This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
File: dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft (raw, json)
Hash identifier: Yk4MjmkXrFI4CEzyCjCF9ADcrsFF2XGwRCnkEb13W4M=
Subject key identifier: 12:54:91:98:8C:FB:CC:E2:1B:5D:38:5F:D7:64:4B:4B:6A:51:F8:53
Authority key identifier: 74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC
Certificate issuer: /CN=A915B0D2/serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
Manifest number: 018C
Signing time: Thu 25 Dec 2025 02:39:34 +0000
Manifest this update: Thu 25 Dec 2025 02:39:33 +0000
Manifest next update: Thu 01 Jan 2026 02:39:33 +0000
Files and hashes: 1: dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl (hash: 4K+eeHpsc4pqPKiqtbS7BNgz1Gyvf5RtFVSjki3o1RQ=)
2: FA0FC12E869E11EE9FAC6784C4F9AE02.roa (hash: gpH66W9ofdt9rpy15def83m62jpGK48SC+NyKscsslE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl
rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 02:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B0D2, serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
Validity
Not Before: Dec 25 02:39:33 2025 GMT
Not After : Jan 1 02:39:33 2026 GMT
Subject: CN=694ca3e6-02b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:de:aa:e3:f0:52:74:9f:f1:28:6b:f2:fe:
f5:cc:7f:b6:ce:e9:51:36:b8:e3:63:61:b2:d4:8f:
31:2d:a5:b8:89:6b:8e:26:3c:91:fd:28:81:11:af:
a6:5b:cd:2d:b8:5e:0d:a9:db:a2:f9:66:9f:0f:04:
ce:6c:aa:85:0c:dc:80:14:5f:71:e4:22:65:c0:20:
f8:31:66:6e:0e:03:5b:93:cc:12:c9:33:4e:7f:8e:
4a:a0:3f:63:7d:55:18:c7:99:98:5b:aa:ad:4d:59:
f5:67:7b:e4:8e:ed:41:c3:79:78:18:7b:79:64:ed:
e2:4f:c0:3c:a2:b2:19:2a:52:1a:c8:da:e5:ed:51:
90:ba:3f:06:73:6e:b9:bc:36:7e:c6:76:95:ba:f7:
25:c2:9b:5f:1d:e9:e3:9f:15:3d:51:b2:d9:6c:8a:
6b:2c:77:9d:6b:f5:9b:8a:19:01:2a:25:04:ff:f3:
17:64:67:60:7d:65:66:32:b7:b8:47:03:45:83:a9:
55:c8:d4:32:23:e8:ef:8b:b0:39:80:30:f4:7c:07:
d2:04:86:67:d2:aa:f4:df:12:29:09:6e:75:9f:af:
6c:d2:3f:73:a0:f1:4a:7f:f0:5b:99:fc:2f:8b:90:
d7:ba:43:1d:1f:f9:93:16:99:8f:15:1f:02:31:f2:
76:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:54:91:98:8C:FB:CC:E2:1B:5D:38:5F:D7:64:4B:4B:6A:51:F8:53
X509v3 Authority Key Identifier:
keyid:74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:45:27:e7:10:cf:33:b4:55:e1:03:18:a9:41:62:ab:9e:00:
62:e6:ad:66:2a:49:51:57:8b:aa:ce:55:a6:94:7b:df:33:fc:
8a:32:77:59:71:a4:9a:01:fe:2b:bb:58:03:d0:ae:1b:25:c7:
54:0f:ad:54:39:e5:8b:fc:8f:f5:de:d3:e9:f0:18:2e:d5:0e:
fc:eb:78:2a:18:fb:7e:d1:12:d3:55:f2:47:e8:48:2f:9e:27:
44:52:b4:d7:90:22:a4:7b:18:62:78:51:6e:11:ca:6f:05:10:
e1:18:88:bf:eb:16:a5:bf:ba:be:58:31:a2:0e:77:60:cd:54:
87:17:67:d0:d3:cc:1a:d8:8b:07:31:80:ed:b4:97:38:85:78:
85:2d:d3:66:6d:3c:49:f5:47:f3:fc:a4:70:43:ae:f5:4e:f0:
25:6a:96:6a:07:4d:53:fa:6f:8d:34:68:cb:bb:2d:b6:e8:87:
82:cf:56:8b:1d:94:59:2e:f5:f7:d9:cc:c1:b7:2f:55:5b:f4:
b5:1f:2f:a8:8c:04:ae:6d:c2:43:8e:cd:ef:e0:dc:bb:73:af:
92:39:f2:74:f5:d8:13:f3:9f:d4:19:18:d5:d0:ff:9f:96:7a:
4c:77:f4:75:85:c9:5c:f6:3c:9f:5d:23:9c:c7:55:48:30:d0:
54:02:f6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 23:10:20 2025 by rpki-client