This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
File: DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json)
Hash identifier: iY9lx4XLAITfRuk2B8GgiO8BmMJxaMa9qBa/0PfnP7I=
Subject key identifier: 8D:79:3F:1D:2D:CC:D4:3C:FE:40:ED:78:87:5E:57:C6:BC:3F:BD:BF
Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
Manifest number: FC
Signing time: Fri 19 Dec 2025 04:24:54 +0000
Manifest this update: Fri 19 Dec 2025 04:24:54 +0000
Manifest next update: Fri 26 Dec 2025 04:24:54 +0000
Files and hashes: 1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: VpefCNqcBV2D2TB4nPmykcVNBEvRNFQTZ5ZD5j8KtrM=)
2: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: wnPWBmIvERZidNx6EbW5pekeL8Z2zXnUdVzGtoi292M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Validity
Not Before: Dec 19 04:24:54 2025 GMT
Not After : Dec 26 04:24:54 2025 GMT
Subject: CN=6944d396-58ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:f2:50:ba:e3:2e:2c:84:28:3f:a8:12:76:
d6:73:a7:e9:c0:1f:1e:e6:5e:aa:f3:17:ee:c5:22:
b2:ae:43:0e:5d:12:00:13:51:a4:36:92:25:d8:e1:
1a:66:f3:d8:bc:bd:24:96:b8:e2:9c:f1:7c:b1:ab:
41:a1:ac:1f:c8:02:3b:0f:b3:79:04:fe:40:fe:21:
e4:a3:0c:11:ef:41:71:a6:1c:50:d8:15:b0:87:46:
a9:f4:be:9b:db:7c:12:ca:3d:53:56:d9:b9:1f:74:
75:45:b7:ee:a7:dc:9a:9e:2f:cd:19:12:9e:b1:08:
fa:9e:d7:4f:f1:24:f6:93:06:b4:57:b4:7b:50:f2:
70:82:e5:49:f6:b0:07:e1:b1:11:7e:4f:09:7b:b9:
61:28:7b:02:fb:62:44:89:9d:a2:12:bd:61:f4:b5:
92:7a:39:e4:24:d5:45:4e:b1:61:41:9e:76:d0:56:
30:09:3a:a1:e8:ab:6e:3f:36:ed:18:3d:03:5b:9a:
37:bc:91:19:59:ca:77:64:51:58:68:c1:de:44:53:
49:d3:61:ab:b5:9c:a8:f4:a9:0f:55:1e:b8:8e:74:
d6:df:28:d2:d1:7b:83:a6:49:80:ea:0a:72:38:bb:
9e:51:6f:74:87:91:39:c4:7e:99:03:99:11:58:96:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:79:3F:1D:2D:CC:D4:3C:FE:40:ED:78:87:5E:57:C6:BC:3F:BD:BF
X509v3 Authority Key Identifier:
keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6d:4c:9d:e1:2a:84:05:9d:59:03:8c:fb:8d:72:5a:af:a7:
e7:6e:8b:9b:a9:75:aa:12:81:50:3c:21:58:99:09:3f:8e:42:
cb:b6:77:a5:98:f0:b0:50:cc:b6:1b:a5:83:39:d0:b0:08:ab:
9f:6d:ac:f9:a1:73:9d:24:fe:cb:3a:59:a6:49:80:56:f9:f4:
e8:e7:52:d8:0f:e0:25:84:8f:ba:4e:8f:69:8c:fb:a5:28:57:
90:62:c2:09:70:86:a3:65:df:1d:7d:7e:81:1a:7c:07:ac:f0:
6e:93:ea:ff:20:1f:d8:bd:ae:71:8f:9b:b7:0c:fa:d9:cc:16:
d4:7c:25:7f:f5:c1:be:f0:9c:f7:c4:c6:94:ad:ab:61:95:5a:
17:90:48:57:f6:d0:50:73:70:e9:ae:60:88:f2:b5:2d:c3:eb:
39:cb:eb:4c:95:71:b0:ed:11:03:e9:ba:93:d6:18:36:87:e8:
49:51:c8:54:02:64:04:87:77:86:45:dc:f8:3a:f8:ab:de:cc:
89:45:02:ec:da:56:0f:74:e4:1f:5a:18:ea:9e:fb:76:0e:a1:
8b:b0:2d:63:19:1b:b7:f2:40:0c:8a:66:47:07:d7:d6:c5:19:
f4:ee:e9:ae:f7:92:23:ba:0f:71:f9:91:9c:74:58:f9:64:63:
9d:b6:fa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:33 2025 by rpki-client