This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
File: JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json)
Hash identifier: zyXQ+AHbjWnkn1eHUQlzMqVhC0RveoCLGfwcdG9NL3k=
Subject key identifier: F5:28:2B:B4:C9:FD:9A:68:1B:29:7F:F7:3B:D4:0F:91:AA:07:79:4B
Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19
Certificate issuer: /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
Manifest number: EC
Signing time: Sun 25 Jan 2026 04:37:00 +0000
Manifest this update: Sun 25 Jan 2026 04:37:00 +0000
Manifest next update: Sun 01 Feb 2026 04:37:00 +0000
Files and hashes: 1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: EYEvn6o3WDAtGhoNj7rMiADc8S3439P46wwgC0/xisw=)
2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: IDo5GRPla6jccGpI9/ZSSuKt+C/mxolKDm1dtZU8zQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl
rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
Validity
Not Before: Jan 25 04:37:00 2026 GMT
Not After : Feb 1 04:37:00 2026 GMT
Subject: CN=69759dec-f77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:41:51:4c:64:7a:98:d4:0c:82:3d:6f:15:
8a:f9:ce:15:43:8b:27:3d:94:f8:3b:91:88:fa:74:
62:84:a7:43:0d:82:36:a8:5e:50:75:9d:86:72:9f:
42:ab:ff:b2:a7:d3:e5:b4:d5:ac:7c:00:d6:77:39:
8c:bc:b2:53:aa:a0:e2:f4:df:3c:7c:76:15:3d:c3:
37:1a:22:79:8b:8e:1b:fd:1d:0f:ba:00:b8:9e:50:
97:30:f8:5d:d6:17:cc:61:1f:09:cd:01:f0:9b:4f:
dd:2d:94:84:9c:dc:2c:3c:a7:a1:9b:f0:39:66:35:
09:12:34:96:c2:5b:b0:3d:0d:dc:e8:23:41:5c:88:
4b:bd:d1:01:71:3f:b3:7f:44:3d:a5:37:fd:5b:45:
4b:3b:c3:5c:ee:c1:6a:6d:f1:8f:56:9b:31:eb:c6:
01:3f:7d:74:5c:8e:be:6f:07:94:31:ac:e4:04:fc:
39:e9:78:89:50:24:2f:eb:7c:c6:2f:cc:3b:05:d7:
96:58:fb:96:12:2b:09:e9:b8:34:8b:21:cc:86:71:
c1:99:e8:d5:d1:e4:fe:c4:42:a8:06:86:88:15:c5:
9d:15:ef:dc:75:11:cc:b9:e0:82:a8:27:d2:2f:56:
db:8e:c0:c2:95:16:c9:80:4e:49:86:f3:4c:3a:07:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:28:2B:B4:C9:FD:9A:68:1B:29:7F:F7:3B:D4:0F:91:AA:07:79:4B
X509v3 Authority Key Identifier:
keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:5a:82:26:07:26:d8:df:f0:3d:8e:00:dc:08:a6:0f:9e:cd:
e2:53:96:74:06:ad:14:24:a2:67:86:cf:9e:58:2d:be:f5:60:
8a:d9:20:83:4e:46:d2:23:31:ef:12:9d:a9:69:9d:43:6b:98:
29:95:43:32:39:dd:a1:ce:c7:c5:e6:78:70:17:3e:ab:f7:1c:
3f:91:d8:1a:44:b7:c3:9a:26:60:be:12:dc:bf:9d:48:a8:91:
5d:c9:10:44:db:22:36:e3:0d:77:84:27:b5:8d:ff:87:79:b0:
dc:f2:59:30:3b:a8:5f:22:43:70:c3:c1:33:2b:47:06:28:41:
cf:b9:c0:3d:74:d9:f0:7f:cb:80:99:19:b2:8e:2b:89:56:cf:
bd:91:9a:73:3b:43:43:ca:14:92:7a:5f:ce:6d:cd:0a:0e:22:
a4:f0:83:31:93:63:9f:60:17:4e:2e:bc:c6:48:d3:91:57:aa:
ce:75:15:6f:00:e8:5c:3c:9d:d7:75:2f:1e:88:eb:41:c3:e9:
d6:19:6f:00:4a:19:9c:1a:3b:25:ff:c9:63:83:68:1a:0c:fc:
aa:bb:f1:de:3a:4b:25:9b:a3:0f:bd:16:a1:f5:d6:26:27:1d:
47:fb:19:24:af:56:01:87:7f:c5:62:01:58:f3:52:c4:64:d9:
09:ce:77:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:50:40 2026 by rpki-client