This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
File: jMU6mSl_HMCgv73r8k4TKw2EHHY.mft (raw, json)
Hash identifier: 0I5QCA8FrH+zXJe2wKCGBOF6ERhx+KFmolWK9a/wvBs=
Subject key identifier: 1B:0E:E7:0F:06:76:D1:2E:AA:08:95:98:3C:55:5B:99:AE:F8:A0:CE
Authority key identifier: 8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76
Certificate issuer: /CN=A9139D93/serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
Manifest number: 014A
Signing time: Fri 05 Dec 2025 02:25:32 +0000
Manifest this update: Fri 05 Dec 2025 02:25:31 +0000
Manifest next update: Fri 12 Dec 2025 02:25:31 +0000
Files and hashes: 1: jMU6mSl_HMCgv73r8k4TKw2EHHY.crl (hash: XDQngpUIH7Slm6cCqKBXebg9UlPPO74g1TvQuTIX8Dk=)
2: E614FEEED6AF11EEAB03B528C4F9AE02.roa (hash: G17ALsZLxeT9rUtyM+i2zf7iC28VSeb9B4i0ScAYOoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl
rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139D93, serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76
Validity
Not Before: Dec 5 02:25:31 2025 GMT
Not After : Dec 12 02:25:31 2025 GMT
Subject: CN=6932429c-6ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:db:df:88:6d:74:24:34:c8:84:8e:18:4c:
80:f5:6e:8b:19:c9:1a:b0:96:9b:42:54:76:c9:6f:
62:a2:4f:11:76:2f:91:49:2a:69:ba:54:3b:4e:92:
60:21:34:88:6e:38:a0:e5:45:16:3b:94:15:34:42:
de:1e:52:51:fa:cc:88:0d:88:12:07:56:7a:3c:98:
aa:d6:a3:44:50:80:74:37:e3:0d:40:fe:55:ff:d2:
a1:40:58:76:1b:0d:54:83:56:9e:05:10:26:69:ec:
e8:12:c9:8f:3f:15:42:29:8e:6a:18:9b:ef:05:21:
0e:f0:e7:87:fb:79:d5:89:72:0a:5d:8d:36:95:d1:
3c:fe:a2:03:78:f8:7c:f5:92:ff:50:95:c7:a1:83:
3d:d1:be:da:ba:e1:b0:75:64:d0:da:7e:26:86:2b:
bf:27:14:ed:1e:d8:cb:16:c3:58:47:3c:a6:61:85:
bf:0c:70:97:0b:24:ba:d4:91:26:9a:e1:ef:94:8f:
bb:2b:97:62:19:6c:98:e4:60:9a:0d:ec:bd:91:a0:
82:1d:03:be:f4:3d:6d:c1:e6:86:05:81:13:1b:6d:
db:fc:7c:d6:7d:2a:da:da:f3:c8:78:c2:c0:4a:be:
51:7c:b4:5a:44:fd:55:62:43:8f:fd:c5:a9:56:78:
68:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0E:E7:0F:06:76:D1:2E:AA:08:95:98:3C:55:5B:99:AE:F8:A0:CE
X509v3 Authority Key Identifier:
keyid:8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:c3:92:57:75:6a:20:f4:67:4f:b6:4f:c9:40:66:63:ed:72:
1e:25:66:61:2d:d4:7f:4e:52:cd:a6:ab:36:fa:b9:c0:a5:16:
cb:d3:a3:49:13:ff:33:d9:9a:36:b6:e9:60:be:e7:3c:06:1b:
56:f4:95:33:4c:7e:fe:c2:76:82:23:43:07:3e:f2:f2:fa:c4:
ee:a6:d6:37:f6:5e:a8:f6:12:4c:a1:cb:20:39:9f:6d:57:9b:
07:b0:2f:59:24:09:54:47:87:77:5d:a6:63:f6:7d:c6:80:f0:
a4:ef:a7:43:59:0b:7f:1a:62:b3:71:fb:3d:1f:86:4a:03:02:
ac:a1:7c:96:d5:25:2d:9b:4c:89:d9:8c:b8:e6:da:89:12:da:
0d:80:aa:db:99:7d:cd:96:ce:5a:86:6e:fb:b5:ac:8d:28:81:
6f:10:30:1f:8e:63:ca:e1:d3:b5:0c:59:60:89:32:0e:bd:da:
cf:44:64:17:fb:9d:4d:0a:d8:65:7a:70:91:3f:aa:16:05:27:
68:ad:1b:cb:a8:cd:80:67:65:ae:64:44:2d:37:ba:ab:1e:39:
40:cb:f3:b8:73:69:7f:8d:38:3f:69:fa:d4:ab:d9:5d:88:84:
61:a9:f7:e7:a2:66:a2:80:54:85:bd:43:be:0b:4c:8b:c0:a1:
61:12:74:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzlEOTMxMTAvBgNVBAUTKDhDQzUzQTk5Mjk3RjFDQzBBMEJGQkRFQkYyNEUxMzJC
MEQ4NDFDNzYwHhcNMjUxMjA1MDIyNTMxWhcNMjUxMjEyMDIyNTMxWjAYMRYwFAYD
VQQDEw02OTMyNDI5Yy02Y2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2wbb34htdCQ0yISOGEyA9W6LGckasJabQlR2yW9iok8Rdi+RSSppulQ7TpJg
ITSIbjig5UUWO5QVNELeHlJR+syIDYgSB1Z6PJiq1qNEUIB0N+MNQP5V/9KhQFh2
Gw1Ug1aeBRAmaezoEsmPPxVCKY5qGJvvBSEO8OeH+3nViXIKXY02ldE8/qIDePh8
9ZL/UJXHoYM90b7auuGwdWTQ2n4mhiu/JxTtHtjLFsNYRzymYYW/DHCXCyS61JEm
muHvlI+7K5diGWyY5GCaDey9kaCCHQO+9D1tweaGBYETG23b/HzWfSra2vPIeMLA
Sr5RfLRaRP1VYkOP/cWpVnhoSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsO5w8G
dtEuqgiVmDxVW5mu+KDOMB8GA1UdIwQYMBaAFIzFOpkpfxzAoL+96/JOEysNhBx2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUQ5My9DQ0JBQUFEQUQ2
QTkxMUVFQUNEMzE2NjhDNEY5QUUwMi9qTVU2bVNsX0hNQ2d2NzNyOGs0VEt3MkVI
SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pNVTZtU2xfSE1DZ3Y3M3I4azRUS3cyRUhIWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OUQ5My9DQ0JBQUFEQUQ2QTkxMUVFQUNEMzE2NjhDNEY5QUUwMi9qTVU2bVNsX0hN
Q2d2NzNyOGs0VEt3MkVISFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYw5JXdWog9GdPtk/JQGZj7XIeJWZhLdR/TlLNpqs2+rnApRbL06NJ
E/8z2Zo2tulgvuc8BhtW9JUzTH7+wnaCI0MHPvLy+sTuptY39l6o9hJMocsgOZ9t
V5sHsC9ZJAlUR4d3XaZj9n3GgPCk76dDWQt/GmKzcfs9H4ZKAwKsoXyW1SUtm0yJ
2Yy45tqJEtoNgKrbmX3Nls5ahm77tayNKIFvEDAfjmPK4dO1DFlgiTIOvdrPRGQX
+51NCthlenCRP6oWBSdorRvLqM2AZ2WuZEQtN7qrHjlAy/O4c2l/jTg/afrUq9ld
iIRhqffnomaigFSFvUO+C0yLwKFhEnQj
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:20:29 2025 by rpki-client