This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
File: JbCzFZvpDPGiOyUhpSER_wOQXvc.mft (raw, json)
Hash identifier: 5ErAoZKAXiZs3NRDNy99FpC3aeoxWJGTK5rZ1vkMW1A=
Subject key identifier: 4D:5D:1C:11:9D:EB:CA:A2:8D:4C:53:C1:D1:D0:F1:6D:65:AC:92:BC
Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
Certificate issuer: /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
Manifest number: 7E
Signing time: Fri 05 Dec 2025 04:39:27 +0000
Manifest this update: Fri 05 Dec 2025 04:39:27 +0000
Manifest next update: Fri 12 Dec 2025 04:39:27 +0000
Files and hashes: 1: JbCzFZvpDPGiOyUhpSER_wOQXvc.crl (hash: E3bumf4NDhi/HKgmGzumPxeyZ/1coJRNcebMrcT11lY=)
2: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (hash: LQXESBC03M55eTRwU/sXkaRTACDEQkRKoyFYlNpa2vw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl
rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
Validity
Not Before: Dec 5 04:39:27 2025 GMT
Not After : Dec 12 04:39:27 2025 GMT
Subject: CN=693261ff-1ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:db:69:f6:73:aa:dd:26:a8:06:70:c3:22:
fb:ca:e8:58:3c:ad:52:88:51:34:03:b9:4a:22:9e:
0f:85:7d:57:a2:55:cf:d9:21:72:94:dc:ea:b5:e3:
62:fc:e3:14:cf:b7:02:60:c4:7a:c0:85:a5:b4:36:
83:f1:bc:ef:73:da:db:71:77:d8:07:3e:1b:3d:92:
0b:08:7b:21:51:09:3d:09:b4:00:7f:cf:54:7c:bd:
3c:81:9d:03:0a:f7:15:af:db:ab:e5:5e:9d:a7:2a:
95:20:5b:63:26:5e:c4:fd:2b:01:22:e3:32:cd:5c:
11:db:a5:fe:99:b3:be:62:f0:40:1f:5c:91:05:e8:
23:b0:26:2e:10:e7:f4:a7:f1:a7:e1:3f:50:ce:45:
60:49:9c:4a:bc:6f:85:2b:6b:3d:a5:3a:d4:11:c7:
f4:5a:89:50:cf:f3:4b:a6:81:74:ad:b0:2b:b8:2a:
d9:09:93:46:47:4c:1c:53:ef:dd:24:97:4a:e0:d7:
d4:10:5c:49:ad:d6:0e:75:ca:53:5c:a4:cf:9f:76:
61:c3:7d:93:87:0c:ed:57:38:26:44:5e:d8:b8:e6:
af:29:be:95:af:48:0f:a2:1d:61:de:73:d2:9a:05:
4b:2d:dd:4d:23:77:70:98:12:2f:21:b0:30:3d:d9:
1d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5D:1C:11:9D:EB:CA:A2:8D:4C:53:C1:D1:D0:F1:6D:65:AC:92:BC
X509v3 Authority Key Identifier:
keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:19:c6:40:ca:33:20:aa:20:f5:a4:ac:25:b8:e5:b1:e7:d2:
f2:8a:1f:f9:57:6f:55:dd:e0:7f:10:38:98:3b:6c:5a:71:bf:
fc:a5:c7:73:ea:8a:ca:2a:ff:3a:51:b1:00:32:fb:96:ac:56:
85:26:a5:a1:12:e9:0f:34:17:e8:68:8f:e8:d6:31:84:3d:3e:
34:e2:19:1d:84:eb:da:a2:2b:08:7a:db:91:a4:ad:ef:72:af:
a3:cf:ce:65:52:41:a0:f6:93:84:60:0f:2f:fb:4b:49:52:c2:
0f:f5:3d:a1:f1:a0:66:0c:d0:7a:89:1f:41:31:74:a0:89:99:
02:af:a9:5b:47:de:fa:0c:c0:d8:5d:76:42:fa:a5:f0:b6:62:
ae:fb:11:f7:5b:5d:e4:41:75:e4:59:25:c8:5d:19:72:24:e4:
4c:cc:c1:e8:60:7b:2e:fc:f6:80:e6:b9:99:60:9d:dc:61:bf:
aa:83:9f:c9:fc:2c:0b:1b:4c:ab:03:e8:02:81:38:31:1a:ab:
4d:08:fb:d0:0c:44:e1:8a:ed:3b:54:d1:88:c0:3f:19:c2:d7:
3e:15:47:61:0d:06:8d:1f:23:83:99:45:5f:4f:58:85:53:bb:
21:2d:74:dd:8b:ba:2d:77:46:3a:10:b1:ea:43:99:44:8b:0d:
aa:c4:6e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:06:37 2025 by rpki-client