This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
File: Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft (raw, json)
Hash identifier: h79lHkCr7PFenOowQjifRkYOLEcb83ssblI/uW0019w=
Subject key identifier: 2E:18:31:FE:C4:0D:83:90:B0:03:D2:AC:9D:7A:2F:6A:17:DD:3A:CC
Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5
Certificate issuer: /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5
Certificate serial: 05FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
Manifest number: 05F9
Signing time: Thu 04 Dec 2025 21:38:30 +0000
Manifest this update: Thu 04 Dec 2025 21:38:29 +0000
Manifest next update: Thu 11 Dec 2025 21:38:29 +0000
Files and hashes: 1: Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl (hash: YXBGRyS4ASn+pRn45HUp5aP8cJF3iqFmMv+DpJ0Q9H0=)
2: 3DB4E04ED0E411EB9695B157C4F9AE02.roa (hash: W1o2XhZTvE+zfafvvvo1BgPOskJBsiv1jg8bPM2h8CQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl
rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:38:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1534 (0x5fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FD85, serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5
Validity
Not Before: Dec 4 21:38:29 2025 GMT
Not After : Dec 11 21:38:29 2025 GMT
Subject: CN=6931ff56-a719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:62:e5:4c:e8:78:46:08:c3:63:75:4f:8e:
d8:26:f7:8e:ba:56:7d:ca:84:ba:1f:0e:9d:a1:55:
9b:06:01:76:06:4e:97:21:29:75:6e:a3:30:8e:9c:
4f:24:d2:0e:d9:49:6b:2f:48:6a:d3:0a:d7:6e:75:
ff:dc:07:10:64:b0:07:d4:0f:e9:e4:a3:19:d1:5f:
6a:36:06:1b:87:29:a1:df:d6:19:b1:56:c7:f0:f6:
10:06:7f:ac:d2:04:aa:03:e5:6c:21:9b:45:4e:e2:
00:eb:94:cc:64:08:8c:5d:34:77:36:b2:62:b2:72:
56:d2:4c:ad:4b:8c:45:6b:a7:f6:ed:06:f1:1a:76:
72:2d:98:74:d3:52:17:8c:45:09:ab:fc:63:7a:5e:
4c:d7:bb:10:4e:a5:e3:2c:8f:cd:4a:93:b2:61:9b:
02:c9:3a:64:a3:e6:a1:26:8b:68:08:d8:4e:ba:8a:
b5:bd:90:30:eb:58:c0:03:27:d8:f9:d1:17:0a:0f:
ee:af:c7:fd:77:be:57:5c:5b:d0:fc:8c:3d:24:e0:
38:79:b1:12:43:71:83:b2:67:f9:40:6d:ad:14:be:
7d:e2:76:18:48:d1:30:04:81:48:60:aa:77:3e:81:
1e:ee:6f:39:b1:22:be:d9:50:0d:3b:00:62:0b:4e:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:18:31:FE:C4:0D:83:90:B0:03:D2:AC:9D:7A:2F:6A:17:DD:3A:CC
X509v3 Authority Key Identifier:
keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1c:32:0f:91:55:4b:3c:73:a3:11:cb:91:14:94:e8:9d:5e:
ad:b1:c8:62:d1:18:33:ad:d1:23:95:f5:b8:53:e2:f9:3a:23:
07:90:41:2a:7f:88:a4:f9:e5:60:cd:83:f6:4f:70:4f:63:d8:
1c:cd:4c:c3:c6:39:3c:b6:cd:85:02:02:d2:25:51:c9:07:1f:
51:5e:a7:6d:9c:2c:54:9b:01:4b:37:0d:70:e8:be:8c:f9:5e:
ab:71:bb:b6:e3:6e:31:e8:f7:65:1a:4a:9d:3d:4a:90:d2:17:
4d:15:59:c4:e5:b7:80:5b:4d:77:a5:5c:e6:1d:7e:d6:a6:0e:
02:c1:21:3b:6f:d2:57:f0:1e:a3:3a:61:31:88:7d:a1:f7:3e:
f3:ff:fb:0c:ea:57:41:4b:e0:95:44:28:3d:5d:52:6e:aa:19:
78:0c:f2:6d:7d:87:8b:8b:0d:93:08:21:b5:7b:02:18:3c:6e:
41:f1:84:4e:a7:cf:d7:1d:cc:6f:b0:6a:d2:63:85:83:71:a1:
4f:4f:f2:a3:dd:26:7d:95:e1:4e:ef:4f:f0:5e:44:aa:9d:2d:
70:4d:0f:3b:85:a1:76:6f:b4:e2:92:b9:cc:5c:43:f2:6e:af:
17:9d:f0:af:a1:44:82:7e:5a:3b:b2:6f:cd:dc:f4:17:78:4e:
84:1c:86:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:50:56 2025 by rpki-client