This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json)
Hash identifier: lXKNWGXUmcTooa1W8InSop0jj7Tzqf5GQJyMUVZW9n0=
Subject key identifier: 1C:CC:14:A9:FD:49:CF:D5:2B:F4:5B:13:21:69:FF:C1:99:47:DB:FD
Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Certificate serial: 2385
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
Manifest number: 2350
Signing time: Thu 04 Dec 2025 15:44:02 +0000
Manifest this update: Thu 04 Dec 2025 15:44:02 +0000
Manifest next update: Thu 11 Dec 2025 15:44:02 +0000
Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: lzTPz54Zh/Uvgk8OoHmoxa+cpKZDB1Shxy3GGsFoNh0=)
2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: mPtYiN+/TfiyRV+YmeA5Y60Ko/M3jijCuHZDr0zx9nM=)
3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: LWfr/eGpKsZfBdNv+WTg0Gn+ekMi8PDH3dFvI2YahRg=)
4: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: wkM6M3U1AcqPEwtXwQs73INeN4ZTzf2doazXiha3Fmw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 15:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9093 (0x2385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Validity
Not Before: Dec 4 15:44:02 2025 GMT
Not After : Dec 11 15:44:02 2025 GMT
Subject: CN=6931ac42-3e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:04:7f:44:d6:76:8f:4e:a7:5c:ae:da:0f:e1:
af:2e:46:a2:db:72:fd:0b:35:80:49:97:44:5e:53:
6c:1b:f0:29:6d:26:3c:98:d5:b3:03:35:cc:15:ae:
1a:92:fa:45:4c:12:3e:86:03:35:d1:5c:2a:69:80:
63:9f:da:4a:df:91:56:45:d4:04:2b:e8:0c:9f:16:
35:12:44:12:47:6f:86:fa:0f:3f:c7:a2:08:2f:40:
6b:12:66:5d:48:0f:e4:10:78:51:69:e5:d8:d6:10:
e5:5b:a5:04:cf:0c:23:54:da:9a:9f:29:d6:52:a5:
12:69:ac:ae:95:a5:5d:2c:24:b6:ab:a2:60:7e:ca:
8a:61:c6:1b:44:5e:2d:57:1f:53:52:35:e3:99:6e:
7e:e5:c8:5d:d2:46:9f:ec:1a:e4:90:46:cf:c3:18:
62:18:63:c7:22:f0:fb:0a:45:4c:5b:5e:3e:50:a7:
cc:46:1b:47:f1:f3:d9:53:8e:be:14:41:56:22:0e:
7a:9c:5f:30:17:ef:33:4d:e5:d8:d9:76:b9:29:e1:
cd:6b:1b:52:7d:71:9f:b5:da:f7:b5:96:d6:e9:b7:
73:79:d4:9c:f2:b0:ce:77:2d:91:be:5f:22:90:98:
7c:05:53:e6:78:26:05:d7:56:cb:42:18:cd:30:17:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CC:14:A9:FD:49:CF:D5:2B:F4:5B:13:21:69:FF:C1:99:47:DB:FD
X509v3 Authority Key Identifier:
keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:62:b6:e3:29:41:9b:a4:53:3b:7f:7a:40:46:e4:fa:90:39:
16:24:ee:25:df:b2:96:b8:90:6a:5b:34:3e:28:d2:e0:25:90:
fb:a6:3c:0a:e9:6f:a3:71:ad:90:b7:b7:1c:01:1f:08:f1:c4:
6f:29:75:ef:6b:b8:c5:ec:6f:2b:35:64:0a:9d:39:6e:f8:7e:
12:7f:05:ac:b1:ed:ba:f6:50:4a:41:59:04:14:4c:00:90:ff:
1f:60:9d:24:6e:a1:98:0e:c9:15:81:95:b0:70:07:4a:8a:52:
38:eb:d5:0a:d0:59:83:69:2d:da:84:40:ea:1a:14:68:64:6d:
c1:52:71:a9:22:38:72:fb:c2:1f:b8:58:20:fe:c7:06:a3:77:
7b:25:b7:fb:35:99:a0:f7:01:44:f5:1e:99:00:56:6d:b3:38:
a0:c6:43:77:fa:a9:2a:f9:f8:06:f8:70:29:e8:b7:ac:32:81:
cc:51:10:a2:9a:b8:3f:b5:1e:ba:0b:e6:a8:ce:22:a0:84:e9:
55:7c:ab:ef:49:a9:12:2f:aa:22:78:06:45:07:e1:da:f5:f2:
0b:4f:dc:62:2b:1c:c0:11:09:40:47:54:43:93:a7:c4:31:3b:
0a:07:12:f8:c4:3f:b9:6b:25:73:e7:1f:8f:f7:da:24:30:af:
bc:2b:54:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICI4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE
NDUyODk0MTEwHhcNMjUxMjA0MTU0NDAyWhcNMjUxMjExMTU0NDAyWjAYMRYwFAYD
VQQDEw02OTMxYWM0Mi0zZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2QR/RNZ2j06nXK7aD+GvLkai23L9CzWASZdEXlNsG/ApbSY8mNWzAzXMFa4a
kvpFTBI+hgM10VwqaYBjn9pK35FWRdQEK+gMnxY1EkQSR2+G+g8/x6IIL0BrEmZd
SA/kEHhRaeXY1hDlW6UEzwwjVNqanynWUqUSaayulaVdLCS2q6JgfsqKYcYbRF4t
Vx9TUjXjmW5+5chd0kaf7BrkkEbPwxhiGGPHIvD7CkVMW14+UKfMRhtH8fPZU46+
FEFWIg56nF8wF+8zTeXY2Xa5KeHNaxtSfXGftdr3tZbW6bdzedSc8rDOdy2Rvl8i
kJh8BVPmeCYF11bLQhjNMBfoEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzMFKn9
Sc/VK/RbEyFp/8GZR9v9MB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3
RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ
YWxUaWk2UHY5VFhVVW9sQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDYrbjKUGbpFM7f3pARuT6kDkWJO4l37KWuJBqWzQ+KNLgJZD7pjwK
6W+jca2Qt7ccAR8I8cRvKXXva7jF7G8rNWQKnTlu+H4SfwWsse269lBKQVkEFEwA
kP8fYJ0kbqGYDskVgZWwcAdKilI469UK0FmDaS3ahEDqGhRoZG3BUnGpIjhy+8If
uFgg/scGo3d7Jbf7NZmg9wFE9R6ZAFZtszigxkN3+qkq+fgG+HAp6LesMoHMURCi
mrg/tR66C+aoziKghOlVfKvvSakSL6oieAZFB+Ha9fILT9xiKxzAEQlAR1RDk6fE
MTsKBxL4xD+5ayVz5x+P99okMK+8K1TU
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:30 2025 by rpki-client