This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json)
Hash identifier: jBk437FbTOrYxhIWHF5qMwYWfh50mRTIOD/FqR5wpTo=
Subject key identifier: 86:E7:96:96:2F:F8:CC:F1:DB:14:4D:CC:F0:EC:92:0B:55:4E:34:0C
Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
Manifest number: 0130
Signing time: Fri 05 Dec 2025 02:46:30 +0000
Manifest this update: Fri 05 Dec 2025 02:46:29 +0000
Manifest next update: Fri 12 Dec 2025 02:46:29 +0000
Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: eyVfIj7fCBYqFoTw/dYNm0zB7wHKMRHHQ8NbQGy0j+Q=)
2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: rmjthXIgu+TkmOHK2Z05ZF5XVZiqaLPjn4Rrihljins=)
3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: CPD742iiES9rbPbeCK1WZoSS8qfszA2mvXUnwvIYEO4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Validity
Not Before: Dec 5 02:46:29 2025 GMT
Not After : Dec 12 02:46:29 2025 GMT
Subject: CN=69324786-83ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:08:59:d9:50:48:3f:3d:29:70:c4:9b:84:
19:f5:ea:c9:df:18:b0:b2:09:eb:ba:fc:f3:59:93:
2b:7f:35:e2:6a:52:0c:60:70:f1:ef:c3:7f:92:36:
ad:a6:92:12:a5:bc:3d:9d:86:3a:87:15:22:2b:ac:
c1:f1:dc:11:e6:55:80:ca:3e:e1:cd:f0:1f:d6:2c:
0d:48:2f:64:53:a5:b0:4b:59:91:a1:47:1f:1e:92:
3b:e3:c9:5c:8c:29:f0:03:f4:20:1d:84:0c:9c:94:
c8:12:28:26:71:d0:ac:de:fb:a5:79:25:6b:e9:0e:
2a:fe:2a:87:07:cc:4c:b2:91:ec:e7:28:ef:bd:ec:
5b:a2:91:76:c7:ad:71:36:a3:cd:ef:4f:7a:9f:f7:
52:7e:90:b9:5b:53:61:88:40:5f:2b:e0:36:e5:48:
06:53:b5:de:f5:76:2a:3b:1a:1a:15:bc:b2:b7:76:
ed:70:96:0e:8d:16:ce:f3:6a:33:e5:ef:23:11:a2:
34:49:47:50:2b:a9:42:64:3a:4f:71:aa:f3:22:d2:
36:e8:ba:ef:fa:d8:28:91:b1:96:62:14:87:5b:9c:
5a:48:ad:6d:f7:10:ca:3a:3f:b8:9e:a7:5c:c0:bf:
ca:9a:f8:dd:be:a1:22:c9:25:7d:c6:c0:b0:c7:2a:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E7:96:96:2F:F8:CC:F1:DB:14:4D:CC:F0:EC:92:0B:55:4E:34:0C
X509v3 Authority Key Identifier:
keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5a:fe:47:7d:54:29:6f:20:d5:04:9c:45:c0:46:0e:2b:ef:
da:e9:f8:f6:ca:4d:d5:89:ae:26:bd:07:da:9a:0a:7b:b6:74:
cd:00:22:55:15:e4:45:96:77:94:6b:ca:a5:f7:fc:9b:13:77:
3d:ec:87:09:db:e8:69:c2:07:a8:50:98:95:64:7a:47:78:cc:
31:c7:e5:ec:81:95:09:29:d8:ca:3d:b7:6f:e8:d3:02:0b:4f:
eb:62:ef:1f:35:5b:08:02:d2:01:d3:72:f2:17:69:8a:c9:c7:
bb:87:34:3d:09:6d:6d:ef:b9:4c:b1:2a:0b:7a:73:ca:ba:04:
70:c0:8d:9a:5b:90:3c:05:2a:2d:87:c1:2a:13:f9:bd:a1:f3:
ac:78:c3:d3:dd:ad:75:6f:40:c1:cd:82:21:13:8c:4a:a5:c2:
27:4e:e3:ba:c5:e3:6e:69:d8:f4:03:39:03:67:35:ca:e9:16:
e5:67:7e:88:ef:af:d8:e2:7e:ed:fe:a2:23:9f:6b:40:a1:98:
3a:fa:73:97:78:d2:3c:f9:60:8d:3e:c7:d8:2e:2f:0f:c5:e1:
55:d4:32:00:53:97:96:7a:c7:fd:1c:d6:18:4d:52:cc:e1:25:
2a:ad:22:7a:dd:91:6a:f2:e3:98:a1:5e:eb:a6:97:74:fa:d0:
64:73:42:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:55 2025 by rpki-client