This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
File: DWVNb87NM-FRbiDC43NPhUBuckY.mft (raw, json)
Hash identifier: DlHDFFkJ5vniGyCCO74Kas4pUSZ1QZV6d3DxsttKjYM=
Subject key identifier: C9:6B:29:3A:07:BB:10:F7:CA:CC:93:77:D6:76:D0:C2:2D:17:DE:48
Authority key identifier: 0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46
Certificate issuer: /CN=A91ECB9B/serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246
Certificate serial: 04E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
Manifest number: 04DD
Signing time: Thu 18 Dec 2025 23:07:05 +0000
Manifest this update: Thu 18 Dec 2025 23:07:05 +0000
Manifest next update: Thu 25 Dec 2025 23:07:05 +0000
Files and hashes: 1: DWVNb87NM-FRbiDC43NPhUBuckY.crl (hash: ZFYR4mURgBcApv1HsGs2SrjnNrKFoG8+RZH081bAv4s=)
2: 48BEEFFEF52F11EDADE1B280C4F9AE02.roa (hash: mciOFoWN4OGu4gy01Ach9NNCm4o/f8zqGbHO8EJqoLw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl
rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECB9B, serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246
Validity
Not Before: Dec 18 23:07:05 2025 GMT
Not After : Dec 25 23:07:05 2025 GMT
Subject: CN=69448919-e38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:06:55:13:11:d7:aa:5c:df:41:7e:dd:0b:
5b:78:36:04:91:8e:cf:d4:2f:8b:68:c2:c3:4e:d5:
0b:fa:3e:e4:0e:0d:47:71:0f:88:b5:8f:d1:57:59:
87:25:2c:e0:1b:cf:ff:dd:dc:5c:0f:c8:c1:3d:e5:
c8:99:1a:10:d0:be:45:85:22:b1:f9:a4:f2:71:05:
81:a0:19:a1:70:ff:de:ae:0f:f0:fb:4d:da:30:f4:
57:06:9f:a3:43:d0:4c:cb:c6:72:39:e5:ad:fe:06:
0d:9c:dc:8d:41:3f:b1:cd:5f:15:30:86:e6:01:c5:
6b:9d:70:7c:10:4d:d3:76:85:22:d2:04:21:6d:61:
8c:26:68:4f:61:d3:a5:51:d5:07:4d:f5:76:2d:33:
10:b4:73:b2:3a:d4:1a:e5:c1:29:80:9a:bc:c2:42:
d1:6c:a8:c4:73:b5:01:7e:08:a5:6e:35:1a:f9:92:
c3:7e:d1:4c:2f:93:e9:90:4d:99:2c:d9:61:c6:7d:
34:3e:ad:7a:51:44:e4:d2:68:3f:ae:e2:d6:07:88:
f4:2e:41:ac:06:bd:ab:ef:50:2b:3e:e7:d2:c3:30:
0a:c3:43:f8:ac:a4:8d:22:fc:0e:37:7a:cb:5e:ae:
7a:50:12:8f:5e:c0:ef:eb:71:d6:ed:ca:1d:be:0c:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6B:29:3A:07:BB:10:F7:CA:CC:93:77:D6:76:D0:C2:2D:17:DE:48
X509v3 Authority Key Identifier:
keyid:0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:d1:4c:cc:88:09:db:5f:08:8d:d8:13:2b:a5:5f:01:ad:0a:
93:66:5b:68:55:85:58:27:a9:9b:0e:99:5b:7b:1c:4e:e9:b6:
ee:bb:38:46:ba:5e:7d:75:77:79:0c:5d:fa:99:4a:ab:01:8d:
5e:6c:35:56:5b:64:33:27:b5:13:72:5f:4a:a6:ae:d4:ab:6b:
8a:9c:87:5a:0b:ee:a3:1f:29:b8:42:79:07:ee:53:6d:d9:de:
f0:9c:2e:61:bf:9e:1d:77:27:82:fc:f1:d1:24:b5:69:cb:8e:
69:5b:af:bc:a0:3e:55:1e:ee:bf:a7:12:9d:e4:6d:30:91:ce:
72:63:e9:9d:83:ab:07:41:4d:48:d8:68:e0:5c:39:ef:31:42:
3c:e6:22:af:00:21:0b:42:86:bf:d7:8b:13:63:a8:ed:80:9c:
5f:a9:41:e4:df:40:05:00:d3:7d:94:4f:59:68:b6:c3:1c:68:
72:45:f8:c2:ae:0a:7b:ca:85:58:38:f0:d4:0b:e3:9d:61:1c:
2b:b0:61:24:73:7c:65:dd:c2:30:31:69:d8:9d:fc:38:90:ea:
b8:be:e9:6a:29:10:e1:5a:f7:dc:72:0b:e7:8a:01:34:9f:1a:
a1:56:ef:14:f1:d6:75:59:8d:5e:12:56:be:fc:41:48:02:e3:
19:39:ee:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:57:28 2025 by rpki-client