This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json)
Hash identifier: 9OffpZGprfbQ3q8HW7/zcKBLvwzaxmp7UUU8v6V8eJQ=
Subject key identifier: 48:04:DA:C6:54:0D:8A:68:A9:8F:70:5E:DB:80:B8:6E:42:B5:CA:D1
Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
Manifest number: 0141
Signing time: Fri 05 Dec 2025 02:32:58 +0000
Manifest this update: Fri 05 Dec 2025 02:32:57 +0000
Manifest next update: Fri 12 Dec 2025 02:32:57 +0000
Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: 84sysKb/MaWlw/gPYAsxMzE/JeB9yVWV4pwXAsGD7p8=)
2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: dc2h2jrx/pzY7NawNYOcmGXVTRsJnjaghC5xI/+fBaQ=)
3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: M93I+sdFWlIBfdq9LG68VSm5ThgyN+STMXDJdl1g8Sg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Validity
Not Before: Dec 5 02:32:57 2025 GMT
Not After : Dec 12 02:32:57 2025 GMT
Subject: CN=69324459-8047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:ed:48:07:f2:91:9f:fd:5c:d0:51:bc:85:
d2:45:e2:1f:aa:f7:5d:e4:ec:0f:ae:e5:57:73:21:
95:cc:94:67:99:c5:8a:a3:5a:d0:0f:fb:a6:3f:a3:
e6:0f:c0:66:bd:45:29:50:f1:fa:1e:88:7a:3e:9d:
85:76:06:06:8d:f5:d7:a2:04:0a:a5:2f:af:08:c3:
16:e3:8c:74:f3:60:b8:b4:cb:4f:d1:88:ae:a7:78:
80:3b:77:3b:f7:4e:8a:dd:83:ca:f7:58:64:76:4a:
12:e6:f2:66:c0:6c:6c:51:af:5e:f5:ba:bb:22:81:
6d:c4:ef:6a:92:00:bf:5f:45:37:75:e8:68:1c:f4:
2d:a4:7c:d5:d9:2b:57:ea:1e:ee:b0:7a:83:68:17:
7d:b7:7d:8f:bb:98:97:2d:e6:3a:94:bc:04:5e:b4:
07:9d:6c:c7:b2:97:dc:e7:9f:e1:3f:fa:87:2a:da:
a3:90:b9:e3:5a:2f:2d:98:1e:95:82:09:e3:49:4e:
26:f9:64:d9:3d:df:c2:51:64:9b:df:da:b0:49:3e:
bd:03:d7:d8:df:88:f8:d5:bf:f2:f9:34:c6:11:af:
d4:1c:c5:0f:4f:32:bf:e7:c7:a8:7f:2e:7b:3b:3b:
19:78:53:84:b6:fc:10:a0:1c:4a:f0:53:99:ad:1b:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:04:DA:C6:54:0D:8A:68:A9:8F:70:5E:DB:80:B8:6E:42:B5:CA:D1
X509v3 Authority Key Identifier:
keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:aa:40:fc:4b:2c:a3:cd:5d:87:7c:e4:f0:84:c1:98:71:06:
06:2f:71:a0:17:4f:ba:f1:34:07:f5:f8:04:e7:4e:6d:ee:52:
74:2a:3a:aa:98:08:40:b5:a2:cb:73:f0:f0:38:92:82:cc:47:
d7:d0:bc:6b:b6:55:0e:4e:18:0d:1e:9f:ba:36:13:fc:9c:3b:
80:24:28:6e:a0:f0:e6:7a:38:38:74:fa:bf:c4:44:e6:22:51:
e8:39:79:32:88:2b:47:d6:f4:e2:cd:43:ad:78:b0:92:f5:87:
03:c9:81:08:dd:29:15:8f:ef:73:fc:6c:5e:7e:50:0c:23:dc:
0f:b8:cb:13:aa:81:47:d3:2f:4e:cf:1b:d7:17:1a:ee:42:3f:
88:f6:84:14:1b:1f:26:7d:d8:9a:9f:0e:75:6d:dc:5e:7f:b4:
78:33:b8:d4:5d:66:ed:3f:59:80:87:ab:19:5a:b1:3a:81:b7:
f4:c5:25:f6:1a:8f:41:8b:15:20:7d:a6:5b:87:47:a9:d8:a6:
28:e5:88:96:89:4d:6b:44:b7:e5:4d:13:e3:ba:59:37:41:d6:
1c:dc:7e:4c:ed:de:5e:ce:5f:42:67:0a:86:50:d1:2e:8a:8d:
12:04:3a:5a:87:8c:e5:c8:2f:c5:bb:c7:d4:0b:52:d8:eb:32:
25:3b:b3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:12:10 2025 by rpki-client