This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
File: RjCksCapPQ36qOzsV5zFITguTlg.mft (raw, json)
Hash identifier: fWMelN0E7gpfqA+TLIoGGauUyCM+iQL1CMG9RvIIgz4=
Subject key identifier: 75:8B:CD:1D:55:BF:FA:B5:D3:85:85:96:8A:80:36:61:61:37:68:00
Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58
Certificate issuer: /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
Manifest number: 0115
Signing time: Fri 05 Dec 2025 02:58:26 +0000
Manifest this update: Fri 05 Dec 2025 02:58:25 +0000
Manifest next update: Fri 12 Dec 2025 02:58:25 +0000
Files and hashes: 1: RjCksCapPQ36qOzsV5zFITguTlg.crl (hash: wlj/fITfDWrFutNOtTuiAvy12ztifMdP3Kl3ISvXk9M=)
2: 074283A632A511EF84ECD41AC4F9AE02.roa (hash: HH7FDVFqsTYbpuRf1EO/qaMVXCNqsjU0LtnOZhqtOfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl
rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4DA5, serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58
Validity
Not Before: Dec 5 02:58:25 2025 GMT
Not After : Dec 12 02:58:25 2025 GMT
Subject: CN=69324a52-6486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:7a:25:09:97:12:64:18:12:18:d4:f5:08:
e8:35:28:03:e7:0b:ac:3b:38:02:c0:c7:82:9d:b0:
39:db:86:69:21:4b:7c:32:b7:0d:7e:c3:93:51:9c:
ee:78:1b:91:a4:06:73:43:45:45:a0:39:93:a7:ee:
28:0b:52:03:9d:89:e9:41:c4:cc:4a:5e:cb:34:9c:
9b:5d:49:d3:0c:4d:16:87:5e:9a:42:af:eb:dc:0d:
76:26:3f:35:7f:15:67:d1:ee:d7:dd:fa:6c:4f:77:
77:f1:76:08:76:62:58:0a:53:2f:af:3b:6c:5d:d3:
0d:ab:00:04:fd:a3:61:f1:9d:de:87:89:c7:b7:46:
ce:db:a2:fa:e9:41:53:d7:be:ef:4b:68:2c:27:89:
da:90:4a:97:28:5e:28:ac:3b:95:da:6a:ba:c0:8a:
26:a3:f9:41:59:ca:3f:76:a0:e2:d3:07:6a:66:2b:
92:c3:69:a5:a5:7f:2c:d0:35:9a:b8:07:d8:0c:e3:
8a:3e:bb:70:54:ba:24:71:88:9e:2b:72:bc:49:3d:
09:16:88:2a:2b:23:63:d3:8b:4d:18:50:4c:ac:f1:
fc:a5:87:02:14:10:98:95:c4:ec:4d:52:94:2a:0f:
15:c5:93:01:a9:9c:5b:f9:6f:15:f2:c6:7b:b8:08:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8B:CD:1D:55:BF:FA:B5:D3:85:85:96:8A:80:36:61:61:37:68:00
X509v3 Authority Key Identifier:
keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f9:12:1e:55:23:27:05:2a:67:a8:b9:7f:db:27:40:02:94:
ce:0e:bd:43:42:00:6e:fe:1a:4a:f6:4a:45:7d:4a:03:95:f4:
ff:5b:25:09:33:4b:06:97:6f:b4:13:82:e6:3c:54:33:27:e8:
55:e3:f9:4c:f9:44:72:96:81:93:79:65:bc:78:85:db:34:49:
bc:98:70:71:ba:ba:e0:8c:c9:af:bf:6a:8f:6c:d9:1f:51:92:
6e:33:32:39:d2:71:c5:5f:a3:b5:3d:df:43:53:27:99:e8:c9:
9c:e5:05:c1:b1:79:d0:41:dc:3b:f1:dd:56:7b:cc:13:23:d7:
31:10:92:c7:89:53:19:30:73:28:a2:e6:69:71:1c:8e:14:e1:
9d:0f:2b:55:49:e5:0c:89:17:33:03:b4:15:13:29:4a:e2:59:
f6:d9:8c:e1:5f:f3:e8:4b:5d:6f:ac:89:99:7e:73:76:92:7c:
17:5b:ab:c2:ab:b5:f5:80:3a:84:94:21:90:8c:df:57:cb:44:
10:bb:aa:d0:5b:10:df:9d:7c:30:18:19:b6:07:b5:76:a4:7f:
b4:5e:db:cc:33:31:5d:46:23:a5:d9:f4:08:42:63:5f:b1:e4:
25:82:26:91:f9:7d:f0:cc:e2:05:dd:83:65:f6:cf:84:38:fb:
24:a0:a6:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTREQTUxMTAvBgNVBAUTKDQ2MzBBNEIwMjZBOTNEMERGQUE4RUNFQzU3OUNDNTIx
MzgyRTRFNTgwHhcNMjUxMjA1MDI1ODI1WhcNMjUxMjEyMDI1ODI1WjAYMRYwFAYD
VQQDEw02OTMyNGE1Mi02NDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxaV6JQmXEmQYEhjU9QjoNSgD5wusOzgCwMeCnbA524ZpIUt8MrcNfsOTUZzu
eBuRpAZzQ0VFoDmTp+4oC1IDnYnpQcTMSl7LNJybXUnTDE0Wh16aQq/r3A12Jj81
fxVn0e7X3fpsT3d38XYIdmJYClMvrztsXdMNqwAE/aNh8Z3eh4nHt0bO26L66UFT
177vS2gsJ4nakEqXKF4orDuV2mq6wIomo/lBWco/dqDi0wdqZiuSw2mlpX8s0DWa
uAfYDOOKPrtwVLokcYieK3K8ST0JFogqKyNj04tNGFBMrPH8pYcCFBCYlcTsTVKU
Kg8VxZMBqZxb+W8V8sZ7uAgBZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWLzR1V
v/q104WFloqANmFhN2gAMB8GA1UdIwQYMBaAFEYwpLAmqT0N+qjs7FecxSE4Lk5Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNERBNS9CRDM0NTQ5QzMy
QTQxMUVGODIyRTBGMUFDNEY5QUUwMi9SakNrc0NhcFBRMzZxT3pzVjV6RklUZ3VU
bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JqQ2tzQ2FwUFEzNnFPenNWNXpGSVRndVRsZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NERBNS9CRDM0NTQ5QzMyQTQxMUVGODIyRTBGMUFDNEY5QUUwMi9SakNrc0NhcFBR
MzZxT3pzVjV6RklUZ3VUbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCl+RIeVSMnBSpnqLl/2ydAApTODr1DQgBu/hpK9kpFfUoDlfT/WyUJ
M0sGl2+0E4LmPFQzJ+hV4/lM+URyloGTeWW8eIXbNEm8mHBxurrgjMmvv2qPbNkf
UZJuMzI50nHFX6O1Pd9DUyeZ6Mmc5QXBsXnQQdw78d1We8wTI9cxEJLHiVMZMHMo
ouZpcRyOFOGdDytVSeUMiRczA7QVEylK4ln22YzhX/PoS11vrImZfnN2knwXW6vC
q7X1gDqElCGQjN9Xy0QQu6rQWxDfnXwwGBm2B7V2pH+0XtvMMzFdRiOl2fQIQmNf
seQlgiaR+X3wzOIF3YNl9s+EOPskoKao
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:39:30 2025 by rpki-client