This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
File: rljj8yTZRsaD9KOPjU4c1yV0gwo.mft (raw, json)
Hash identifier: JPVK0fega4rOL4pZ2R+TY5fYDQ4j9ThUUbW7pQB3Uus=
Subject key identifier: 9A:B3:6A:F0:3D:57:2B:74:24:00:8D:6D:D7:D6:48:F9:77:38:17:07
Authority key identifier: AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A
Certificate issuer: /CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
Manifest number: 0152
Signing time: Fri 05 Dec 2025 02:20:17 +0000
Manifest this update: Fri 05 Dec 2025 02:20:17 +0000
Manifest next update: Fri 12 Dec 2025 02:20:17 +0000
Files and hashes: 1: rljj8yTZRsaD9KOPjU4c1yV0gwo.crl (hash: X15SsOC6ViEXrj+vEJp7jPxPrL8BFPFODAI6IUqMXlI=)
2: 8EAC3DDCC9FF11EEA53CA25CC4F9AE02.roa (hash: 5gSCSjFQUqd+Yem2lvK3YYMNulDLaRkf2ZFE+aQiiYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl
rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191885, serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A
Validity
Not Before: Dec 5 02:20:17 2025 GMT
Not After : Dec 12 02:20:17 2025 GMT
Subject: CN=69324161-cb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:25:21:70:55:1d:7c:fe:c7:6f:80:ff:22:
bc:c5:72:ff:1e:6c:53:0a:04:a6:f1:46:f2:c3:fe:
04:2d:30:df:5a:78:16:0b:4f:56:b6:54:95:de:20:
57:2b:40:43:19:98:95:09:76:e4:a2:5d:8c:05:aa:
98:08:f1:48:98:08:b4:fa:90:64:60:49:82:df:b9:
22:bb:f0:aa:8a:f6:cd:69:18:e3:6b:80:88:f3:bf:
b9:1d:ac:fe:19:36:f4:29:ed:28:42:32:b7:01:4e:
08:6e:51:d5:12:21:5b:07:bd:1d:a2:d2:e0:09:0a:
f8:b9:1f:02:ab:ac:c3:1b:d3:18:ff:c1:29:ac:c0:
4f:a0:55:6f:69:b0:33:af:0f:d1:c3:97:34:86:99:
89:e3:5c:4e:f1:54:8f:9c:c3:ad:7b:78:ae:9d:1d:
e1:88:f1:84:50:eb:f5:ad:c9:b7:5d:72:9e:b5:02:
69:1d:6b:90:2e:04:51:51:e2:3b:df:2f:d9:65:c8:
bc:c1:6d:9b:96:e3:35:79:73:78:e4:80:9e:89:70:
db:aa:cb:3e:f1:82:36:9a:33:b3:a8:af:0b:d5:1b:
e2:c9:ba:21:9c:59:68:4e:a0:82:47:65:ba:2a:ba:
3f:3e:a9:a8:ca:d7:2c:66:dd:86:73:49:f1:80:af:
f4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B3:6A:F0:3D:57:2B:74:24:00:8D:6D:D7:D6:48:F9:77:38:17:07
X509v3 Authority Key Identifier:
keyid:AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:10:92:c0:41:07:47:15:da:b7:fb:be:82:24:98:e7:1f:9d:
73:14:8e:8f:ea:48:5c:68:05:76:9b:60:ab:85:09:a4:d1:b2:
85:9a:70:0a:e8:97:89:7d:f8:dc:2f:35:5a:ab:12:79:f8:f8:
88:8b:b6:71:61:9f:ad:6e:46:00:9c:da:78:37:76:13:eb:7b:
1e:66:32:d2:72:93:d6:60:a0:a4:54:7b:92:35:2e:f6:38:43:
3f:d9:21:79:d4:b7:2d:cd:d0:ac:53:5e:1b:1a:9c:6e:09:a2:
5e:fd:65:63:c5:fe:30:c9:30:69:9d:c0:c4:b4:ac:01:6c:75:
8f:8b:4c:ed:f1:6d:7a:8c:8a:5a:09:42:e3:1e:1a:74:74:8c:
3e:eb:82:65:3c:24:29:b9:9e:95:d5:2d:61:db:41:38:09:47:
b8:24:c8:70:5d:73:92:b9:3b:a5:ff:e7:25:c8:ac:fb:00:fd:
3b:9e:95:a8:2d:23:5f:14:1b:2f:f0:ed:24:4c:3e:12:90:08:
13:0b:e8:ea:1a:d8:73:5d:68:eb:14:1e:15:93:65:a5:31:3d:
16:82:72:77:44:68:85:ea:5c:5e:63:2e:8d:3e:e7:42:fa:03:
ea:82:4e:8a:27:b8:b0:90:48:24:17:f7:ea:f4:6a:db:56:6b:
ab:04:5c:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTE4ODUxMTAvBgNVBAUTKEFFNThFM0YzMjREOTQ2QzY4M0Y0QTM4RjhENEUxQ0Q3
MjU3NDgzMEEwHhcNMjUxMjA1MDIyMDE3WhcNMjUxMjEyMDIyMDE3WjAYMRYwFAYD
VQQDEw02OTMyNDE2MS1jYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsRwlIXBVHXz+x2+A/yK8xXL/HmxTCgSm8Ubyw/4ELTDfWngWC09WtlSV3iBX
K0BDGZiVCXbkol2MBaqYCPFImAi0+pBkYEmC37kiu/CqivbNaRjja4CI87+5Haz+
GTb0Ke0oQjK3AU4IblHVEiFbB70dotLgCQr4uR8Cq6zDG9MY/8EprMBPoFVvabAz
rw/Rw5c0hpmJ41xO8VSPnMOte3iunR3hiPGEUOv1rcm3XXKetQJpHWuQLgRRUeI7
3y/ZZci8wW2bluM1eXN45ICeiXDbqss+8YI2mjOzqK8L1RviybohnFloTqCCR2W6
Kro/PqmoytcsZt2Gc0nxgK/0rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqzavA9
Vyt0JACNbdfWSPl3OBcHMB8GA1UdIwQYMBaAFK5Y4/Mk2UbGg/Sjj41OHNcldIMK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4NS9ERkEwNDA3OEM5
RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJzYUQ5S09QalU0YzF5VjBn
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Jsamo4eVRaUnNhRDlLT1BqVTRjMXlWMGd3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTg4NS9ERkEwNDA3OEM5RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJz
YUQ5S09QalU0YzF5VjBnd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAzEJLAQQdHFdq3+76CJJjnH51zFI6P6khcaAV2m2CrhQmk0bKFmnAK
6JeJffjcLzVaqxJ5+PiIi7ZxYZ+tbkYAnNp4N3YT63seZjLScpPWYKCkVHuSNS72
OEM/2SF51LctzdCsU14bGpxuCaJe/WVjxf4wyTBpncDEtKwBbHWPi0zt8W16jIpa
CULjHhp0dIw+64JlPCQpuZ6V1S1h20E4CUe4JMhwXXOSuTul/+clyKz7AP07npWo
LSNfFBsv8O0kTD4SkAgTC+jqGthzXWjrFB4Vk2WlMT0WgnJ3RGiF6lxeYy6NPudC
+gPqgk6KJ7iwkEgkF/fq9GrbVmurBFzU
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:39 2025 by rpki-client