This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
File: JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json)
Hash identifier: QXw4aIM7B9Lngyp4ygQPP+SEBZmSs2iYcmMM13XJ/i4=
Subject key identifier: BF:67:D0:B4:7C:5F:F6:AC:AD:15:EB:50:E5:0C:C5:8E:89:60:7A:94
Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB
Certificate issuer: /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
Certificate serial: 0DC8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
Manifest number: 0DBC
Signing time: Sat 24 Jan 2026 17:33:41 +0000
Manifest this update: Sat 24 Jan 2026 17:33:41 +0000
Manifest next update: Sat 31 Jan 2026 17:33:41 +0000
Files and hashes: 1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: jIfRkp7+N1HkXKp54mo4+3Le36hpmw4wB/aaofO7G4E=)
2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: p/YMQZgK4Y+brIZ3CLSUItOhF5W1YWPu9J2AH5/E9zA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl
rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3528 (0xdc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3D1, serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
Validity
Not Before: Jan 24 17:33:41 2026 GMT
Not After : Jan 31 17:33:41 2026 GMT
Subject: CN=69750275-6de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:97:7b:d9:a4:88:88:96:15:0f:8b:45:7e:
56:1d:5c:db:97:0c:7f:1d:6a:81:86:6a:60:7a:bd:
61:11:55:c4:f8:55:00:a7:83:96:4c:4a:f6:79:b7:
8f:ca:5c:4c:c0:04:2d:74:00:9d:f4:00:57:e3:be:
ef:3b:0e:37:d0:76:13:cd:a2:6c:71:47:95:d4:4c:
5a:42:fd:4f:26:4c:86:7c:d5:90:5c:56:ba:d4:a7:
fb:6e:2c:29:7e:6f:bc:31:82:00:3f:52:20:fb:a3:
37:d9:e9:5f:cd:08:49:b2:30:cb:8f:88:7b:1e:01:
93:4c:6a:4c:f4:50:36:bf:87:60:62:91:07:30:c9:
ff:22:8b:25:49:74:27:ee:4b:bc:cb:b3:38:b8:b3:
e1:f1:2c:73:b0:a7:80:5a:92:1e:d0:65:08:ca:b5:
b3:67:dd:42:24:71:d3:c8:dd:4a:b8:4a:2a:29:c4:
fb:3b:7f:67:75:0e:56:1a:a0:85:70:98:ee:2f:48:
48:fd:1e:af:0c:dc:bf:bb:01:12:f6:8c:d0:c9:5f:
d3:6d:f4:f2:6d:11:5e:0e:87:ab:e2:f8:34:5f:e2:
bc:75:34:88:b8:8b:7a:24:fe:d0:1b:26:84:14:2f:
03:71:73:71:54:07:26:bf:da:b9:e3:60:24:95:a1:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:67:D0:B4:7C:5F:F6:AC:AD:15:EB:50:E5:0C:C5:8E:89:60:7A:94
X509v3 Authority Key Identifier:
keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:36:b3:5d:9d:59:96:89:3e:03:6b:70:1e:bd:96:c4:2f:3e:
93:ec:2f:17:8f:41:86:d0:74:3b:b0:b3:78:bb:fc:e7:a3:8a:
e8:3f:44:a4:15:cd:70:97:6d:69:ec:7d:dc:5f:41:cd:13:b5:
00:e3:63:bb:06:ba:f7:72:f1:18:4f:6e:bb:ad:7b:ca:47:9c:
82:76:b0:00:7c:76:60:ea:60:56:fe:ad:7d:6d:45:85:9f:19:
3a:c0:d4:50:dd:34:3d:b7:18:bc:e7:81:24:88:4a:e6:db:75:
19:9f:7c:22:d3:71:b9:f4:5d:fa:49:75:11:24:f2:82:b7:6d:
9e:3f:29:fa:db:bc:6a:b0:a4:42:f7:75:2f:37:17:e4:e4:8b:
1f:8e:7a:a8:30:33:a4:96:1e:50:c5:0d:4f:92:65:f4:35:ee:
90:f7:d7:12:ec:03:d9:85:b4:93:14:a8:a3:0a:dc:b3:83:e8:
ec:f3:68:e7:f0:17:e7:20:46:4f:b1:de:e2:73:33:39:a3:2e:
93:a4:45:1c:ef:8b:11:9b:a6:75:ce:80:e4:81:42:03:f3:0b:
67:74:c5:63:4d:08:bd:b6:bb:74:34:6d:fe:e4:e4:84:c9:27:
53:ce:bb:05:3d:31:dc:4e:fe:34:2e:31:aa:e9:4c:55:67:31:
31:e7:a4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:49:56 2026 by rpki-client