This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json)
Hash identifier: AAbdt73vbsRzBaj01qwLcmpUvY4MfKtHcSiwr9pExb8=
Subject key identifier: 80:D3:3E:4B:E7:66:8A:88:59:4E:A2:C1:C2:FB:3E:20:9D:39:60:2D
Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67
Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
Certificate serial: 34FE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
Manifest number: 34F6
Signing time: Sat 06 Dec 2025 14:21:10 +0000
Manifest this update: Sat 06 Dec 2025 14:21:10 +0000
Manifest next update: Sat 13 Dec 2025 14:21:10 +0000
Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: ts4FdU//hxfFGTbIuM/3pkGKtJeAE58+LZxwfTVsxiw=)
2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: eIHncqSLzAK4hT66bMDG+FBpRTxCSLp9MqrqHufX4PA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl
rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13566 (0x34fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
Validity
Not Before: Dec 6 14:21:10 2025 GMT
Not After : Dec 13 14:21:10 2025 GMT
Subject: CN=69343bd6-d38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:94:cf:e0:97:9b:c3:11:bd:95:17:15:00:
0f:22:8f:9e:8e:12:73:68:47:9c:20:92:6a:7d:91:
87:8b:99:f5:09:7b:75:c4:1a:b9:fb:e6:83:cc:20:
11:e6:49:90:24:e9:b3:7c:c1:07:1f:31:d1:0a:60:
5a:0e:13:e0:33:7e:69:cc:e2:1f:67:a6:e9:cf:70:
ec:99:0a:41:2a:c5:b4:8d:c2:a0:a6:a1:d3:ef:e6:
cd:58:16:1d:d6:88:ef:9f:85:1e:05:9d:14:be:33:
5f:3a:17:2c:fd:d2:57:32:e9:90:0c:a8:22:15:64:
68:71:97:51:32:3b:a8:a1:c7:ed:68:19:4a:25:50:
bf:dc:77:e6:92:07:f4:13:bc:21:ae:4e:12:db:e0:
29:03:45:72:76:6d:3f:c0:4b:f0:90:11:05:29:32:
90:04:6b:9b:f8:45:f5:e4:ae:a3:50:75:69:6c:b5:
2a:94:c7:f2:36:34:7f:bf:c1:af:87:88:6b:ea:1c:
64:8b:a7:4d:44:80:3a:5d:9b:a2:db:f5:09:33:76:
0e:90:12:14:0e:d2:8a:36:2a:8e:58:64:bb:63:15:
27:39:33:84:ea:d7:13:ed:0e:b6:90:02:9d:92:81:
ce:64:24:33:68:20:1d:43:6b:f6:d1:b7:ca:3e:d9:
0f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D3:3E:4B:E7:66:8A:88:59:4E:A2:C1:C2:FB:3E:20:9D:39:60:2D
X509v3 Authority Key Identifier:
keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6a:39:45:6e:8d:45:21:4f:37:14:b8:a6:b8:04:d7:b3:7e:
a5:87:b2:7a:c4:42:60:92:81:92:56:5d:53:b5:9e:94:2d:e1:
50:8f:95:9b:c8:14:ca:e0:93:a6:7d:80:e8:bc:25:71:01:ee:
8b:63:74:9d:33:7c:19:c5:e9:49:fb:d7:d8:f8:3f:3f:60:96:
9a:8c:72:cf:66:70:50:14:76:72:ea:d4:65:ba:26:1e:af:bd:
7a:80:4d:c3:78:b3:42:e8:a2:7f:56:a2:0a:09:ef:2f:96:e6:
a7:2c:f5:26:f3:39:27:77:ec:cb:f6:0b:e5:82:c3:88:14:24:
54:10:a8:53:ce:a1:5e:93:6e:c5:cc:cf:21:d4:83:98:b0:90:
23:a5:42:6e:f2:bd:39:a1:5e:dd:34:c9:54:60:7f:8f:c3:36:
7f:11:10:9c:d2:e4:65:b4:ce:37:a8:e2:31:32:98:56:d4:5b:
ec:66:33:98:a2:54:2f:ee:6a:c8:12:b8:cd:83:e1:cf:14:89:
26:c3:33:be:1b:2e:d8:35:ce:6f:de:66:85:80:2c:f0:75:45:
ac:68:5a:c4:8f:55:f3:61:c8:e2:6a:c9:9e:71:19:18:3d:73:
4e:db:21:7e:19:ea:77:44:53:db:94:5e:7e:ec:a7:16:54:ff:
fb:f7:49:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:25 2025 by rpki-client