a:73:b5:ee:23:bc:21:b6:7d:
37:b0:36:5b:83:fc:64:1d:a5:25:ad:cf:39:7c:d1:11:32:ff:
1b:02:91:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:43:12 2025 by rpki-client