This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
File: DOryj-6BLxzJfxyWvKZFLvcubUw.mft (raw, json)
Hash identifier: hiS31Qum+mPtXbatxEwmE8JvPxg/+7ua0WSfZojIBP8=
Subject key identifier: 4B:88:30:E5:C9:A0:0C:58:3B:EF:F2:A5:6C:F3:98:49:60:09:EF:03
Authority key identifier: 0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C
Certificate issuer: /CN=A91B5732/serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C
Certificate serial: 0BDF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
Manifest number: 0BD6
Signing time: Sat 20 Dec 2025 18:27:56 +0000
Manifest this update: Sat 20 Dec 2025 18:27:56 +0000
Manifest next update: Sat 27 Dec 2025 18:27:56 +0000
Files and hashes: 1: DOryj-6BLxzJfxyWvKZFLvcubUw.crl (hash: 81EVfSiaHqEPOPc9CozHOjaM5qPBt3835Bh9t1t/PPE=)
2: 707BA10E9DB211EAB3A85A19C4F9AE02.roa (hash: GS9APLnsd9N7vlTL0hOq7MNSzNO+PtSv7rLmtH3iPh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl
rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 18:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3039 (0xbdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5732, serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C
Validity
Not Before: Dec 20 18:27:56 2025 GMT
Not After : Dec 27 18:27:56 2025 GMT
Subject: CN=6946eaac-1012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:40:f5:f8:c7:af:34:18:a0:2f:b5:ee:da:
de:ff:9a:7f:cd:23:ab:4a:68:29:95:a8:27:10:39:
31:77:83:a9:3e:55:c8:9a:27:cc:7f:18:f5:da:f5:
c7:c9:b6:61:d3:e0:90:12:09:5f:27:f7:56:7c:c2:
82:0a:32:34:d5:e6:fb:5b:f0:df:c5:04:3c:4d:58:
bb:b1:a1:e6:35:c8:34:73:9d:5c:a0:c8:25:9f:e7:
e2:6c:f4:7c:f5:09:04:5b:26:75:dd:8a:d8:85:d5:
75:6f:a2:8b:d5:47:54:ad:eb:7e:10:8c:da:5a:12:
09:12:f1:6c:f3:18:75:6a:79:1e:8b:d1:ee:40:7c:
2f:af:b8:4c:76:7a:28:6d:c2:18:d4:65:db:13:58:
72:a3:fc:1a:94:7c:72:71:aa:10:0a:ed:7d:90:f7:
f0:11:34:7c:34:99:52:a4:cc:f7:bf:05:4b:a7:09:
4e:d5:48:07:65:c4:ce:c2:f2:53:c7:44:d1:8e:b5:
b2:db:cf:c1:68:00:91:2b:8e:26:8e:f7:b5:c6:4e:
87:f0:fb:2c:3b:f9:87:18:07:22:09:31:af:7a:92:
4f:14:18:5c:ee:3d:4c:b6:4c:ac:ce:51:a8:de:07:
8f:0c:35:5b:16:35:fb:17:f5:b6:61:10:39:cc:80:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:88:30:E5:C9:A0:0C:58:3B:EF:F2:A5:6C:F3:98:49:60:09:EF:03
X509v3 Authority Key Identifier:
keyid:0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:b1:68:01:d6:98:2f:ee:20:a2:48:11:b5:76:61:63:64:3e:
aa:bb:57:85:90:35:a7:e7:00:e5:fd:81:33:d0:82:96:2e:43:
2f:9c:02:9b:c5:ef:2c:08:7f:da:97:af:fa:53:5c:15:56:08:
57:9d:e8:b2:e0:f1:eb:bc:0e:18:59:7c:57:50:7e:38:8f:bc:
36:69:01:a4:6c:0a:65:86:c4:26:65:ba:02:db:35:75:16:dc:
9d:89:dc:43:dd:42:a0:fa:20:45:f7:5c:0f:b0:7c:56:64:a6:
46:93:e9:ee:27:b1:ab:ba:72:bc:41:34:6f:87:7e:d6:c6:90:
6f:60:40:d4:36:5f:ca:9f:eb:18:60:09:34:57:80:3f:be:1b:
79:d4:10:70:37:27:55:c5:5e:8a:07:b2:57:43:48:db:b6:1a:
35:3e:b1:c8:60:cb:97:a3:eb:d5:fb:ed:a3:38:ed:5f:15:42:
d6:45:92:b9:27:fb:ef:77:da:83:6e:15:2b:86:d6:2f:ea:f4:
da:49:6e:f8:e6:af:8e:0f:c6:d1:59:27:34:6a:20:85:e4:c7:
ed:39:69:bf:b1:6f:fd:c1:b9:f8:69:33:22:e8:a7:c5:5e:f3:
45:75:a8:a7:31:cb:0f:0a:1c:11:c0:e5:e4:43:48:05:48:5d:
a9:7e:70:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:50:06 2025 by rpki-client