This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
File: PDd12fh_DqopaGZ3TqYvYnTQZss.mft (raw, json)
Hash identifier: m8dP4yMdg92o5VTU5hgR/0fzLM91eZPoljOMBkwnzxE=
Subject key identifier: 23:4A:86:79:B6:28:AD:55:7A:01:C6:D6:FC:0A:B0:A1:F2:E0:3E:DD
Authority key identifier: 3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB
Certificate issuer: /CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
Certificate serial: E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
Manifest number: E2
Signing time: Wed 17 Dec 2025 05:04:57 +0000
Manifest this update: Wed 17 Dec 2025 05:04:57 +0000
Manifest next update: Wed 24 Dec 2025 05:04:57 +0000
Files and hashes: 1: PDd12fh_DqopaGZ3TqYvYnTQZss.crl (hash: ekSDGb75N/h+gO4/zAEt7czxD8svFe8Oz3wYCWQNRh0=)
2: 02B9688489EF11F0850AA959C4F9AE02.roa (hash: PvYR9h4WJHkSiwS+OrBISxOSGbPqpgxFMJU0vcVA8b8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl
rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 05:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193388, serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
Validity
Not Before: Dec 17 05:04:57 2025 GMT
Not After : Dec 24 05:04:57 2025 GMT
Subject: CN=694239f9-8168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:61:20:7d:b5:ec:43:84:f6:2c:66:ed:f8:
9e:a6:1e:cf:34:4d:6e:c8:fc:ac:c9:ca:be:08:f1:
c4:7a:80:a5:01:a0:e6:3e:78:9e:0d:5d:83:37:4d:
bb:b8:63:77:4f:f8:a9:ce:b2:58:0f:cf:e2:13:0e:
d9:4f:03:e4:ec:b5:1a:b1:78:fe:9f:0f:9a:6b:3d:
22:90:21:90:3c:9f:d7:27:4e:a6:1c:72:99:c1:14:
29:3d:f2:c8:ac:d8:07:b1:45:8d:e3:d2:40:75:7f:
8f:c1:63:d8:c4:82:53:fa:8c:fb:3e:cb:e1:a4:5e:
2a:b1:4e:42:18:be:bb:1f:2d:ff:75:08:da:5d:16:
51:5c:da:66:58:86:37:90:1c:4d:82:c3:1e:73:af:
2c:94:89:78:3a:f8:1d:f9:0d:91:71:ee:44:73:1e:
20:2e:ac:96:b0:11:d5:27:65:51:f5:f7:c3:2c:f8:
8a:cb:23:c2:0b:db:5f:c1:27:86:3b:1b:a6:ab:3b:
2e:69:f6:91:3f:c7:a1:c1:77:23:9f:cf:58:73:c2:
e3:f3:7b:88:32:d7:7d:ad:56:1a:9a:27:0d:da:78:
f4:d8:e8:10:71:cf:7d:62:1d:37:a6:2e:2f:44:e2:
b6:b1:02:14:43:7d:bb:70:41:eb:0a:14:b7:28:81:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4A:86:79:B6:28:AD:55:7A:01:C6:D6:FC:0A:B0:A1:F2:E0:3E:DD
X509v3 Authority Key Identifier:
keyid:3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:2d:0c:96:51:f9:4c:11:75:fa:17:93:02:ee:0a:71:15:e2:
e7:48:c5:aa:89:8b:e0:c2:8f:9c:c0:97:fe:9f:1f:cc:d5:be:
87:5e:61:3f:f3:b1:6d:fe:99:2a:40:a2:c8:8c:7d:c4:c7:e3:
8d:53:e5:d4:4d:02:29:26:69:35:ca:27:06:df:50:83:4b:20:
03:c1:99:b8:a8:34:91:a2:b1:eb:ca:c0:12:ac:c4:78:56:c4:
23:6b:2c:c1:ee:92:b8:82:8f:6e:06:7a:0f:91:d3:5b:71:cd:
f1:cb:6d:59:72:a9:36:4c:fe:28:95:20:e3:83:90:38:7b:55:
b7:f3:65:fd:ca:66:80:d1:67:c5:c0:b6:6a:0e:76:40:a6:7b:
b3:17:df:bb:6a:17:21:d1:0a:c3:b1:44:26:18:07:6d:c8:3d:
4f:b0:6a:51:67:73:74:f0:2c:be:14:3a:21:84:83:76:c8:77:
ae:70:9b:8a:7f:35:f9:01:bb:51:79:3a:6d:c3:07:be:70:06:
9d:c8:c0:51:35:2b:3d:69:1b:24:27:ad:89:76:80:0e:1d:e8:
4e:63:b5:65:55:36:5e:42:b3:4d:d3:f7:bc:69:cc:0a:77:46:
68:23:f4:f0:a9:86:6f:cc:ee:12:f8:d2:ca:35:c6:b7:7b:04:
72:14:8b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 02:34:27 2025 by rpki-client