This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
File: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft (raw, json)
Hash identifier: 9SOJTNh8WM+GxfqbGiSJzKASg+WYFrgOmHe0HAYr6lg=
Subject key identifier: 58:12:BE:91:70:67:C3:5E:11:70:B3:F0:90:06:A2:AE:96:B8:F6:F2
Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
Certificate issuer: /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Certificate serial: 186E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
Manifest number: 184F
Signing time: Thu 04 Dec 2025 16:13:15 +0000
Manifest this update: Thu 04 Dec 2025 16:13:14 +0000
Manifest next update: Thu 11 Dec 2025 16:13:14 +0000
Files and hashes: 1: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl (hash: mgoqIJEjrtiFNI860h+kWl7ZthehGeIs4NONxC3O2h8=)
2: 1E76B980C4BA11E78E05EE70C4F9AE02.roa (hash: d7zKEGh0lk8izfNZY0knPSNCV7Y5mFUGLfE2IWUfUWg=)
3: FCD95792C21111E792F4785EC4F9AE02.roa (hash: BMiJfLefqeIikFuUPpDExSa3UsAxL9dNs6RKiD88uUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl
rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 16:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6254 (0x186e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FB, serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Validity
Not Before: Dec 4 16:13:14 2025 GMT
Not After : Dec 11 16:13:14 2025 GMT
Subject: CN=6931b31a-bf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:ec:b1:99:c7:4d:4b:77:f2:0f:5d:bd:5b:
b7:81:80:07:4a:45:92:dd:7c:c7:95:86:24:56:e2:
bd:ba:29:02:6c:9b:9d:94:3e:b1:7c:b8:cf:69:9a:
1b:ea:06:c5:9e:2c:e0:9a:a0:7b:b5:87:8f:7d:86:
73:d7:80:6b:91:04:42:31:8b:e6:23:e6:cc:0f:0f:
29:c2:bc:5b:b5:f5:71:c8:ce:9f:bd:f2:f0:cf:0a:
1b:06:c8:8d:33:88:b5:a5:9a:41:00:74:1d:d8:6e:
e1:05:17:51:2d:a1:36:2f:c5:93:6b:9e:b8:a7:37:
dc:5b:b6:be:39:12:66:07:e5:d9:94:8d:ac:7e:61:
d4:c4:56:bd:b4:eb:75:b3:4c:36:bb:8e:c3:ec:07:
0b:2f:e0:f6:bf:2d:87:56:49:32:24:4d:06:6e:24:
7b:04:96:6a:0d:ac:ef:64:e6:2c:f3:98:8c:6e:a4:
09:ff:d3:fa:e9:15:be:86:eb:52:6a:a3:b0:5e:f0:
bc:cc:39:9c:41:23:cf:d6:23:31:02:07:06:62:fa:
d8:59:a4:46:3c:46:3d:70:c8:dc:ae:c7:42:f1:9c:
ff:6c:93:55:25:7d:2f:15:08:b4:cf:a5:bf:36:61:
34:15:97:af:c2:d2:c7:04:4e:ba:f9:c5:ab:7b:a3:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:12:BE:91:70:67:C3:5E:11:70:B3:F0:90:06:A2:AE:96:B8:F6:F2
X509v3 Authority Key Identifier:
keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ed:ec:10:4b:d6:ff:d9:c6:24:eb:5b:a0:59:98:c0:c3:fb:
ed:a3:87:f6:48:c0:e0:8b:cb:45:f3:8f:74:c2:ed:f1:e3:2a:
d9:70:d5:e3:d1:80:0e:79:78:4f:af:c0:a8:ee:f5:14:f4:d5:
b9:01:d5:73:82:f0:37:6e:ef:82:29:78:10:1c:c3:ec:a5:71:
72:2d:e2:13:ed:61:ce:91:59:95:6e:9f:37:3b:72:ee:fb:6b:
be:07:2d:1a:9d:76:f1:30:32:96:b1:48:e5:7e:41:17:77:c8:
38:bb:b8:45:af:74:40:9f:b2:f5:6e:46:c5:4e:4e:a0:c8:83:
ba:1c:52:a0:52:c6:7e:f5:4c:a7:8f:6a:49:c7:db:71:d9:44:
ce:ea:ab:85:1c:be:fc:56:16:dd:b8:6c:30:d9:ba:99:d5:6b:
25:5f:fd:65:51:c8:63:d2:c6:65:82:48:a1:0b:46:a5:60:31:
23:5a:dd:1f:6c:fd:aa:95:e5:bf:b3:46:c4:7b:ba:91:fe:ac:
9d:f3:52:4a:e7:de:5f:59:c6:c0:b9:55:59:60:63:a4:09:c6:
be:a4:5c:dc:51:33:ea:dc:64:d2:ed:9f:2e:62:74:47:c9:1c:
0e:91:7b:4c:50:b1:51:f4:40:81:51:8e:83:82:92:bf:19:e0:
8c:0b:59:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:19:51 2025 by rpki-client