This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
File: juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json)
Hash identifier: ZVaRxyalBrdMYGNRV1JR775qbYwwsE7as6wkgElrN/E=
Subject key identifier: 67:FA:3C:D4:02:BD:11:BF:F6:2F:FE:C0:8D:31:06:C7:EF:EF:8F:49
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial: 01F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
Manifest number: 01EE
Signing time: Sun 07 Dec 2025 01:08:23 +0000
Manifest this update: Sun 07 Dec 2025 01:08:23 +0000
Manifest next update: Sun 14 Dec 2025 01:08:23 +0000
Files and hashes: 1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: 0e4GZNZI1saz1ftMfqCGNCTCkY85F+5dQwiMgJXGszg=)
2: FD678F40214E11F095B05918C4F9AE02.roa (hash: SE2tQtfXNh6RaSGSNFmLS6aWkLKk1NZamBIU1kOWDMs=)
3: 45399802215111F0B94CA13FC4F9AE02.roa (hash: 4P/ZavUH4NM6wMd2wGqcFK1zMWVNSTlldDMPOXOpXSo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Validity
Not Before: Dec 7 01:08:23 2025 GMT
Not After : Dec 14 01:08:23 2025 GMT
Subject: CN=6934d387-3a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:25:14:e7:f9:27:22:ad:0d:96:23:65:1e:
d7:a8:a8:da:f6:26:d6:5f:3d:d5:79:b9:8f:7d:86:
f0:82:a5:ec:e1:3f:24:e5:99:10:74:5d:cb:ea:cf:
a1:72:f7:7c:e4:b5:99:d4:45:39:31:06:be:a0:0c:
fe:e2:4e:cd:cc:fa:68:8a:f0:28:fb:bc:64:56:16:
35:a4:ee:b9:76:c0:a1:84:7e:3d:91:c4:21:2c:4a:
18:cb:48:75:1e:59:de:07:dc:57:22:63:4f:ec:d1:
d9:3e:03:83:98:96:43:3b:6d:8c:de:5b:40:a5:31:
99:8d:7b:40:eb:4d:55:37:2e:29:83:92:97:6b:8f:
09:8f:b5:4a:8f:b4:7c:70:f7:45:97:a7:ab:32:99:
29:7c:63:ec:e3:35:0a:74:d2:b9:3d:0d:1d:5f:55:
6a:d1:e7:68:19:51:dd:cf:c4:1a:40:67:7a:f6:82:
2a:02:7d:b0:d7:f8:f3:73:51:c3:ca:eb:fd:b4:3b:
06:29:b4:e1:11:a9:dd:af:63:61:b8:4f:af:81:58:
e4:65:2c:68:30:4b:58:d7:ad:51:07:94:f0:c4:ea:
dd:06:df:81:b1:c2:3c:cd:54:81:44:4a:72:96:73:
77:7c:2a:b6:31:e8:2b:ae:1d:e0:e8:ea:2f:58:76:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FA:3C:D4:02:BD:11:BF:F6:2F:FE:C0:8D:31:06:C7:EF:EF:8F:49
X509v3 Authority Key Identifier:
keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:64:e8:68:eb:9f:ef:58:7f:4d:cc:54:a2:97:4f:1f:0b:d9:
ed:36:b8:da:67:cd:05:d0:73:b6:8c:31:5f:00:e6:72:65:26:
63:2d:65:b8:08:c8:69:60:5b:24:9b:27:7c:3b:7d:a1:b2:13:
5c:c1:b2:46:74:82:ee:cb:dd:f8:97:20:08:3a:4e:12:d2:2a:
ca:c3:f1:96:bc:4f:85:f1:52:69:c0:0a:90:22:67:dd:64:9e:
27:62:9d:e4:9c:f0:13:e2:39:da:cf:55:57:ca:86:5e:35:11:
b7:08:6a:b5:13:d9:d3:15:e6:e3:54:44:bf:bd:18:cb:6f:c3:
e7:7f:31:71:c2:70:c6:a2:07:81:e7:18:e0:04:a7:46:39:a1:
db:df:4e:cd:52:03:43:53:75:05:52:fe:4c:24:30:dd:fe:56:
38:7a:28:1f:36:4f:94:ef:51:00:60:fb:c3:44:5a:d2:50:d6:
1d:0c:7d:73:a2:0a:0b:52:2a:33:1d:ef:17:03:82:38:cd:6e:
e1:15:2c:27:74:fe:e4:ef:b3:0e:21:3b:98:ee:d6:ac:8b:e9:
63:85:d4:b3:67:c6:74:1a:fc:38:f9:64:f5:42:c7:00:ea:76:
49:68:b5:ff:fa:da:60:64:4e:6e:46:8c:f0:33:ad:91:a7:a0:
3c:e3:f0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:57:07 2025 by rpki-client