This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
File: DXj787IdvbDPDE2ILytFm0R8uOg.mft (raw, json)
Hash identifier: hn2YJZWoDfpVcBhcEGvs+vz/dkooPzK/uuVVcFTWB3A=
Subject key identifier: 5D:09:0B:D9:65:04:03:9A:2D:8E:CA:2A:2A:B4:44:AC:EA:03:FF:99
Authority key identifier: 0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8
Certificate issuer: /CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8
Certificate serial: 02C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
Manifest number: 02C0
Signing time: Thu 04 Dec 2025 23:47:20 +0000
Manifest this update: Thu 04 Dec 2025 23:47:19 +0000
Manifest next update: Thu 11 Dec 2025 23:47:19 +0000
Files and hashes: 1: DXj787IdvbDPDE2ILytFm0R8uOg.crl (hash: ZJ9UEqhvsf4AF+jfLGb4KbtIG/Pk0bga1yJflf4Xfqo=)
2: 8F0A568216A611ED86A3EF0CC4F9AE02.roa (hash: GW9OdW2Jh43/tpJ1TBy+v7ZuNATKq3J5kebniiL87VE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl
rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709 (0x2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D766, serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8
Validity
Not Before: Dec 4 23:47:19 2025 GMT
Not After : Dec 11 23:47:19 2025 GMT
Subject: CN=69321d87-26db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:bf:a0:d6:d2:30:90:aa:33:a1:e8:37:06:
13:54:01:67:00:9b:cd:2e:81:4e:a8:92:a5:70:d3:
70:71:5e:c6:f9:31:7a:fc:3a:bd:c7:00:45:be:0b:
bf:ab:07:c7:a1:ab:bb:81:9b:d9:9b:bc:55:43:36:
f7:44:ec:c9:ce:4c:07:35:c1:76:a8:63:96:cd:3e:
b4:76:38:50:8c:0a:0a:99:f3:9b:d9:b0:43:87:4a:
67:6d:b9:13:48:0c:8f:fe:a3:15:61:84:77:6e:d0:
c4:7a:99:da:50:b0:f7:97:6c:25:7e:e8:0b:97:8a:
c6:28:58:0c:3f:f7:32:9b:e7:09:82:db:0d:9e:a2:
c6:76:c2:73:60:ed:f0:fd:b3:a0:fc:6b:77:b5:60:
4a:71:c2:a5:4b:8e:d3:0d:29:c8:13:13:8c:91:6a:
73:fd:3f:2b:41:d5:f5:d0:85:c4:0b:76:db:73:3b:
d1:59:42:fe:8e:c5:ae:6f:c0:76:0c:34:55:4e:f3:
ae:07:11:c0:8a:3a:61:f6:63:5e:92:73:10:47:22:
4a:8b:0e:03:ac:94:d6:be:c5:68:28:c6:2d:a3:49:
da:18:1e:23:a1:63:e1:e8:56:3e:7f:24:d0:4b:4e:
31:9f:23:90:bf:97:db:de:7a:09:52:4d:53:d6:33:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:09:0B:D9:65:04:03:9A:2D:8E:CA:2A:2A:B4:44:AC:EA:03:FF:99
X509v3 Authority Key Identifier:
keyid:0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:5d:3c:57:65:04:88:14:94:37:cc:53:a5:79:78:ed:3e:25:
19:17:35:02:e4:74:86:b4:26:86:b0:84:fc:69:ad:7f:78:b7:
cf:96:19:cc:1c:01:20:d7:7b:b1:a3:9a:b3:b8:5a:b7:19:6a:
c5:24:ef:b5:5f:79:bb:83:3c:34:2f:8c:90:f7:89:e5:72:97:
7c:b9:97:72:c7:bd:f6:5d:a9:a6:72:a1:bc:11:a6:10:93:85:
19:34:a7:1f:bf:47:d3:26:26:46:3a:da:dd:10:fa:69:d9:a8:
34:e8:3c:9b:cf:7c:4c:07:aa:3d:ed:bc:69:85:db:bc:f5:4a:
cc:5a:14:3c:d8:02:95:17:f1:3e:46:df:f6:76:b0:ff:bc:c9:
f8:12:e1:23:42:c2:8b:f4:76:29:7c:59:df:cb:dc:77:cf:ad:
48:91:56:80:2e:41:d0:79:1a:78:15:e7:57:87:10:62:8f:f3:
47:28:29:4a:5a:d6:e9:b6:f5:5e:97:b3:49:1a:f9:43:03:8d:
b0:d5:74:39:30:5c:d4:31:6e:3e:96:bc:a1:1a:88:32:a8:86:
e3:b8:2e:5c:4f:64:2d:46:19:36:cb:b4:c1:22:8b:d8:07:d7:
4c:c6:f5:18:71:a2:c1:8c:45:13:34:e9:3f:ad:7a:00:d1:e2:
27:b9:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:22:04 2025 by rpki-client