This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
File: DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json)
Hash identifier: LmPyMTlDnkc9Ok4q7zqagZBodmqhYA6eKOi1seSTXDg=
Subject key identifier: F5:94:0C:79:0A:4F:BA:E4:DB:25:DD:B1:75:8A:7A:60:B4:B1:DB:18
Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Certificate serial: 0E71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
Manifest number: 0E66
Signing time: Sat 20 Dec 2025 17:27:17 +0000
Manifest this update: Sat 20 Dec 2025 17:27:17 +0000
Manifest next update: Sat 27 Dec 2025 17:27:17 +0000
Files and hashes: 1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: W8QR0wxyONhnoGOhgpnxP+2xyTZWy9Qdqm0ecx1A060=)
2: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: M2L1TDDyX72ReECKnE9vUgAsmnB0Pz4FwQ7PdyDyDV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 17:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3697 (0xe71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Validity
Not Before: Dec 20 17:27:17 2025 GMT
Not After : Dec 27 17:27:17 2025 GMT
Subject: CN=6946dc75-ba16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:07:dc:bf:52:41:84:4a:b0:45:9e:7a:b9:
71:ad:95:2d:48:d1:2c:03:74:5a:a0:82:e9:7f:4a:
b7:cc:00:77:13:e0:a4:8a:df:6e:39:f7:24:20:1b:
aa:c0:bf:ac:36:e9:aa:f6:e5:78:92:6d:ea:f0:bd:
05:bc:8c:05:8c:e5:09:78:ce:05:f8:7f:f6:ec:8c:
3c:34:a8:8b:79:61:41:43:4e:7c:f9:fa:45:c1:52:
f7:d8:87:94:48:ba:18:af:2e:fe:f3:5c:ee:81:c3:
83:b7:f2:ba:60:77:04:51:59:96:a8:1c:f8:2c:7e:
39:15:d4:d3:89:29:d5:df:e7:e7:3d:ff:d6:9f:c0:
31:b2:dd:c2:42:a5:9b:e8:36:8c:03:d5:ce:d2:06:
25:88:36:0c:3a:3c:ca:f4:c7:f0:c3:63:76:84:45:
1d:ae:9d:e3:f0:89:6d:3b:58:0e:c4:b1:fa:e9:d4:
9e:39:ed:25:39:72:f5:19:9e:ac:ac:c8:fb:f6:9b:
b7:d7:b3:07:ea:aa:3f:26:aa:55:c3:b0:34:2d:de:
8b:8a:58:ae:2f:fa:6b:22:07:b8:3f:d8:f8:87:56:
c1:bc:74:53:6a:8a:d1:c8:0c:a4:c9:30:3f:4a:87:
7b:48:c8:bb:8b:a4:44:7d:d9:74:79:06:6f:e1:7f:
3f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:94:0C:79:0A:4F:BA:E4:DB:25:DD:B1:75:8A:7A:60:B4:B1:DB:18
X509v3 Authority Key Identifier:
keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:13:53:a1:1f:ca:58:58:5d:a6:11:00:24:2f:d4:68:a0:11:
7a:54:7c:69:24:72:ac:51:44:24:ab:ac:59:ef:d7:5f:74:3a:
e2:ca:1e:37:0e:ea:9c:c5:dd:f4:5f:bf:0c:bf:f0:bb:2e:b8:
e8:04:b1:86:3c:48:c8:48:a8:3e:c2:4b:ea:cb:ce:8e:4a:c9:
f1:de:d1:2d:76:94:1f:83:a3:b1:b8:c3:be:ca:b1:84:ce:22:
40:11:9d:a0:8d:81:7f:16:c0:7f:d1:eb:7c:4e:8c:50:e1:e2:
81:2d:a1:8e:15:cb:a6:7e:c4:ae:06:39:70:75:de:88:70:49:
40:86:f5:f4:98:e5:ff:87:e8:b6:aa:fd:51:6b:9b:e8:81:07:
0a:dd:25:ef:bc:7b:d4:4f:02:bb:72:93:6a:a7:b0:5a:a3:b7:
6e:cc:87:91:69:a6:89:7e:be:76:1e:9d:21:8d:df:f0:13:e1:
0f:cc:dd:32:28:30:f3:4d:89:ba:49:2a:94:ab:46:f6:45:13:
ac:19:21:4d:f7:b9:63:93:da:dc:28:8e:af:64:b1:c0:2c:ef:
2a:be:ed:a8:ed:23:3a:e5:f6:27:e8:21:57:a6:af:e0:fa:61:
96:96:cc:80:bc:2a:62:74:d9:57:10:e1:15:50:ec:96:08:1f:
06:8d:91:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 09:44:37 2025 by rpki-client