This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
File: Du4Pv3hqd39MJ0FT91NvPfiflJI.mft (raw, json)
Hash identifier: d6tj0X1a0MmziYlkZi5oxhEo+u+vylfNs9HuYAwLvmk=
Subject key identifier: 45:F6:1F:11:55:F1:CE:D4:4C:C7:5B:7A:8C:93:2E:CE:DC:96:77:B4
Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92
Certificate issuer: /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
Certificate serial: 0C6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
Manifest number: 0C64
Signing time: Wed 24 Dec 2025 18:13:27 +0000
Manifest this update: Wed 24 Dec 2025 18:13:26 +0000
Manifest next update: Wed 31 Dec 2025 18:13:26 +0000
Files and hashes: 1: Du4Pv3hqd39MJ0FT91NvPfiflJI.crl (hash: HQi41XCrW5VNvy1woCs0kiKYIveabspJ0hJGkhgKC6k=)
2: 9C749C7C140811EABB746522C4F9AE02.roa (hash: PSYdfl98cedaU/3qMpT/EpqxaVey0RuTtf7go0CLQak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl
rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 18:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3181 (0xc6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177285, serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
Validity
Not Before: Dec 24 18:13:26 2025 GMT
Not After : Dec 31 18:13:26 2025 GMT
Subject: CN=694c2d47-7b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:11:9a:9b:3b:bc:53:7c:f8:36:6e:43:5f:
0a:ae:e6:c4:f4:48:ed:3c:c7:56:45:23:64:47:ef:
a7:e9:34:e5:01:67:c4:96:c7:dc:c6:61:d3:98:e7:
f4:e0:01:7b:7f:49:a1:89:50:ce:b0:a2:c6:d6:bc:
7d:93:12:42:0a:94:8e:b8:4d:f4:27:e9:be:d1:b6:
7d:6e:11:79:3d:60:dc:c5:cb:75:28:a6:4f:d6:ec:
80:c6:a8:e5:de:75:de:e7:41:56:98:a6:69:e5:9e:
88:ba:6a:ae:d3:2d:8a:b0:0e:d9:f1:60:87:bb:76:
a3:74:22:32:ab:ef:20:ab:c4:63:bd:4f:22:78:f2:
37:f1:c1:ee:cb:da:4a:29:90:20:ca:7b:c0:7a:90:
03:0a:1f:95:59:3a:0b:24:e3:42:01:a4:91:ef:29:
52:c2:74:15:79:55:71:99:09:f8:cd:5e:81:0a:e9:
7f:0a:2b:02:7b:14:3e:87:cd:3b:92:2a:ce:c2:14:
46:84:62:0b:05:e6:b1:23:3e:15:42:fe:c2:80:6a:
c3:f5:09:50:dc:d1:55:27:30:0e:bd:c0:72:1d:9b:
53:90:a7:b8:dd:73:99:97:1d:67:30:ac:53:f2:6c:
8d:2c:87:0a:b2:7c:86:bb:f8:13:11:bf:ca:1d:bf:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F6:1F:11:55:F1:CE:D4:4C:C7:5B:7A:8C:93:2E:CE:DC:96:77:B4
X509v3 Authority Key Identifier:
keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:72:00:e2:fd:cb:22:f3:60:fd:e2:e4:ec:7d:c7:36:55:dd:
9a:18:6e:1a:94:09:75:bb:12:1e:35:5d:47:f8:d3:4c:d6:15:
f1:72:2b:34:ed:80:70:96:37:87:1e:ce:a8:5d:bb:07:32:bd:
fe:ee:43:95:ad:94:03:61:3c:52:b1:86:9b:3e:c7:16:6c:e0:
94:57:42:8b:69:be:4c:f9:2b:86:a7:a8:71:0a:87:19:8a:8e:
a2:66:dd:cd:dd:4b:a6:c3:7e:c0:b3:ce:21:94:93:fe:b9:16:
a9:b8:7c:1d:17:55:f8:89:8a:b2:74:49:29:4f:77:9c:11:f9:
c6:98:d5:13:4a:cd:0a:f5:db:66:cd:4a:92:79:7c:dd:e8:fb:
1f:7f:d1:af:48:d7:f1:65:21:8f:4b:9e:c7:d2:ca:bc:9d:28:
f6:f0:72:f1:97:6b:25:a1:ff:5a:42:72:b8:11:44:e3:7b:d5:
99:e7:71:fc:8b:e4:50:c0:2f:61:dd:68:17:7b:26:a6:49:4e:
41:f8:23:0a:8b:83:ac:4b:db:0f:3b:ab:a2:e5:bd:ce:9f:1c:
8d:45:c6:94:ce:f4:34:ac:ff:dc:01:64:24:9d:c8:00:8a:67:
e4:90:7e:e5:8c:5f:2d:79:9c:69:6c:d7:31:6d:5c:ad:81:f5:
0c:87:ea:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:33:20 2025 by rpki-client