This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
File: Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft (raw, json)
Hash identifier: o+1b8zfaYfhi3wwZtCUSaT642pqGuUAoUF9stoAqA3k=
Subject key identifier: B2:36:64:92:22:B2:DE:38:2C:61:9B:F8:FF:10:8A:39:B9:86:6B:8A
Authority key identifier: 27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
Certificate issuer: /CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Certificate serial: 051D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
Manifest number: 0512
Signing time: Sat 06 Dec 2025 22:24:43 +0000
Manifest this update: Sat 06 Dec 2025 22:24:42 +0000
Manifest next update: Sat 13 Dec 2025 22:24:42 +0000
Files and hashes: 1: Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl (hash: 1FoWkN8O86Y5QzZHHqS5ynicCTqkFrEZDLXDVsyw1tQ=)
2: 200E2B0059A011EC83255663C4F9AE02.roa (hash: /R9JZ26EKIRVQE7fNMtoVyMx8zlmWtOsK2Jrv8Lzto4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl
rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 22:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1309 (0x51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919495D, serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Validity
Not Before: Dec 6 22:24:42 2025 GMT
Not After : Dec 13 22:24:42 2025 GMT
Subject: CN=6934ad2b-bb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:2a:b6:7f:63:52:67:6c:ee:f7:1b:75:8b:
20:b8:8e:64:05:2a:f5:16:e1:f8:0c:af:59:e1:95:
c2:26:1c:e7:a8:55:0c:be:d0:99:63:9b:4d:41:75:
44:e8:af:40:b7:0e:a0:69:8c:bd:00:4f:e6:73:9a:
44:56:f2:ac:e3:fa:0b:5b:96:6f:ed:a6:bd:87:bf:
6a:f7:87:5c:47:ac:6a:81:12:13:4d:49:20:57:29:
20:8c:28:11:9d:54:e1:57:28:2f:de:2c:72:08:6c:
dc:52:6e:d2:3d:ff:60:db:11:aa:07:00:2c:d7:d0:
89:58:20:0d:73:a5:16:1b:05:fc:b5:b9:d9:02:cf:
97:0d:74:45:37:74:01:d2:0b:4d:f3:0c:59:68:c9:
41:69:38:65:e8:46:14:a1:24:82:0a:54:f4:c7:41:
02:bd:16:c9:25:97:17:fb:1c:9c:96:3e:5f:ff:c2:
43:59:14:4d:d0:cd:9c:99:1e:43:a4:6a:cf:4a:9b:
e3:33:71:14:a7:9c:c2:fa:59:95:8c:e2:12:9d:b9:
d0:a4:48:94:09:f4:f4:35:5a:f8:f9:71:a9:bc:41:
8d:61:dc:28:2a:81:6a:90:4f:cd:66:d2:bc:aa:39:
c1:5d:d7:8c:1e:25:6d:a8:d5:01:54:58:aa:6c:f2:
51:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:36:64:92:22:B2:DE:38:2C:61:9B:F8:FF:10:8A:39:B9:86:6B:8A
X509v3 Authority Key Identifier:
keyid:27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:d8:ba:c6:66:5f:76:21:7a:28:8b:a4:bd:a3:b6:e4:42:63:
2d:0f:c2:50:2a:2f:28:fd:8c:77:11:db:a4:2e:68:cd:3b:1f:
52:c5:2a:e5:7f:28:4e:73:56:fb:8c:a0:4c:1d:25:e7:8c:31:
1e:a3:28:32:41:a5:f7:4f:bf:72:db:d4:e8:fa:af:fb:9f:c5:
0c:87:8c:a2:e7:60:56:6b:be:18:79:6c:ee:36:68:2b:4b:0a:
18:dd:4c:77:d3:4b:fe:56:0c:03:3c:81:2e:87:b3:da:59:39:
86:e7:d5:3f:43:89:45:d6:7a:57:69:b0:a4:2d:e3:ea:dc:bc:
d5:0d:f9:0b:43:cb:36:33:a9:51:e7:37:40:f9:2f:ad:c9:be:
87:24:0c:17:8d:ca:76:69:4c:e2:c1:71:8a:1e:02:ae:d2:36:
81:d0:43:cd:63:92:d0:1a:69:65:c2:89:53:f6:39:4a:b6:2d:
d6:c1:21:88:ed:2d:16:c9:59:99:c3:d4:15:f3:52:1b:6c:dd:
b8:c7:29:50:c4:97:48:e0:cc:32:55:ee:db:5a:de:4e:64:b1:
ea:6f:ba:21:04:bd:39:81:c8:cd:39:3a:9b:3d:e9:36:7a:2f:
37:60:83:e1:6a:9b:8d:71:15:c3:1b:e9:b5:af:b1:00:02:b8:
23:fb:20:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:25:46 2025 by rpki-client