This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
File: ddHHozMD2o3GQirjUXA_KlKN874.mft (raw, json)
Hash identifier: aKjoNmK3N74AM8O8g4BDXvfUsuQE/+ApmnWRj8Jz9To=
Subject key identifier: F7:1E:C0:49:34:1B:4F:02:CC:99:3C:78:6A:03:99:CF:59:A2:98:F0
Authority key identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE
Certificate issuer: /CN=A91C5832/serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
Manifest number: 018D
Signing time: Sun 21 Dec 2025 02:50:09 +0000
Manifest this update: Sun 21 Dec 2025 02:50:09 +0000
Manifest next update: Sun 28 Dec 2025 02:50:09 +0000
Files and hashes: 1: ddHHozMD2o3GQirjUXA_KlKN874.crl (hash: fbXUDXRc80UhwqxAJZUhcDL4KUpzSYBdbgFMn/tBlqg=)
2: AC0E54A8C8E311EF98C2B365C4F9AE02.roa (hash: PlPXvige1wM44fDKeXBrjYCBTjGnK3s8s01Ti3fCICQ=)
3: 3E6CF84C883311EE8822D90BC4F9AE02.roa (hash: gchZs9w0rw9TlztTLiN3YxQhLwyUQamaOc4Ws69TNxo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl
rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5832, serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
Validity
Not Before: Dec 21 02:50:09 2025 GMT
Not After : Dec 28 02:50:09 2025 GMT
Subject: CN=69476061-1516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:c5:76:25:2a:a5:a7:d5:de:c6:a6:2e:65:
2d:fe:7b:62:97:e2:d3:11:b7:0e:3f:57:ef:c4:69:
cc:7f:14:f7:c0:45:e4:a4:6b:77:71:34:fd:b9:91:
d3:08:0c:61:b5:c0:1b:5d:f5:a0:e5:22:ce:1d:da:
38:ae:ab:5b:99:31:46:23:f7:53:95:5b:2a:cd:96:
8d:2c:82:d9:50:96:20:3c:e9:a4:6c:5c:7f:01:eb:
84:bd:3b:5b:a0:a4:91:3e:f5:c1:c8:05:9b:6b:15:
bd:55:0d:a1:bb:db:7e:54:e7:6b:29:32:62:9a:94:
d6:a0:88:56:ad:36:11:67:90:f2:aa:87:34:34:c6:
6d:46:a8:00:79:67:93:9a:9b:d1:78:03:d3:fd:10:
2f:92:a4:05:3c:70:d8:b0:f6:be:27:1e:26:5e:78:
19:f8:7d:ff:34:c7:97:e7:72:05:15:90:d5:91:36:
53:f3:9f:aa:cf:62:fd:20:85:1c:50:85:10:44:f5:
42:3e:85:2b:fb:d9:f0:87:d4:4a:f2:8d:b4:c2:4d:
07:13:65:8b:cc:cd:87:c4:a0:db:a0:2d:e5:ad:e2:
ac:5c:71:5b:c8:34:90:0c:9f:eb:ba:93:cc:7a:ee:
0d:ed:75:4b:b0:d3:d4:fa:93:6f:65:e0:0f:9a:3c:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1E:C0:49:34:1B:4F:02:CC:99:3C:78:6A:03:99:CF:59:A2:98:F0
X509v3 Authority Key Identifier:
keyid:75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d0:9c:54:31:17:ff:18:34:a2:71:14:06:14:63:79:2d:46:
40:ac:3c:da:25:d4:3c:6a:ad:db:7b:a7:a6:7c:58:07:e9:09:
8c:40:93:45:9e:3e:c4:03:bb:ee:7b:cd:ba:8e:71:14:93:08:
73:c1:2d:6c:60:d6:c7:39:b6:3c:32:53:61:c3:9e:1a:c5:62:
7d:2e:cc:7b:0e:f3:24:5c:0b:b5:ad:c3:f5:dc:da:1e:df:ba:
c4:4b:66:d1:cd:20:db:bf:a1:0b:02:15:29:13:b3:6f:45:37:
bf:ca:a0:0b:8f:c6:1b:79:90:da:99:dd:e4:40:dd:23:81:af:
df:bf:8b:26:b6:db:aa:2f:a9:6a:bb:75:70:86:64:53:57:2c:
85:d8:23:2c:b6:1c:f6:55:18:60:a0:77:9a:72:88:19:fd:cb:
ae:35:e0:b2:a5:60:05:8f:5d:36:d7:32:bb:95:08:c2:4d:8c:
90:05:eb:65:08:66:b1:17:31:dc:66:c1:42:7c:56:0f:60:95:
19:82:98:d4:bf:52:6c:f5:db:a7:ce:9f:8a:a7:f1:34:42:1d:
18:0c:84:03:f0:64:b5:e3:fa:1e:9f:65:7e:2e:04:14:85:3a:
56:c4:99:f2:6e:db:a7:1a:12:14:4b:20:6f:33:aa:48:0b:84:
45:4d:17:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:44:35 2025 by rpki-client