This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
File: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft (raw, json)
Hash identifier: dymHCcNNKLPWp3f/BRzbvCjcmxg8rYygvjWWBNkjEPc=
Subject key identifier: 7C:1D:3D:61:A5:04:6D:7F:C9:B6:31:31:D6:69:AC:7B:CC:1E:63:DA
Authority key identifier: 25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43
Certificate issuer: /CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
Manifest number: E1
Signing time: Fri 05 Dec 2025 03:32:02 +0000
Manifest this update: Fri 05 Dec 2025 03:32:02 +0000
Manifest next update: Fri 12 Dec 2025 03:32:02 +0000
Files and hashes: 1: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl (hash: dcwnFMqq8PigrSTYKPkikqM44IvHkWpkF6OzlTxwvfI=)
2: D292C0D27E1A11EFAE842E12C4F9AE02.roa (hash: SvJanGxzuxhfbTc60r8YUo4zzExKYT9JE66aBXW8SFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl
rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160A05, serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
Validity
Not Before: Dec 5 03:32:02 2025 GMT
Not After : Dec 12 03:32:02 2025 GMT
Subject: CN=69325232-0b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:b0:98:6c:57:9b:6b:8e:95:d1:82:a5:2e:
32:44:cc:ec:41:2f:5a:f4:76:90:7a:0c:b5:7e:de:
3e:3e:04:ad:e6:fd:46:ac:7c:f3:df:3c:b9:8e:34:
fe:32:f2:af:de:a1:47:8d:7e:1a:7d:3e:4a:80:23:
21:ec:4a:da:3f:ac:fa:21:53:07:27:5f:50:7c:54:
1c:d3:be:01:9b:ec:ed:78:0a:f3:b8:06:d8:c5:04:
ec:a1:87:f3:b9:ef:69:9a:f3:44:59:17:97:eb:07:
35:66:ed:c7:7b:41:86:ac:58:cf:cc:ad:fe:9c:74:
c7:91:5d:4e:4e:bd:b8:fa:13:fa:83:e1:dd:b2:33:
ba:7f:9c:d3:ca:47:79:8e:cf:59:e1:a1:3e:9d:45:
f3:92:57:43:d6:2b:ae:12:6b:9e:4f:76:17:57:47:
0d:51:ae:46:bf:a0:ce:d4:01:64:e5:4d:4a:a6:49:
bd:a8:2b:db:f1:bc:5b:cc:9a:6b:a9:e9:68:c1:de:
2e:e9:f2:96:d6:38:a4:b2:e7:46:52:d6:a6:b7:49:
5a:30:92:73:9d:e2:3c:5d:ac:52:7e:e3:d5:5b:9a:
f7:6d:be:71:7a:d6:8a:59:a6:30:8a:64:80:6c:25:
cb:f4:8b:32:d7:6e:38:76:5e:b4:c1:8b:1f:dd:56:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1D:3D:61:A5:04:6D:7F:C9:B6:31:31:D6:69:AC:7B:CC:1E:63:DA
X509v3 Authority Key Identifier:
keyid:25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:ac:14:71:46:36:4c:22:f4:ff:66:c8:d8:15:60:bd:22:11:
cc:2e:3f:a8:68:e0:c5:94:16:5a:95:74:c6:1e:38:b2:8c:12:
2e:62:7e:43:b7:d8:4e:1e:8a:be:58:64:1f:d8:4a:34:2d:12:
4a:8e:f4:a2:20:08:4e:24:fa:4d:61:96:7b:4d:1a:7b:db:30:
29:48:a8:13:90:74:3f:f1:15:88:43:58:5d:a1:a5:00:57:e9:
22:fb:30:d7:84:e3:a1:ae:1a:4e:02:40:59:59:9f:b7:93:a2:
27:4f:42:c8:17:a4:2d:70:d5:6b:30:c3:d0:16:3c:13:2b:15:
56:90:01:4c:63:1a:07:76:df:da:4a:37:bd:28:bd:34:4f:db:
36:2d:fe:ac:07:c5:99:dd:0a:a8:09:3e:e6:ce:7c:71:35:83:
3c:fa:5a:af:90:8e:45:61:15:8e:c2:16:d7:77:0c:e4:e2:71:
34:cc:9a:d2:9f:19:29:ca:5a:cf:40:a9:4c:d1:49:a6:74:4c:
01:cd:0e:fd:ee:cd:47:57:c5:56:9b:2b:4e:7e:3c:d2:8c:33:
7e:8e:0a:b1:30:ee:86:40:08:d1:67:b1:dc:89:b4:31:6f:25:
0a:3b:8b:82:20:cf:66:66:cf:e4:ef:58:1b:94:01:87:1b:b2:
cc:2e:a9:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBBMDUxMTAvBgNVBAUTKDI1QTBCOEIwQzEwNDE1RkQ0MDZEQjIwMzIzNjY1OUM1
RjE2M0FFNDMwHhcNMjUxMjA1MDMzMjAyWhcNMjUxMjEyMDMzMjAyWjAYMRYwFAYD
VQQDEw02OTMyNTIzMi0wYjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxbuwmGxXm2uOldGCpS4yRMzsQS9a9HaQegy1ft4+PgSt5v1GrHzz3zy5jjT+
MvKv3qFHjX4afT5KgCMh7EraP6z6IVMHJ19QfFQc074Bm+zteArzuAbYxQTsoYfz
ue9pmvNEWReX6wc1Zu3He0GGrFjPzK3+nHTHkV1OTr24+hP6g+HdsjO6f5zTykd5
js9Z4aE+nUXzkldD1iuuEmueT3YXV0cNUa5Gv6DO1AFk5U1Kpkm9qCvb8bxbzJpr
qelowd4u6fKW1jiksudGUtamt0laMJJzneI8XaxSfuPVW5r3bb5xetaKWaYwimSA
bCXL9Isy1244dl60wYsf3VayxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwdPWGl
BG1/ybYxMdZprHvMHmPaMB8GA1UdIwQYMBaAFCWguLDBBBX9QG2yAyNmWcXxY65D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EQTVEMUQ2MjdD
OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9KYUM0c01FRUZmMUFiYklESTJaWnhmRmpy
a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0phQzRzTUVFRmYxQWJiSURJMlpaeGZGanJrTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEEwNS9EQTVEMUQ2MjdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9KYUM0c01FRUZm
MUFiYklESTJaWnhmRmpya00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBXrBRxRjZMIvT/ZsjYFWC9IhHMLj+oaODFlBZalXTGHjiyjBIuYn5D
t9hOHoq+WGQf2Eo0LRJKjvSiIAhOJPpNYZZ7TRp72zApSKgTkHQ/8RWIQ1hdoaUA
V+ki+zDXhOOhrhpOAkBZWZ+3k6InT0LIF6QtcNVrMMPQFjwTKxVWkAFMYxoHdt/a
Sje9KL00T9s2Lf6sB8WZ3QqoCT7mznxxNYM8+lqvkI5FYRWOwhbXdwzk4nE0zJrS
nxkpylrPQKlM0UmmdEwBzQ797s1HV8VWmytOfjzSjDN+jgqxMO6GQAjRZ7HcibQx
byUKO4uCIM9mZs/k71gblAGHG7LMLqk+
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:58:17 2025 by rpki-client