This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
File: dbcfVG9Hsh7j6pqGURRsHsXslaY.mft (raw, json)
Hash identifier: PqBoBPXmgRSzTn3W/stPC3y9RB5ygx+nYvz845RaIFI=
Subject key identifier: 31:2E:65:62:7C:D2:C0:33:CA:A4:3F:93:A7:8F:9F:E4:58:24:40:66
Authority key identifier: 75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6
Certificate issuer: /CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
Manifest number: 010F
Signing time: Fri 19 Dec 2025 04:02:20 +0000
Manifest this update: Fri 19 Dec 2025 04:02:19 +0000
Manifest next update: Fri 26 Dec 2025 04:02:19 +0000
Files and hashes: 1: dbcfVG9Hsh7j6pqGURRsHsXslaY.crl (hash: abFaa6EqrOMyeBAH4y7nUuCSvzIncCuuV2lsKKwO5ls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl
rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AD11, serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
Validity
Not Before: Dec 19 04:02:19 2025 GMT
Not After : Dec 26 04:02:19 2025 GMT
Subject: CN=6944ce4c-b29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:61:22:db:d9:15:a3:11:4e:8c:7c:fd:d1:
f8:c2:cb:7e:1b:39:0b:bd:59:23:22:31:a3:29:2d:
66:5c:36:db:0d:98:f4:73:cd:c7:26:e5:a5:48:07:
d3:1d:d7:f2:aa:ea:a1:5c:df:b7:7b:10:33:e9:ce:
e8:d7:64:22:b4:cc:7e:51:6c:44:4f:89:3f:00:57:
dd:46:8c:dd:88:67:ac:c2:ee:8d:72:65:0b:d3:dd:
94:79:73:d4:fe:5f:b3:21:ed:80:f5:11:42:e8:e4:
80:35:58:8d:1b:28:e6:4e:b0:d6:00:7c:4b:65:56:
ab:6a:ed:40:a8:42:c0:35:e3:25:6a:bd:af:99:4d:
88:91:dd:f4:26:07:1d:79:6b:d9:8c:7f:aa:dc:44:
49:82:dd:62:95:c8:92:57:95:b9:a2:f2:85:fc:82:
ee:6e:9e:e7:78:7a:3c:53:69:be:57:09:3b:cd:a2:
fe:1f:fe:eb:fa:6e:7c:0c:75:d4:97:a1:39:0d:03:
97:49:61:d6:41:53:6c:f0:1e:7e:d6:56:30:05:29:
3a:9c:73:e9:15:88:21:dc:05:47:df:77:cc:dc:9c:
a0:52:29:8a:03:3c:99:ab:15:2b:58:7f:77:69:ee:
e5:01:9a:fe:18:07:56:e6:6c:e2:1c:33:25:39:0f:
5e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2E:65:62:7C:D2:C0:33:CA:A4:3F:93:A7:8F:9F:E4:58:24:40:66
X509v3 Authority Key Identifier:
keyid:75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:aa:c5:5f:68:4d:3b:ed:4b:b7:41:d8:03:83:d8:b7:d0:ca:
c9:39:f7:52:71:47:10:29:1b:a7:4c:9e:6c:54:b3:db:ec:52:
53:3a:ff:62:88:41:a1:f8:01:a4:de:d4:e1:15:5c:5a:06:0a:
6c:b9:4f:ca:ec:fe:aa:b3:11:35:5d:a0:fe:5f:9e:69:b0:f4:
ce:85:1e:c5:f1:05:a2:0e:5d:c6:ce:74:f7:ff:02:66:f4:45:
44:83:d6:5a:07:40:52:63:53:19:1c:bf:19:8c:2f:56:27:70:
1f:bc:82:95:86:75:9a:81:01:9c:d6:44:fd:1a:d0:9e:3e:3c:
73:ee:90:b1:6b:57:a1:85:14:7c:fa:8d:c2:12:37:c8:ea:d9:
ff:07:4d:04:87:ac:5c:5a:16:82:e0:87:03:28:d1:69:98:25:
02:f2:f6:21:db:90:96:3f:25:45:32:3d:04:2b:69:d2:26:d8:
1c:66:9b:66:3d:cf:92:28:14:49:9a:68:e5:b0:00:2c:2f:cb:
12:cd:a2:d1:59:f6:6a:ed:f9:bc:8f:5c:7c:27:63:a1:da:c5:
4e:82:86:6a:20:f3:0b:8c:d6:2d:8d:86:2e:46:1f:98:9f:95:
56:7c:31:55:f4:d3:34:f9:7a:0c:66:e4:94:38:4e:d3:c5:59:
7a:1b:d8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:57 2025 by rpki-client