This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
File: JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json)
Hash identifier: PsdMI6i5JSuivF3KDD94Qem2lJY3YAYPZRr7LARTQv0=
Subject key identifier: 4E:A6:66:4D:9B:8A:6A:E6:3F:29:CD:4D:E5:1F:E5:AB:3C:F4:07:4A
Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Certificate serial: 2556
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
Manifest number: 2540
Signing time: Sat 06 Dec 2025 15:30:38 +0000
Manifest this update: Sat 06 Dec 2025 15:30:37 +0000
Manifest next update: Sat 13 Dec 2025 15:30:37 +0000
Files and hashes: 1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: CGlitVawRuHUrVDJ6bnltMNRq9PaeMBdpSMvBUJTqXE=)
2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: N5Vn59/DXOfi3X7rqOdzQLvOw6/oh8X23e/dgbXYsyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9558 (0x2556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Validity
Not Before: Dec 6 15:30:37 2025 GMT
Not After : Dec 13 15:30:37 2025 GMT
Subject: CN=69344c1d-1e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:a2:0a:65:e6:1c:d0:44:21:0b:90:2f:d2:
40:b4:c4:ca:d1:54:e7:36:21:fc:8b:8c:c5:86:42:
28:b2:5f:5d:86:3b:22:9a:22:c5:ee:03:5e:72:d7:
2e:e1:1a:73:a9:5d:07:22:54:e6:a4:d3:0f:bb:f4:
cb:c8:ab:ef:b6:78:5b:bd:76:8d:90:04:ac:df:bc:
ca:5a:6d:e3:0b:39:fa:69:2d:b3:00:36:95:70:5b:
ca:67:a5:5d:d9:81:67:57:d4:66:1b:0f:33:d0:f6:
25:78:9d:e6:45:cc:18:e9:fb:94:c9:ec:a5:d3:87:
2c:03:1c:3a:6d:f6:ce:57:18:95:e5:ff:9c:33:4a:
e0:c0:f4:98:80:b8:a0:11:8a:37:d4:73:67:3d:70:
73:e3:69:cd:b7:47:6d:45:ce:e9:22:1d:03:03:28:
68:6a:d4:eb:14:19:ac:70:79:27:79:4c:1e:c5:05:
f3:c8:8c:78:1d:2c:9e:65:e1:22:b3:d6:e7:54:c3:
af:96:64:39:a5:15:fb:63:69:e2:45:7b:8a:3d:b0:
23:2d:9b:b5:ba:85:0b:70:45:93:c5:13:bc:bd:1d:
8f:11:5c:ee:4d:78:80:32:56:56:93:ff:cf:6f:18:
bc:23:79:7c:46:98:d7:e6:01:1b:20:04:93:dd:8b:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A6:66:4D:9B:8A:6A:E6:3F:29:CD:4D:E5:1F:E5:AB:3C:F4:07:4A
X509v3 Authority Key Identifier:
keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:82:92:f8:84:f4:2d:67:0d:f9:6f:bd:1d:fd:c9:4b:92:73:
aa:9a:06:86:48:d8:1f:c3:b7:1c:fb:6c:2a:3c:cc:cf:b1:1a:
ee:3c:9c:ad:61:4e:19:83:44:0d:69:0a:0c:33:a3:61:bc:0a:
09:59:76:2e:94:c3:87:42:64:33:f6:92:19:04:c6:ff:42:0c:
cf:ec:a6:c1:d5:25:88:19:0b:9e:50:16:5d:4c:fc:80:e8:fb:
ff:d4:ca:35:b9:40:86:cd:e6:63:9f:31:1c:1e:ec:33:dc:5e:
13:c3:d3:44:97:34:c9:cf:79:4b:fe:e9:d3:7f:ed:f8:91:41:
bc:74:31:08:e4:50:f5:e5:0a:10:0b:18:6f:3c:3d:63:07:3d:
f8:ea:2b:fd:5e:ed:60:ff:f9:1b:64:a7:92:4d:1b:8b:66:fa:
66:b5:da:ba:98:01:75:b8:96:c2:62:6f:72:41:23:77:e9:b8:
72:a6:fb:1e:fd:49:1e:c0:a1:21:e5:7e:da:bb:3e:f6:4c:8e:
c3:a8:fd:67:23:f4:12:ce:b1:95:01:d8:e7:c9:2a:22:e0:84:
df:0e:c4:b3:82:6c:18:fc:64:a8:73:31:55:9a:44:ca:a7:46:
aa:24:5a:e6:15:18:03:3f:70:dd:06:c3:70:3e:e4:85:60:75:
ad:51:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:45:38 2025 by rpki-client