This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
File: DOryj-6BLxzJfxyWvKZFLvcubUw.mft (raw, json)
Hash identifier: j7hayT0UGahWY/nkSKGRaPK8j6nUSggNmJllvtIUhTk=
Subject key identifier: BD:67:83:A4:B2:60:75:AE:40:D2:89:82:49:CA:3E:97:30:F1:F0:F4
Authority key identifier: 0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C
Certificate issuer: /CN=A91B5732/serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C
Certificate serial: 0BD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
Manifest number: 0BCF
Signing time: Sat 06 Dec 2025 18:12:17 +0000
Manifest this update: Sat 06 Dec 2025 18:12:17 +0000
Manifest next update: Sat 13 Dec 2025 18:12:17 +0000
Files and hashes: 1: DOryj-6BLxzJfxyWvKZFLvcubUw.crl (hash: 8Ey0vX7bj02HikpWaVTl1pi8FbbDQVGzUvPhuqBaU+0=)
2: 707BA10E9DB211EAB3A85A19C4F9AE02.roa (hash: GS9APLnsd9N7vlTL0hOq7MNSzNO+PtSv7rLmtH3iPh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl
rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5732, serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C
Validity
Not Before: Dec 6 18:12:17 2025 GMT
Not After : Dec 13 18:12:17 2025 GMT
Subject: CN=69347201-1d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:e8:f3:a5:e9:19:c2:3b:c6:f2:4e:a8:20:
77:37:a7:e5:29:45:01:ca:d3:a8:66:7f:94:e6:71:
a8:48:b2:3e:3b:5c:39:e7:e9:5a:21:51:c1:d4:fb:
d8:ed:20:dd:5d:76:ba:a6:11:7c:66:87:18:ef:93:
e0:57:58:a0:87:d5:c6:33:ae:f1:43:b5:48:fd:d3:
00:43:89:00:83:86:f2:06:4b:61:c8:7b:7e:15:ed:
d8:5e:b7:91:3d:c0:15:6b:35:71:e0:98:88:8b:7f:
eb:d3:a3:b3:44:ae:74:7e:8f:44:5b:f4:c4:bf:86:
ac:ce:c0:eb:16:c1:50:d0:1c:27:19:b3:ca:04:60:
63:fc:ce:7f:7e:45:7d:15:05:43:71:9d:8c:cf:5b:
36:47:cc:2e:6e:28:db:cd:a4:7f:61:0f:d9:30:25:
bb:50:50:04:eb:e2:b1:72:a7:c6:a0:f3:ac:b0:e6:
c4:2c:37:89:21:29:ef:63:50:3f:77:41:46:dc:c8:
fb:f5:44:d7:36:f4:e4:ba:fa:1c:1f:8a:b9:51:d5:
b3:69:b7:5e:84:2a:27:bc:4b:03:97:1e:2b:b1:ae:
18:7d:f1:c4:f5:c6:4a:e2:3c:48:1f:89:46:2f:a4:
21:ee:41:f8:6a:cf:ee:99:c7:55:4d:a1:be:a9:82:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:67:83:A4:B2:60:75:AE:40:D2:89:82:49:CA:3E:97:30:F1:F0:F4
X509v3 Authority Key Identifier:
keyid:0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:33:9c:b3:82:ea:a1:aa:d1:37:c0:58:0b:5d:d6:3f:8d:bd:
42:5d:68:74:4c:39:32:97:a6:1c:9a:66:a9:36:7f:03:d7:73:
75:6f:d1:f5:fc:84:e9:9f:a7:63:5e:0d:12:b9:3a:37:b5:87:
c7:8d:a2:b7:b2:2e:0f:6d:5d:20:87:91:ca:2f:a1:80:87:8b:
b0:88:0d:44:d5:46:5f:eb:87:32:6c:47:6d:93:cf:08:4d:9e:
08:25:2e:23:8e:6a:a0:50:40:9b:1a:40:f3:61:77:ac:36:e4:
46:56:7b:e2:0c:0d:83:18:25:10:c1:06:24:b3:c2:20:52:d2:
fc:e1:d7:42:71:6c:bd:ca:cf:08:68:d5:a6:ca:ec:10:69:39:
49:5b:a7:a9:9b:ba:9f:30:a2:92:a9:79:07:21:48:89:ba:fb:
30:2f:fe:2c:1b:8e:54:d6:66:58:fc:65:13:7c:f6:29:c0:7e:
65:45:97:5f:36:0a:1c:cb:23:ae:b7:86:64:bd:c4:c8:02:a1:
29:86:8b:93:a5:df:c1:2c:2c:8f:6a:39:bd:df:ec:dd:95:d0:
b8:ef:e7:2a:3b:e8:55:cd:6b:2c:39:af:52:0c:d2:7d:d4:6e:
2c:19:1d:0d:dd:90:a8:35:10:ad:fd:5c:52:c0:cc:72:14:82:
ed:5a:81:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:39:30 2025 by rpki-client