This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
File: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft (raw, json)
Hash identifier: 5Nfz8qUE4vCeIwbUQFkGuEFFfSM6H8th+/2G2ka3w5M=
Subject key identifier: 5B:F1:21:07:4E:5D:CA:3D:22:E9:E7:C0:3F:BD:50:FD:E8:75:32:85
Authority key identifier: 25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43
Certificate issuer: /CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
Certificate serial: FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
Manifest number: FA
Signing time: Fri 23 Jan 2026 04:22:55 +0000
Manifest this update: Fri 23 Jan 2026 04:22:55 +0000
Manifest next update: Fri 30 Jan 2026 04:22:55 +0000
Files and hashes: 1: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl (hash: NFhoJlR6RHCfKyvXAYuve2nQDnl7mVWCF+GaTJqFIdg=)
2: D292C0D27E1A11EFAE842E12C4F9AE02.roa (hash: SvJanGxzuxhfbTc60r8YUo4zzExKYT9JE66aBXW8SFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl
rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 04:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160A05, serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
Validity
Not Before: Jan 23 04:22:55 2026 GMT
Not After : Jan 30 04:22:55 2026 GMT
Subject: CN=6972f79f-caef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:de:84:be:75:d8:76:94:8e:1f:0e:b5:09:
91:f5:64:dc:c5:6a:3f:4e:54:7d:69:cc:7e:12:ef:
ee:42:9b:1c:6d:a1:7e:bc:7c:57:67:8b:5a:78:1d:
de:b8:04:a3:8c:da:9a:ca:84:ae:08:be:e8:64:ee:
41:e7:79:b3:47:3a:11:77:24:0f:cb:bd:fe:b5:52:
ac:27:4c:95:aa:b9:07:47:6d:ee:fa:c9:1e:c2:d7:
78:ff:da:d6:05:12:3e:98:a6:fa:be:f0:3e:bd:0e:
6a:3d:5a:0c:14:6a:1b:1b:da:d1:6b:66:29:59:ec:
bb:f0:49:ff:17:ce:e9:38:a0:38:e4:f5:ac:c6:67:
2a:ff:43:64:4f:11:fc:74:ec:2d:60:27:09:8c:b0:
45:c2:4e:7b:97:dc:ef:aa:96:0f:79:2e:3c:8c:c5:
a4:17:5b:d3:5b:3c:dc:10:8a:6e:dd:df:a3:b2:7d:
e8:f8:b2:66:78:9c:d7:8a:e2:d2:5f:68:ad:3b:ac:
8c:9a:00:34:82:c5:8a:42:a6:d4:f1:f1:09:07:7e:
1b:b4:d9:b1:29:ff:80:9e:56:a9:22:2c:a1:50:0b:
8c:cb:0d:d9:b8:7f:ae:b8:88:63:be:68:02:ba:62:
dd:66:ca:5d:51:5e:c0:e9:e6:42:cf:73:8c:e0:69:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F1:21:07:4E:5D:CA:3D:22:E9:E7:C0:3F:BD:50:FD:E8:75:32:85
X509v3 Authority Key Identifier:
keyid:25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6a:30:10:e6:8c:49:0c:af:b9:c6:e7:f3:fd:f6:65:70:43:
75:27:2f:5f:ce:6d:5f:67:62:12:5a:34:16:b5:58:91:8f:70:
f1:96:65:42:5a:07:d8:e0:a0:77:87:9a:68:a7:bc:f7:36:8a:
83:8f:e0:48:56:af:a2:d8:74:9f:eb:3f:a8:d1:c8:00:04:54:
5b:cc:b7:39:63:87:2e:14:77:5c:11:ed:b4:28:3f:bc:5c:30:
79:52:f5:38:ad:c8:07:f5:8b:3f:3a:4a:c1:15:df:f8:cb:54:
02:b4:8d:a6:08:46:10:ba:4d:21:b4:be:53:1a:c7:1b:01:cb:
5a:d4:79:8a:25:5e:98:d7:be:a8:5c:06:55:86:99:5a:96:a6:
10:dd:26:c3:d3:ab:9a:79:74:9d:43:b0:fc:5b:81:df:62:aa:
c7:75:35:78:b8:b0:56:a8:07:7f:be:2d:8a:af:04:e5:ed:f9:
3f:3d:f6:38:6a:5e:c7:2a:1c:00:08:78:72:3e:b3:81:f7:01:
75:3d:b4:94:90:8f:7d:2a:15:cb:c6:f9:57:a9:b4:a4:0b:ba:
23:ed:91:76:10:1e:1d:66:75:74:5f:41:a5:92:97:92:ff:81:
68:40:7e:c1:97:b2:b2:63:cb:18:83:67:9e:34:28:2e:a8:e4:
67:2b:18:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:34 2026 by rpki-client