This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json)
Hash identifier: so0Y8setVZFtSha/6KLZrJCrxEor6b6wgKl9QKW6Fak=
Subject key identifier: 96:D3:B2:4E:29:5C:C1:71:6C:C0:98:08:3C:E3:06:DA:32:BD:30:0A
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0C04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
Manifest number: 0B93
Signing time: Thu 18 Dec 2025 19:02:41 +0000
Manifest this update: Thu 18 Dec 2025 19:02:41 +0000
Manifest next update: Thu 25 Dec 2025 19:02:41 +0000
Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: Nwt0BVbGj2bJBZSs4+MJ6FNPiiz9hyBMu1wYFkq9oFo=)
2: FC895C72C39F11F095CC9914C4F9AE02.roa (hash: uYEzCWLaVUrJF31Uyzd6mg/VgXA7JVYC2/J8xaXMb68=)
3: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 9HpfFO17Acvgd3bfoY1RRGMmr/S4lWCivU7zCXu99jQ=)
4: 9E173D98C3A011F09FB4B135C4F9AE02.roa (hash: DDAK/bkV921U2mdTg9FWypKE0zQd9a81nWOpFoaGsxI=)
5: DC2FC844C39F11F0B36A6414C4F9AE02.roa (hash: Ic7Kgcc2/b9pbGsWyO2+erxvuMJUaVTKVZznOJTRUoU=)
6: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: NmSN6VJwUZ9ydFpM44jw4neBA26CzfMXA6i3a7+JHjs=)
7: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: f8EbYStIGSB7T55NTXn1S3YpmHpX1HZLI2JBGQCdMmI=)
8: 305F24342A0811EE9D810010C4F9AE02.roa (hash: Z2pbtlXOSAO+jQlJKET8nsnjJlOh2Bme2k6kxjJMw0Q=)
9: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: Ctrd7yzaoKhPJ1SZfLY/mtqd2cD4Mo1aULu0wXYXeDQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3076 (0xc04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Validity
Not Before: Dec 18 19:02:41 2025 GMT
Not After : Dec 25 19:02:41 2025 GMT
Subject: CN=69444fd1-4004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:4a:c7:22:15:a1:de:5f:99:a4:b1:be:65:
e6:ea:a7:ed:7a:cb:6f:ee:83:7e:e3:d2:f3:e3:b9:
71:24:64:da:47:94:74:5c:76:55:0c:23:d1:19:7e:
29:be:66:11:9e:3d:08:44:9e:f4:3d:4a:b3:74:ee:
1e:73:a7:2d:06:92:0c:80:20:93:c8:33:d6:32:ea:
e2:a8:3b:66:f3:a2:26:dc:31:b3:62:21:2d:32:8c:
1f:6c:14:b0:de:02:aa:ea:9c:eb:ef:27:1c:9a:0c:
c2:59:07:07:54:f5:28:2a:a0:1d:82:5a:d3:b1:d3:
2c:da:1a:71:a7:cc:76:2c:1b:84:8e:6f:39:5f:61:
65:bf:0f:b9:3f:5c:88:b1:4c:a2:c8:7f:1b:93:a9:
e4:8d:4a:7a:9f:27:cf:03:9c:c7:7b:1d:a5:21:7c:
51:12:61:ff:15:c3:81:8c:68:40:38:59:40:c4:c2:
23:34:a6:70:86:25:fe:42:c8:35:16:bc:66:68:2c:
19:88:6b:a6:6b:fc:0d:ed:4d:7e:dd:78:c3:9f:78:
b5:72:4f:92:d4:53:8f:c0:f1:af:fc:c1:31:e1:de:
