This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
File: jX4wWDULuN_v_Od3C7yMhrdioeQ.mft (raw, json)
Hash identifier: mnfh1AqLrI4F0Sy5BMXrBFPn7JZfMNt675wLAxipHkQ=
Subject key identifier: 9D:85:A3:6F:EB:0D:48:BC:E0:9C:84:C8:7A:8A:03:B8:F0:6B:99:20
Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Certificate serial: 0A84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
Manifest number: 0A62
Signing time: Sat 06 Dec 2025 18:56:02 +0000
Manifest this update: Sat 06 Dec 2025 18:56:01 +0000
Manifest next update: Sat 13 Dec 2025 18:56:01 +0000
Files and hashes: 1: jX4wWDULuN_v_Od3C7yMhrdioeQ.crl (hash: AYXS/9Ch3jTTUj6RDfcig0CN2Qiqa5Tih+Iixod1zpQ=)
2: 1043B2347BBD11EA8356C986C4F9AE02.roa (hash: 3nC+gG2mDTZBTV04V3x6XaZzq6tvXUY+nCHa8UvPHpE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl
rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:56:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2692 (0xa84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Validity
Not Before: Dec 6 18:56:01 2025 GMT
Not After : Dec 13 18:56:01 2025 GMT
Subject: CN=69347c41-43c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:9f:cd:fc:2f:20:cf:fa:4a:ae:3d:84:84:
e2:1a:b3:ca:26:a2:bb:d9:1c:25:c7:ff:69:c1:2e:
d3:4f:3e:52:d9:0e:13:3b:71:23:8f:cb:24:24:62:
9f:72:b8:84:01:0f:83:5b:ee:4c:76:a2:4f:33:0f:
0d:06:fc:a9:02:04:76:2e:65:d7:96:a8:b6:95:28:
ed:98:e5:0b:ae:60:ac:8a:e6:08:66:2f:b8:82:50:
08:ba:23:5b:b5:a8:47:58:2e:0a:53:59:b7:69:d3:
79:a7:31:2c:7f:d3:50:b5:76:e9:c4:7e:f5:f5:15:
98:55:96:52:22:7b:22:77:11:f9:4f:4a:c8:20:37:
a9:ac:e1:1d:05:82:b6:e6:5a:8c:38:e3:c9:28:80:
e9:11:4a:7d:33:5a:bb:6a:04:19:1e:5d:59:fb:f2:
64:a0:31:39:ef:28:d8:a1:23:a7:62:3f:44:a2:75:
73:b6:cd:a1:a8:bd:12:fd:25:d7:3f:ed:32:0e:91:
ec:fe:e2:24:d4:bc:fa:d5:1b:7b:98:ee:89:c3:42:
30:20:86:f5:9c:df:27:95:da:aa:5a:0c:48:bc:e6:
58:cb:a5:e0:59:83:d5:75:14:6b:4f:18:a0:50:ba:
76:d8:74:58:7e:be:75:db:6e:1a:ec:92:40:1f:ce:
de:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:85:A3:6F:EB:0D:48:BC:E0:9C:84:C8:7A:8A:03:B8:F0:6B:99:20
X509v3 Authority Key Identifier:
keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:52:86:7e:e7:21:74:95:68:c8:10:d4:cc:19:da:37:08:c9:
2d:34:b6:a1:e6:90:2f:2b:db:3c:eb:02:40:d1:6c:7d:8b:2a:
4c:14:52:0c:f6:46:15:a2:a7:26:3d:e2:1c:bf:cd:4f:11:02:
5c:5b:e8:fe:84:25:fe:b7:da:53:5f:d1:de:9e:55:d8:d1:3a:
65:21:61:ea:05:d9:ce:f3:c9:46:60:db:38:a0:5e:e2:c3:3d:
ed:fb:92:13:8b:8c:ad:57:b2:ad:97:37:fd:d6:a8:f0:fd:4b:
01:a6:56:40:fd:05:7d:b2:94:a4:b4:72:d3:b9:5f:45:8c:b4:
5e:72:e4:8b:04:43:a4:05:ae:7f:0c:bf:82:bd:f9:d1:14:e7:
dd:0e:4d:7f:2a:ed:3f:d4:67:ee:d5:7a:da:c7:37:8c:c0:f0:
57:ab:e0:f6:17:19:77:84:82:19:01:2e:ae:8c:44:eb:87:73:
21:6d:31:b5:7d:3f:9c:73:a9:34:5c:f6:78:78:c0:47:f1:ef:
f1:f3:a0:85:a7:8f:16:af:7a:19:91:e0:39:08:28:0b:de:c7:
50:53:e1:14:a7:d4:68:52:10:89:b6:27:c5:83:10:fe:a6:32:
1b:3a:cf:0e:86:4c:92:72:6c:72:c5:7e:6f:1a:89:e7:42:44:
a4:1e:ee:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:45:10 2025 by rpki-client