This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
File: JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json)
Hash identifier: uYVzBm1lO+bisuhX7eUQ3Baq/w4RETQXCofxQbP0/P8=
Subject key identifier: 12:36:5D:3F:41:6B:CF:6C:4A:63:49:5A:6B:FD:DA:54:41:CF:5A:87
Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B
Certificate issuer: /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
Certificate serial: 0165
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
Manifest number: 0162
Signing time: Fri 05 Dec 2025 02:10:48 +0000
Manifest this update: Fri 05 Dec 2025 02:10:48 +0000
Manifest next update: Fri 12 Dec 2025 02:10:48 +0000
Files and hashes: 1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: 1OTrGwewNF7EaCyFVNUXsaGs+mOib8gz+P8njRtOo5A=)
2: BE42116AB76311EE81395B37C4F9AE02.roa (hash: CD96z1MB6TWn9rZZ43ZACAQ8e/LAtFVDTuQ0/fNw+cA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl
rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160DAF, serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
Validity
Not Before: Dec 5 02:10:48 2025 GMT
Not After : Dec 12 02:10:48 2025 GMT
Subject: CN=69323f28-1a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:b4:09:c4:da:d6:ad:73:d0:f6:ae:a8:7c:
4e:43:1b:89:36:62:4f:a7:48:94:70:a7:b7:4d:2f:
b6:ea:53:c4:a5:ec:de:7b:78:e4:2f:e9:84:a6:15:
bb:6f:d7:96:bc:1e:17:ea:08:e7:5f:2b:16:43:ba:
7e:c1:fd:26:cf:90:56:4d:80:77:f7:f9:90:1b:12:
f5:62:1e:e0:ce:c4:02:d8:26:a2:aa:f9:8c:7d:df:
4d:ba:5a:69:0f:3f:7d:55:b6:3f:48:21:05:a3:9a:
31:59:c2:01:4a:b7:fa:36:c5:10:70:1f:6e:03:e2:
00:a0:41:09:e5:73:8b:7e:33:76:90:fa:3d:85:78:
c9:fd:59:74:b1:38:a6:f2:2e:bc:c2:3a:e2:6c:00:
05:a1:bc:34:c7:9c:cb:03:d7:88:94:4f:9c:bc:fa:
b1:11:0b:d4:2e:2d:2a:10:3c:83:0f:bf:a6:a0:e2:
f1:ba:74:44:85:47:a9:83:5e:c9:46:16:da:5e:5f:
fd:fa:6f:3b:62:04:31:ff:94:3b:a1:43:5f:2d:71:
a1:a7:ba:9f:41:67:5c:8e:53:9a:74:f1:f4:c7:25:
c2:73:85:6d:75:40:f8:e8:cf:c4:4e:b6:f2:ff:0d:
e1:0b:fd:2b:2e:89:27:9f:61:32:e7:9a:55:19:a6:
22:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:36:5D:3F:41:6B:CF:6C:4A:63:49:5A:6B:FD:DA:54:41:CF:5A:87
X509v3 Authority Key Identifier:
keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:67:72:81:c4:3a:3e:8d:c5:9b:e8:ac:cb:48:44:c5:2d:69:
8e:56:94:52:5f:f1:34:32:57:e1:6d:36:e4:22:5f:5e:6c:91:
48:fb:4d:44:c9:f3:69:d4:cf:17:b8:19:01:00:c7:7a:27:38:
d2:a5:71:16:cb:62:e3:6a:7a:9d:14:10:c6:fb:53:b7:e3:a3:
fd:35:91:1a:c4:29:cf:d9:9a:86:66:dd:8a:e5:ea:7e:2a:6e:
a0:a0:b9:94:51:aa:81:67:c0:9f:71:e8:f9:7e:be:d5:58:6a:
17:29:83:b3:49:47:69:ad:31:90:71:ca:87:be:f0:90:05:4e:
b4:1c:56:4f:3a:e7:b1:f3:ed:fd:7e:51:11:6b:22:55:ab:5c:
01:95:31:7d:0e:5c:b0:69:64:f8:eb:11:33:01:a9:0d:23:37:
f3:93:92:0e:d7:53:85:ab:27:48:6b:61:53:fd:cf:ff:55:8d:
6a:53:11:d6:4c:d7:39:53:bc:ab:b8:51:cf:74:01:46:e3:60:
9c:af:34:41:9a:5a:ee:85:b6:6d:35:d9:21:fc:70:4d:b3:e6:
be:53:32:06:e7:f2:c5:df:dd:e9:35:00:28:ca:57:40:bf:10:
71:03:65:0a:a3:e2:34:92:53:91:3a:5b:1e:15:4a:f7:a6:80:
72:d0:08:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBEQUYxMTAvBgNVBAUTKDI0QkEyNDQ0NDk0MjczMEY2QUYyQjA5Q0I3MjNFNUM5
NjM3MEZCOEIwHhcNMjUxMjA1MDIxMDQ4WhcNMjUxMjEyMDIxMDQ4WjAYMRYwFAYD
VQQDEw02OTMyM2YyOC0xYTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAogW0CcTa1q1z0PauqHxOQxuJNmJPp0iUcKe3TS+26lPEpezee3jkL+mEphW7
b9eWvB4X6gjnXysWQ7p+wf0mz5BWTYB39/mQGxL1Yh7gzsQC2CaiqvmMfd9Nulpp
Dz99VbY/SCEFo5oxWcIBSrf6NsUQcB9uA+IAoEEJ5XOLfjN2kPo9hXjJ/Vl0sTim
8i68wjribAAFobw0x5zLA9eIlE+cvPqxEQvULi0qEDyDD7+moOLxunREhUepg17J
RhbaXl/9+m87YgQx/5Q7oUNfLXGhp7qfQWdcjlOadPH0xyXCc4VtdUD46M/ETrby
/w3hC/0rLoknn2Ey55pVGaYi1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBI2XT9B
a89sSmNJWmv92lRBz1qHMB8GA1UdIwQYMBaAFCS6JERJQnMPavKwnLcj5cljcPuL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERBRi9DMkRFNkFFNEI1
MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3OXE4ckNjdHlQbHlXTnct
NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pMb2tSRWxDY3c5cThyQ2N0eVBseVdOdy00cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MERBRi9DMkRFNkFFNEI1MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3
OXE4ckNjdHlQbHlXTnctNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkZ3KBxDo+jcWb6KzLSETFLWmOVpRSX/E0MlfhbTbkIl9ebJFI+01E
yfNp1M8XuBkBAMd6JzjSpXEWy2LjanqdFBDG+1O346P9NZEaxCnP2ZqGZt2K5ep+
Km6goLmUUaqBZ8Cfcej5fr7VWGoXKYOzSUdprTGQccqHvvCQBU60HFZPOuex8+39
flERayJVq1wBlTF9DlywaWT46xEzAakNIzfzk5IO11OFqydIa2FT/c//VY1qUxHW
TNc5U7yruFHPdAFG42CcrzRBmlruhbZtNdkh/HBNs+a+UzIG5/LF393pNQAoyldA
vxBxA2UKo+I0klOROlseFUr3poBy0Aiq
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:59:57 2025 by rpki-client