This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
File: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft (raw, json)
Hash identifier: +csrY1+G04AyXlpIcVI1mLgSbIanHmggO4OA/QVwi5I=
Subject key identifier: D0:74:DA:BB:D0:6E:9D:F7:D4:F8:CD:AF:06:27:FD:12:1E:2F:EC:A8
Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44
Certificate issuer: /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
Certificate serial: 012C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
Manifest number: 0127
Signing time: Fri 05 Dec 2025 02:45:22 +0000
Manifest this update: Fri 05 Dec 2025 02:45:21 +0000
Manifest next update: Fri 12 Dec 2025 02:45:21 +0000
Files and hashes: 1: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl (hash: gc3LznqGuEuHjMnjqKRv/ApkCA2KhTA9nVR65ZWEU6E=)
2: 37241BF4757911EFB0F87073C4F9AE02.roa (hash: OOJ1+VUkBTXiPH6FI49m6U+9LsJszz3rE5lM11lv5ng=)
3: 55778AA0757911EFBDEE9A73C4F9AE02.roa (hash: XneMA7PZ1D1omHGzokuwA1vpjnnJXi3JuOuinXeIdkA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl
rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A0AB, serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
Validity
Not Before: Dec 5 02:45:21 2025 GMT
Not After : Dec 12 02:45:21 2025 GMT
Subject: CN=69324741-7335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:13:39:2f:62:17:67:98:36:fb:fc:6b:59:
98:97:d7:a4:c8:aa:56:2a:1d:65:26:86:ef:38:d9:
11:01:3f:61:23:0f:73:3b:98:79:f6:13:cc:93:9c:
57:b0:b3:55:3d:6e:92:4e:5a:91:5c:05:4c:13:da:
f2:85:6a:88:0c:dd:d0:8a:61:86:cc:5e:22:af:8a:
4b:ee:58:86:ea:a1:8d:f1:7b:3c:53:ad:3f:dc:87:
31:f3:71:80:db:9a:95:cf:90:c3:00:d0:88:de:a8:
b6:eb:12:ad:a0:57:39:df:a0:ba:ec:fd:05:5f:42:
c9:55:88:43:fb:11:14:e0:56:a3:05:58:54:37:b6:
3e:f5:35:a5:aa:09:72:60:b1:bc:66:83:04:d9:b5:
1f:9f:70:6c:2a:2c:eb:5b:a3:2d:81:d7:bd:d0:a4:
67:ca:35:03:62:69:78:35:a9:78:e3:86:b1:ff:e6:
ec:1f:ac:47:a1:b4:a6:07:ed:bf:54:77:49:8f:05:
87:9d:4b:5b:34:9c:d8:63:bf:53:ab:d1:14:57:3f:
c6:43:bb:23:6e:6f:8c:ea:c0:2d:1c:c4:c5:bb:a4:
8a:1b:ea:3d:19:c7:07:e7:c5:70:ed:0d:fd:d2:6b:
e0:a2:0b:70:7e:77:b0:2f:1e:2b:ad:cf:af:fe:a8:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:74:DA:BB:D0:6E:9D:F7:D4:F8:CD:AF:06:27:FD:12:1E:2F:EC:A8
X509v3 Authority Key Identifier:
keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1b:4a:89:bf:42:6e:70:af:fb:2e:b6:e7:bd:a9:0f:e4:aa:
78:65:9c:9f:f8:3c:a2:50:1a:a8:ca:3d:28:6e:07:cb:ed:4f:
b8:14:8d:24:ca:7d:f9:45:53:8a:11:e8:80:6f:f3:92:f0:40:
43:1e:3a:63:74:e0:87:2a:f9:5b:ed:d4:f2:b6:3b:36:93:29:
44:1d:e2:90:6c:40:76:47:a7:6c:82:1b:7e:b7:19:b9:95:38:
c8:55:d4:41:71:21:8e:db:65:43:84:c0:92:4d:ce:98:0d:be:
bb:02:63:f8:3c:6d:d7:7c:8e:b7:7c:56:d5:38:5b:19:7e:0f:
d7:32:fc:ba:f2:3e:de:04:f3:4d:a8:ed:99:a5:f5:ba:4c:37:
36:a3:0e:e2:e1:c9:2a:35:65:00:da:cf:92:b0:b8:81:d4:93:
8b:f2:57:27:90:a3:93:d6:fb:6b:39:d2:d2:69:d8:9b:fc:20:
eb:60:91:b2:e1:45:e8:f0:13:8c:b5:1b:f5:2b:dc:b3:98:2e:
10:cb:4a:03:ad:3b:f2:97:63:48:af:7a:83:57:5d:fd:a2:6e:
22:72:68:e9:a4:ec:82:2a:39:f5:39:74:72:a0:4a:4e:e6:a5:
f2:1e:0c:dc:de:c6:3a:a4:b6:51:ec:f3:56:b5:fe:b1:0d:b7:
a7:a3:75:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:42 2025 by rpki-client