This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
File: JhOQ197eXRxAsfPigPOKCNqv3N4.mft (raw, json)
Hash identifier: S2QTQZooMQNEEpK6kIOphhRiEWuLnxYKASeucjGvbkE=
Subject key identifier: E1:27:69:40:E7:00:BE:96:53:05:D8:89:24:EA:EE:BE:2D:E8:D4:1E
Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
Certificate issuer: /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
Manifest number: 020C
Signing time: Fri 05 Dec 2025 00:36:20 +0000
Manifest this update: Fri 05 Dec 2025 00:36:19 +0000
Manifest next update: Fri 12 Dec 2025 00:36:19 +0000
Files and hashes: 1: JhOQ197eXRxAsfPigPOKCNqv3N4.crl (hash: 6AS3gwDFkezVxoqboSNZoU3faRa+ux68AIIJhnqCQuU=)
2: 738195EEB11811ED997EA457C4F9AE02.roa (hash: Dw2hET0XKkDZSavlAvohxfv8vlQxG1CLusRdITgzUP8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:36:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E367, serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Validity
Not Before: Dec 5 00:36:19 2025 GMT
Not After : Dec 12 00:36:19 2025 GMT
Subject: CN=69322903-1e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:46:2f:f3:20:ee:5b:17:47:16:92:6d:f9:
48:78:f0:00:e1:0d:11:6b:36:77:80:e9:ef:6d:41:
d6:36:6f:36:b5:b1:b9:59:55:12:60:93:1f:68:70:
35:34:35:c0:9f:0f:96:07:cf:60:0a:ec:d9:3d:1b:
51:75:da:4a:58:a0:5a:44:79:77:13:f6:de:87:62:
ad:30:e7:ba:1b:5c:2d:f2:6a:85:9b:78:23:86:f7:
85:c0:c3:82:51:36:4a:9a:f9:53:a6:07:cd:2e:4f:
a9:89:49:64:0b:8e:29:f8:ed:61:9a:7d:8a:3b:c4:
65:33:c2:2c:35:c9:00:a5:a8:16:a3:91:0d:b2:e6:
64:89:ca:32:ac:9a:8d:68:3b:b0:20:00:38:68:70:
1d:f8:05:99:ce:4d:a9:a3:84:19:8a:f5:9d:64:08:
d3:84:07:1f:a5:54:57:52:64:95:9d:da:73:1b:dd:
37:4b:bd:28:b5:0e:81:dd:19:75:6e:bd:ed:64:a6:
2e:f9:d4:c3:b2:cf:40:b5:38:5c:82:cf:e6:c6:e7:
03:8a:b2:e3:a4:40:6c:02:36:b2:2b:45:04:1e:0e:
53:d9:97:d8:2e:46:ff:02:7e:a1:d4:03:ca:79:de:
5d:52:93:fc:27:df:0b:42:03:5c:5f:f3:aa:43:80:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:27:69:40:E7:00:BE:96:53:05:D8:89:24:EA:EE:BE:2D:E8:D4:1E
X509v3 Authority Key Identifier:
keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f2:e6:03:bb:14:a7:e4:7d:86:62:21:fa:8f:9c:8a:9c:eb:
25:5a:3e:6c:82:70:c3:a7:c2:b3:85:d1:2c:67:2c:6a:3f:18:
27:0e:09:e4:56:6b:2f:42:32:2c:59:e1:2f:40:fe:f4:a6:ad:
f3:5b:e8:4b:25:45:ce:c7:c7:38:ca:35:78:f2:6a:11:c7:72:
ab:df:ba:1c:72:60:f6:87:10:54:38:a8:dd:59:a8:6d:b7:e7:
9a:07:13:e8:55:b7:80:55:45:bd:a0:b5:53:b7:35:b7:56:95:
b4:63:d1:d3:b9:e8:5b:35:21:f9:8d:73:80:ca:22:f6:88:a8:
38:5a:d3:92:54:51:36:53:31:56:71:cd:ed:cb:f8:9a:ae:1c:
17:0a:6e:77:50:b6:ff:69:b2:b2:ee:6f:85:40:3f:76:10:26:
79:b7:21:bf:c0:21:92:8b:a8:48:5a:1e:8c:3d:08:fb:93:7f:
49:44:8d:84:49:33:c1:d0:f4:0c:37:a8:95:cd:75:80:33:44:
c4:f8:99:68:bd:ed:6c:63:39:ca:92:17:70:70:8b:d4:0b:62:
9d:f8:5c:f2:64:ae:49:88:ee:b6:5a:d0:b2:06:90:e9:44:68:
b2:47:cd:d7:9f:36:df:0c:7b:53:27:8c:0e:09:d3:80:97:29:
38:dd:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:30:23 2025 by rpki-client