ff:b0:1b:bc:f1:44:88:e8:70:7c:46:e1:e3:4c:82:
d2:9d:48:67:5b:08:3a:41:e7:47:d4:76:9e:d7:6d:
92:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D3:B2:4E:29:5C:C1:71:6C:C0:98:08:3C:E3:06:DA:32:BD:30:0A
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:1d:8b:9c:65:96:51:1e:3b:53:db:7f:b4:40:0d:01:bf:a4:
8f:bd:75:bf:f2:73:8a:d4:4b:0d:c0:3e:da:9d:19:15:b9:f7:
48:54:fe:cb:a4:33:87:63:09:64:b3:ce:c0:8d:94:27:f8:3a:
39:73:e6:da:d0:a4:cf:5e:03:f0:75:81:8c:95:79:9f:43:78:
20:16:ab:23:2a:60:a0:c3:ff:6d:b0:43:d9:34:56:12:37:09:
3e:27:77:22:66:71:5c:1f:8d:d5:7e:3c:56:23:42:b8:a8:59:
a4:65:21:52:3d:77:f8:3a:c2:2c:f8:bd:7d:10:6f:2d:69:20:
97:02:1d:b8:6c:f0:a4:39:61:15:9b:0a:c7:43:d0:f2:04:56:
74:85:2d:c7:dc:c9:ce:b8:55:3b:60:3d:bf:e7:5f:a0:9c:59:
65:be:8c:25:90:89:86:cf:39:cb:8b:2b:2e:23:46:ba:36:75:
ab:82:9f:54:32:0e:b7:39:36:ac:f7:73:f9:e8:1d:16:f6:75:
2a:c6:08:84:68:bf:3e:66:aa:66:68:5f:ef:2a:0e:2c:a3:bd:
b2:4c:91:f6:7b:dd:dd:21:ce:94:dd:7d:d4:ec:e1:a1:8e:87:
c7:0f:00:e4:50:4b:73:d3:86:ea:30:e8:64:b7:01:38:ae:f9:
12:74:72:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1
QzBEREY5RDQwHhcNMjUxMjE4MTkwMjQxWhcNMjUxMjI1MTkwMjQxWjAYMRYwFAYD
VQQDDA02OTQ0NGZkMS00MDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyqlKxyIVod5fmaSxvmXm6qftestv7oN+49Lz47lxJGTaR5R0XHZVDCPRGX4p
vmYRnj0IRJ70PUqzdO4ec6ctBpIMgCCTyDPWMuriqDtm86Im3DGzYiEtMowfbBSw
3gKq6pzr7yccmgzCWQcHVPUoKqAdglrTsdMs2hpxp8x2LBuEjm85X2Flvw+5P1yI
sUyiyH8bk6nkjUp6nyfPA5zHex2lIXxREmH/FcOBjGhAOFlAxMIjNKZwhiX+Qsg1
FrxmaCwZiGuma/wN7U1+3XjDn3i1ck+S1FOPwPGv/MEx4d7/sBu88USI6HB8RuHj
TILSnUhnWwg6QedH1Hae122STwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbTsk4p
XMFxbMCYCDzjBtoyvTAKMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF
RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzhBRi9EMUY2NEU3MjVFRUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hE
Wm9NSXlhS2VGUUpjRGQtZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2HYucZZZRHjtT23+0QA0Bv6SPvXW/8nOK1EsNwD7anRkVufdIVP7L
pDOHYwlks87AjZQn+Do5c+ba0KTPXgPwdYGMlXmfQ3ggFqsjKmCgw/9tsEPZNFYS
Nwk+J3ciZnFcH43VfjxWI0K4qFmkZSFSPXf4OsIs+L19EG8taSCXAh24bPCkOWEV
mwrHQ9DyBFZ0hS3H3MnOuFU7YD2/51+gnFllvowlkImGzznLiysuI0a6NnWrgp9U
Mg63OTas93P56B0W9nUqxgiEaL8+ZqpmaF/vKg4so72yTJH2e93dIc6U3X3U7OGh
jofHDwDkUEtz04bqMOhktwE4rvkSdHJE
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:46:03 2025 by rpki-client