This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft
File: jcnPJvnU_dwRFF0zw70Hli1ie7g.mft (raw, json)
Hash identifier: CWVO8tD21UHnpTawu/9Vcz/gAoi+gdJ51JdL1ckb5hQ=
Subject key identifier: E6:08:70:46:B5:55:62:DD:59:D2:86:06:1E:F9:4D:6C:BD:43:91:CA
Authority key identifier: 8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8
Certificate issuer: /CN=A9113C02/serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft
Manifest number: 266E
Signing time: Thu 04 Dec 2025 16:02:07 +0000
Manifest this update: Thu 04 Dec 2025 16:02:06 +0000
Manifest next update: Thu 11 Dec 2025 16:02:06 +0000
Files and hashes: 1: jcnPJvnU_dwRFF0zw70Hli1ie7g.crl (hash: F33LcJpmPKnbYfqAbCw/lzXCxPmzAcVHjmwqJ0Gsad4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl
rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 16:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113C02, serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8
Validity
Not Before: Dec 4 16:02:06 2025 GMT
Not After : Dec 11 16:02:06 2025 GMT
Subject: CN=6931b07f-5d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:e7:5c:20:c5:56:af:2c:9d:16:3d:bd:b3:
03:47:7e:3a:98:b1:fd:6a:33:45:a8:97:c5:be:27:
7a:28:14:4d:8a:6d:1d:0f:71:d6:38:50:7d:45:6d:
56:b0:a9:b0:97:44:56:04:0c:a0:3a:f0:6c:c6:12:
60:49:37:f1:0d:b8:32:d9:59:a3:0d:c0:cf:bb:52:
0d:55:52:b2:51:15:9b:ef:2f:28:82:5a:96:9a:63:
32:28:d6:1a:76:41:6a:60:27:8c:45:05:d8:ce:ab:
07:04:2d:34:39:27:7b:94:b7:b5:ab:76:f1:2c:3e:
03:d4:8c:fd:92:03:ff:bb:f6:88:1e:e2:70:4d:a5:
98:f1:e7:fb:61:4f:b3:c2:e5:dc:03:4b:22:97:ce:
79:34:93:4d:58:41:74:ed:1a:86:cb:d7:15:0b:b3:
ec:58:c0:1d:53:4f:ec:89:8c:f0:6e:1e:4a:f8:95:
72:13:6b:32:51:33:e8:1e:55:e9:7f:11:d7:3f:a9:
f9:e1:3f:28:f9:1d:6d:32:9e:51:c0:58:71:18:53:
af:8c:e0:cd:72:14:88:0e:a0:c1:5d:e4:19:7c:db:
23:1e:8f:61:4f:e4:df:3c:ef:ef:ba:6a:2b:d5:7d:
5c:be:d8:02:b5:20:90:b2:b6:a4:8a:63:bf:3c:da:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:08:70:46:B5:55:62:DD:59:D2:86:06:1E:F9:4D:6C:BD:43:91:CA
X509v3 Authority Key Identifier:
keyid:8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f6:b9:1d:a7:32:4e:95:c3:7a:9c:9c:09:67:1e:19:a9:3b:
35:fa:c1:6e:2c:57:6b:fc:f6:dd:dd:48:06:ae:db:69:5e:df:
4d:1a:67:5f:6b:cc:37:98:66:50:21:ea:bc:aa:22:d6:3a:7f:
de:03:c6:09:68:d1:e8:f4:90:db:48:c5:75:2d:e5:ff:cd:bb:
0f:08:4a:78:2d:69:66:f5:6d:f5:6c:a2:6e:63:0b:c0:65:33:
57:6c:73:c2:03:e3:82:60:9a:40:81:5a:dd:b0:54:89:ce:cc:
65:6d:47:aa:68:8e:67:65:50:7f:fd:b6:12:d3:fe:db:ff:f7:
e3:2c:df:d0:01:aa:cf:e5:89:cb:fb:7e:9e:e2:d5:c3:86:9c:
05:3a:ae:e4:fd:c0:83:22:66:79:27:98:6b:af:00:64:0d:06:
d7:fb:d4:55:7d:be:a7:07:11:d2:02:1d:18:a0:ed:e3:f5:1c:
02:ca:7b:c4:e1:7a:a2:b8:b9:9b:a3:f9:da:a2:8c:03:3f:b1:
e7:ad:cb:f0:30:13:84:39:e0:87:49:35:bd:7a:1f:6f:d9:02:
e8:69:af:f6:8c:10:a2:58:ac:08:c8:1c:b9:d0:15:24:a5:36:
70:5b:95:02:ef:66:32:57:2e:2b:47:5d:13:8e:00:46:db:aa:
ab:d8:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:21 2025 by rpki-client