This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
File: DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json)
Hash identifier: B5hhC7V0Z33EPr0n2SYEyjtQphJYk38LNJdlQ3HtqWw=
Subject key identifier: 5A:45:69:8B:3D:87:FB:88:99:E7:A5:6A:6F:97:A0:1E:83:15:D9:C1
Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Certificate serial: 0C73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
Manifest number: 0C64
Signing time: Thu 18 Dec 2025 18:18:52 +0000
Manifest this update: Thu 18 Dec 2025 18:18:51 +0000
Manifest next update: Thu 25 Dec 2025 18:18:51 +0000
Files and hashes: 1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: HAKkJVl833g5ZivPk88udcJGvGnD7bsQpHMskiQD+X4=)
2: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: s9oCtHipBgMZ52edn5qYpaiYwsdO5HeOHXixZ4PKFRM=)
3: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: wzXZlkexc5sjvRQO55tIhvKG7H8TjPJiYMXMwF75NaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 18:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3187 (0xc73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Validity
Not Before: Dec 18 18:18:51 2025 GMT
Not After : Dec 25 18:18:51 2025 GMT
Subject: CN=6944458c-0898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:21:fe:df:21:8a:82:87:1a:af:2f:54:a8:b0:
0e:a9:26:00:1a:62:0f:9c:03:94:89:47:37:4f:ca:
dc:d3:4b:25:8d:c9:a8:44:3a:73:2d:e5:31:e0:05:
ee:03:3b:ea:bc:93:20:db:a4:c1:9a:ba:bb:53:17:
25:81:b8:a8:f6:a5:c0:79:f6:98:85:a2:b6:bf:7d:
c1:88:4e:88:5b:88:42:bb:26:a9:91:74:06:5f:d6:
c1:0a:f0:af:aa:d1:7e:73:e8:32:ad:2e:96:c0:42:
5d:99:c8:07:a7:a3:1e:e7:25:d5:5e:bf:a8:a9:31:
c2:c4:23:0b:f9:31:67:34:eb:e6:01:f2:ee:21:5c:
a4:e5:4b:87:56:ce:78:b1:51:c8:65:b9:7e:3a:10:
05:0f:9d:2f:62:93:08:5a:01:07:e0:f1:07:a7:5b:
4e:a8:a8:1d:6b:9f:f8:fd:a3:6e:fd:61:0a:66:b4:
23:4b:37:bc:60:a7:a1:4f:e8:b3:ba:da:88:c3:84:
0e:0c:d2:ea:9f:23:3d:5c:4b:cb:3e:8b:dd:35:cd:
03:9a:10:ec:96:0b:65:9b:cd:53:b7:62:b9:4f:1b:
61:3d:44:86:19:30:cd:38:65:93:d7:e8:f2:88:bb:
24:da:6e:d9:7d:04:b3:98:cf:6f:17:0e:61:8d:0b:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:45:69:8B:3D:87:FB:88:99:E7:A5:6A:6F:97:A0:1E:83:15:D9:C1
X509v3 Authority Key Identifier:
keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:52:e0:2f:b8:d3:69:31:cf:7f:ce:43:29:eb:4f:c7:94:b7:
c0:90:08:4d:3b:7d:28:bc:7d:bd:85:c5:73:19:c4:63:0d:de:
f8:f5:85:0e:82:24:df:3a:36:d5:76:bd:3e:51:4e:e7:ea:33:
be:4d:d5:45:e0:b8:b8:f0:7a:5c:5c:48:4a:4d:06:77:e4:0d:
9d:7a:85:48:74:3b:fb:43:97:ed:cf:2b:db:71:79:a7:eb:13:
f6:16:39:5e:c1:2a:fa:0e:e0:cb:fe:6e:9a:e4:83:6f:2e:fb:
d3:09:35:c2:5c:a8:d5:a9:16:83:fb:0f:a4:e0:48:ad:1c:6f:
dc:6d:13:c3:fb:d3:35:fc:7b:85:99:7b:44:cb:1f:9c:bc:02:
7b:9a:91:00:da:2b:a3:ba:d2:c8:6c:57:f7:e0:27:fb:6d:de:
58:9b:a3:db:74:9b:49:40:53:73:31:10:c2:63:28:0a:18:f3:
32:03:ba:00:fc:fd:eb:c8:08:5c:a7:e5:51:36:a3:b9:bc:ce:
89:87:12:1c:cf:df:db:b7:48:7c:78:e3:d5:e9:46:76:4d:03:
7c:5b:57:74:b7:de:97:dd:e0:08:37:2e:74:80:71:ef:d2:e4:
82:28:ba:c1:3d:90:44:3b:3d:77:c5:6c:b5:b7:ff:4d:69:c2:
d2:99:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:46:01 2025 by rpki-client