This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
File: DAUkO371VhHkCk279_5-kSCSplI.mft (raw, json)
Hash identifier: m+9mD5ovEilTf6mYAOXaCeCxC7QRb4Wvhd1xoihj2Xs=
Subject key identifier: F1:6B:7A:DF:20:D2:92:43:8B:C3:E1:3C:25:B7:95:FB:3A:8D:FA:3A
Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
Certificate issuer: /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
Manifest number: F5
Signing time: Sat 27 Dec 2025 04:13:52 +0000
Manifest this update: Sat 27 Dec 2025 04:13:51 +0000
Manifest next update: Sat 03 Jan 2026 04:13:51 +0000
Files and hashes: 1: DAUkO371VhHkCk279_5-kSCSplI.crl (hash: NHlP5LfCKgmJJzpO80SzPsvGeO6oaI9FaaV4tr0hGYk=)
2: 04EFECDA6F3411EF833F4C23C4F9AE02.roa (hash: y48q8nHX1JhR9dequdXIPjSajeit5DAhtA6kzockY/Y=)
3: 04679AF66F3411EF833F4C23C4F9AE02.roa (hash: lMcw8S12urhXxI0eoOsXqOKcaqH3ZsED3AjjGI9Ju6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 04:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A8E2, serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Validity
Not Before: Dec 27 04:13:51 2025 GMT
Not After : Jan 3 04:13:51 2026 GMT
Subject: CN=694f5d00-b1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:ea:96:46:34:e4:e7:5b:b2:aa:2d:91:cf:
70:31:b4:d2:59:d6:5a:1e:a0:b8:58:6c:66:4d:50:
cd:4a:45:2b:d9:b4:df:7e:ac:6f:5a:e0:df:27:33:
74:84:23:e2:fc:81:6c:6c:77:b6:77:16:b7:ec:bd:
f6:02:de:32:20:28:b4:04:5e:86:9e:06:ad:4a:5e:
96:e5:45:25:b8:80:10:34:c1:2e:8c:c0:6a:92:49:
26:f7:ef:dd:ee:f6:ff:bc:14:bd:e9:45:40:5e:cf:
fb:5d:ed:ca:02:db:aa:1b:70:27:ad:1d:fd:c8:bb:
e0:b8:6c:23:60:8b:d6:a7:ba:c2:8a:db:85:33:5f:
c4:43:a4:7c:8d:c7:6e:69:24:eb:f1:66:85:93:f1:
04:75:c4:93:a9:89:dc:c7:17:f0:35:73:24:f7:f5:
43:59:e9:92:24:7c:62:61:7e:f6:75:f0:e8:fc:95:
3e:ef:10:31:7c:99:40:0c:9c:6a:09:b9:ab:8b:ea:
f1:da:ac:6b:6e:b7:e9:5a:c7:ce:f4:c3:79:83:f6:
c8:d1:5a:33:6f:43:5f:4d:f9:37:b8:ca:69:e1:e7:
f8:5a:8b:75:d1:8f:50:d5:9f:d2:cc:fe:3e:1b:6d:
87:5f:b7:67:cb:db:11:1f:a9:6c:fd:d0:ec:18:3d:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6B:7A:DF:20:D2:92:43:8B:C3:E1:3C:25:B7:95:FB:3A:8D:FA:3A
X509v3 Authority Key Identifier:
keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:35:0b:10:3a:f7:1a:e9:c6:0a:34:80:ae:92:5e:1e:22:4c:
3c:b3:89:4a:f7:4c:27:cc:05:81:93:fb:5b:62:2d:18:98:aa:
56:82:b1:f4:66:f7:c9:c3:e9:58:9c:4c:15:55:a0:32:3c:bb:
15:28:ff:8b:cd:47:a1:5f:fb:33:dd:de:fb:5c:26:f1:ab:63:
12:9a:d3:e1:d4:b5:1f:ff:3a:d8:eb:7f:f3:ce:f6:26:3d:36:
31:70:35:ab:f8:49:d7:21:e0:94:53:fc:d9:86:e0:c8:5c:de:
9d:fb:0b:fd:8b:f2:49:3b:86:1f:2f:84:e2:ba:4d:d1:ed:e1:
e2:d4:a8:d9:b1:42:8a:45:f2:3c:6c:e4:ca:41:b4:9f:70:50:
4a:6c:45:33:14:dc:c6:ec:a4:20:c0:91:3f:6d:fa:77:53:70:
b3:a0:da:e4:59:0b:8d:55:f9:86:bf:6f:fd:10:77:c4:04:61:
a4:9d:28:18:84:46:ae:c7:be:db:28:8a:7c:d5:b1:ba:03:8f:
e9:39:d0:c0:10:7a:64:07:8e:1a:b0:ed:6e:24:5f:c5:63:eb:
24:94:1e:01:0d:ed:49:ef:1e:ce:f6:c5:24:be:0c:10:72:46:
37:c4:23:da:b6:7a:f5:73:ae:16:0e:15:32:02:dc:dd:e8:6d:
d5:eb:e0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 05:49:52 2025 by rpki-client