This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
File: 0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json)
Hash identifier: 8yfiOnA+40HgHhUF8P8NGzQVO1GoqBQD3546v9Bsz7c=
Subject key identifier: 51:47:B1:0B:F8:7A:F7:24:CB:73:42:7B:98:F5:DD:11:97:3B:04:EB
Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61
Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
Manifest number: 0105
Signing time: Fri 05 Dec 2025 03:05:51 +0000
Manifest this update: Fri 05 Dec 2025 03:05:50 +0000
Manifest next update: Fri 12 Dec 2025 03:05:50 +0000
Files and hashes: 1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: TFF6gTXYn7lvasHA4mvuCSX964+OyHmPlW5aJvRvvIU=)
2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: Gd34BZHumVDMQlkFxhkn9zZUBjwQGIsnWxDTTynzeE8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl
rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
Validity
Not Before: Dec 5 03:05:50 2025 GMT
Not After : Dec 12 03:05:50 2025 GMT
Subject: CN=69324c0f-071b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:89:66:b6:91:1d:c2:f7:d1:85:e8:08:2d:22:
77:db:01:b7:03:43:ed:08:4e:88:b7:16:7b:3f:bb:
82:cd:cd:4d:2b:85:84:a6:01:00:cf:9b:2d:83:cf:
7e:1c:de:d2:0b:23:12:f9:76:b0:1f:cb:07:70:24:
55:37:54:d5:5a:51:03:46:d7:26:89:9f:54:00:64:
0c:ca:fc:53:fb:2f:03:f6:ff:10:0e:58:2c:7f:90:
d0:a9:9d:ee:93:48:c3:1d:b1:5f:64:75:d2:b4:94:
f7:69:78:07:c8:e5:a3:3b:f1:e4:72:27:7d:e5:31:
16:35:57:eb:11:f5:0b:95:2f:96:1b:70:31:b4:93:
c5:1b:93:41:6f:36:c4:63:0d:a2:c4:58:c8:d7:98:
c4:e1:51:91:fe:41:65:a5:8e:9e:dd:3e:5a:ac:9d:
aa:a0:d8:bb:05:a4:f9:e4:b4:80:d2:7c:c7:3a:1c:
4a:2b:dd:d6:09:6a:e5:f5:69:99:f4:f1:d1:a3:03:
a7:c2:e4:5f:03:7b:fa:64:21:9f:fc:f1:56:4a:89:
e7:2c:6a:6d:8b:6f:6b:4e:7a:05:df:25:37:b7:73:
81:54:33:fb:bc:a9:be:c1:2d:3c:04:64:7b:a5:08:
6b:95:40:46:5d:70:51:06:57:73:55:16:03:3d:e7:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:47:B1:0B:F8:7A:F7:24:CB:73:42:7B:98:F5:DD:11:97:3B:04:EB
X509v3 Authority Key Identifier:
keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:c9:d4:45:e5:ca:a8:fd:9b:38:fe:a4:c8:0f:61:3b:30:2c:
c5:58:18:6c:7f:ea:55:a9:10:6b:df:96:e9:12:9e:54:0c:f2:
9f:01:90:f4:2f:bd:68:e4:03:6b:fc:b9:7e:e5:36:d1:f0:ed:
26:05:fc:6a:6f:9b:a6:d3:48:fd:35:39:59:67:ab:80:f3:f2:
d0:5c:f4:3e:3d:94:dd:bd:1a:3d:00:aa:8b:86:9f:03:bf:1d:
f4:c7:95:43:92:98:b9:6b:ee:b9:12:16:90:34:08:f0:ef:06:
e3:aa:4d:20:49:51:a6:0d:1f:aa:87:83:3e:31:51:3e:f6:bc:
7f:9c:0d:c6:db:5a:73:65:5e:82:b9:79:be:dd:2a:d8:7d:41:
ad:38:22:27:b1:36:57:fc:e4:7d:72:a3:52:b8:ff:f8:73:d1:
d1:af:5c:7d:e6:48:3f:07:bf:14:7f:74:15:36:1a:21:40:9e:
c6:17:d8:a1:5b:9e:0a:66:1c:0a:12:4b:28:c2:5d:22:01:da:
d8:ab:0c:a3:72:79:42:7b:03:a3:96:7e:6e:b7:dd:37:17:e7:
51:b3:78:fb:be:71:00:09:74:b4:4f:66:f1:ee:3d:af:5d:f0:
10:da:4f:89:2b:f2:cf:96:f9:be:f8:d1:14:d1:06:e4:5d:e9:
2a:aa:e1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:00:33 2025 by rpki-client