This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json)
Hash identifier: Za4iYC4TV3aqepaFOpZBL3P2Jyft8bXa1FCn63ilSrU=
Subject key identifier: 57:99:51:63:85:C9:32:80:3D:E7:62:7A:C2:5A:93:0F:23:10:48:BE
Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C
Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C
Certificate serial: 01A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
Manifest number: 019D
Signing time: Fri 05 Dec 2025 01:41:38 +0000
Manifest this update: Fri 05 Dec 2025 01:41:37 +0000
Manifest next update: Fri 12 Dec 2025 01:41:37 +0000
Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: KCi9ACKBrWgdVd/uBtNHcSCpTWCrB+Q8sjRWk1Yw42c=)
2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: cTob+zKp5ftZnMPxIu39FTUVOIdO3knmMZZAbwhjm6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl
rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C
Validity
Not Before: Dec 5 01:41:37 2025 GMT
Not After : Dec 12 01:41:37 2025 GMT
Subject: CN=69323852-746b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:40:86:2b:5e:f1:d8:3d:65:ad:8c:9c:fe:
52:d0:fe:f2:6b:8b:3b:84:97:b0:2a:67:f8:46:23:
43:a1:98:35:6a:b9:aa:0d:ca:50:e4:45:11:fe:58:
74:70:15:65:5f:a1:52:27:d6:fb:41:7c:42:39:d2:
2e:31:37:5d:01:ba:75:f7:59:ff:2a:5e:c8:e3:42:
e4:b0:7b:b2:36:a7:82:77:60:cf:10:ac:d8:82:5c:
a9:1b:a2:f0:9b:d3:ce:3b:6e:68:c1:d6:37:9e:5e:
ed:d7:01:7f:aa:43:d5:1a:2a:53:50:21:f0:48:dc:
5e:f6:d6:8d:7c:9a:ea:08:87:f9:1a:e4:56:d1:4c:
e6:1c:50:bd:41:76:2c:dc:8d:02:60:f4:14:bf:93:
2f:98:84:c9:da:e2:e2:d2:4b:6f:a2:b1:ac:62:05:
1d:cc:b6:fb:20:9e:d9:45:fb:51:94:88:ca:23:6a:
6c:a4:2a:8c:f7:76:be:18:12:28:3f:f2:01:75:d9:
c9:78:b0:35:33:f1:70:87:2e:4c:d6:56:18:d8:ee:
98:34:5b:49:b9:cd:79:bd:b9:9d:f8:2c:d5:97:b9:
a2:44:0f:f6:b1:c6:bd:4b:b7:b3:01:10:41:79:4f:
85:74:40:12:d5:c1:18:a6:b4:31:cd:7a:97:cd:43:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:99:51:63:85:C9:32:80:3D:E7:62:7A:C2:5A:93:0F:23:10:48:BE
X509v3 Authority Key Identifier:
keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:73:7a:21:25:c2:7f:0f:4a:9f:7d:2f:07:f6:5a:43:31:eb:
a1:6e:0f:45:b9:e7:f5:30:88:53:16:61:3d:1e:03:92:47:a9:
c2:90:1c:1d:95:bd:af:62:83:69:a1:5d:6b:24:71:96:8d:1e:
b4:d0:24:a4:ba:8a:d4:8d:90:ba:6d:52:d4:ae:11:5f:66:3a:
31:5a:d3:d8:91:cd:74:0b:a5:0c:98:78:6c:b2:ca:78:a8:05:
60:3b:b5:db:aa:f8:12:42:4a:06:ab:10:72:cf:fa:de:e7:db:
b3:cd:c0:09:52:0f:2e:a9:7c:5a:f3:70:d4:8e:bd:9a:10:eb:
c1:c2:9a:29:ee:4f:cb:04:26:bf:0a:db:60:cd:77:08:1d:27:
16:9a:56:f6:d0:b8:53:21:1c:de:37:82:6a:ab:fc:1c:33:72:
f8:ce:db:af:a6:b8:22:7b:ae:9e:6b:70:46:ca:5e:57:d0:80:
5a:74:8e:02:f0:85:77:2e:15:6a:7f:c7:b6:7b:fc:3a:7e:e9:
27:9d:de:25:9f:a9:04:73:f9:60:e6:09:0b:a6:78:d5:09:a5:
fb:48:5a:45:96:13:8b:39:d1:a2:75:7f:00:f7:3d:51:85:e9:
ef:62:85:be:bd:89:86:89:ff:87:1a:41:19:ef:fa:62:3a:08:
05:ef:f5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:39:28 2025 by rpki-client