This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
File: jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json)
Hash identifier: lOpRZQ5Sqw/RzEXMsI0M1yt6Cdj/6i/6tIbiMUYjw+E=
Subject key identifier: 0A:5E:A1:C5:90:C1:16:9E:C2:47:6F:C3:91:6C:0C:AD:F5:49:7A:07
Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2
Certificate issuer: /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
Manifest number: EE
Signing time: Fri 05 Dec 2025 03:21:14 +0000
Manifest this update: Fri 05 Dec 2025 03:21:14 +0000
Manifest next update: Fri 12 Dec 2025 03:21:14 +0000
Files and hashes: 1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: 5lGsjxyzJQBkVGhIfiPvDDrH6R4WoJyVeux0aH86aKk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl
rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:21:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4C1B, serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2
Validity
Not Before: Dec 5 03:21:14 2025 GMT
Not After : Dec 12 03:21:14 2025 GMT
Subject: CN=69324faa-9c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:2f:ed:f7:0d:a4:4e:49:55:c4:16:61:12:
8a:d0:50:f7:10:d7:5b:b5:c3:f8:42:b7:ac:37:c1:
53:49:f1:2c:11:9e:a0:8f:61:c5:5d:15:2f:88:74:
91:68:7d:ed:ff:9e:99:91:b1:ae:ec:2d:08:da:c9:
a4:93:3d:0a:40:8c:38:c7:ba:77:9d:ac:82:34:94:
91:fd:c0:49:15:4b:c4:e6:74:77:0c:fe:00:ed:9e:
e8:ba:16:eb:47:b2:2a:99:1a:26:f1:8c:34:97:1e:
2d:08:fa:00:cb:89:41:9b:4f:31:2f:6f:2e:68:84:
ae:80:7f:a8:26:61:42:7a:19:33:3d:0a:a4:dd:ce:
9f:a7:ea:53:6f:1f:a4:48:8a:e1:f5:69:0e:59:5e:
75:e2:b8:34:11:81:48:c3:5c:1d:9d:8b:3d:46:9e:
ea:2d:ae:c4:fe:f7:79:05:19:54:b9:80:38:94:c1:
98:16:b2:e0:80:1d:46:e4:c6:d0:53:f5:2b:ac:f4:
68:2b:07:ce:c3:15:52:75:48:e5:90:38:db:6f:73:
dd:9d:d8:a7:63:09:00:c6:84:96:2b:5f:6a:ff:c7:
cc:16:b8:95:ad:f7:c4:35:d8:a3:f0:4a:9a:51:90:
78:89:82:ed:e6:58:a8:5b:6f:69:ea:a4:51:c5:7e:
83:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5E:A1:C5:90:C1:16:9E:C2:47:6F:C3:91:6C:0C:AD:F5:49:7A:07
X509v3 Authority Key Identifier:
keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:43:9e:69:d7:ee:d3:8a:56:76:9e:c9:17:e8:7f:60:62:89:
c6:49:6a:3a:7c:a7:48:9b:82:58:0e:1e:f6:99:ec:3d:41:17:
82:0d:cd:9a:71:f6:c1:f7:14:80:40:3f:f1:a1:db:78:41:f8:
d5:ad:03:1c:2c:23:70:33:b0:ea:f2:47:cf:9d:3f:47:4e:67:
bf:ae:c6:e2:30:98:be:7c:59:89:3d:77:f3:ff:70:67:9f:03:
43:a7:47:bc:a4:a8:8f:81:5d:61:3a:a6:f0:87:f0:5e:17:e8:
7f:2a:20:bd:ed:2f:c1:c0:d1:63:44:63:88:20:0b:b3:27:30:
6d:20:9e:51:c8:4b:4b:bd:73:23:e5:08:07:f9:36:ad:b2:f1:
57:7d:a8:47:e6:ea:ee:2b:2c:01:af:17:8b:11:7a:fe:78:a0:
15:1b:3c:53:88:ac:d3:03:61:7e:25:a7:22:bf:2c:d4:63:d5:
e5:3f:f9:60:59:eb:f3:10:3f:30:9e:13:0f:a7:a0:ac:92:8a:
52:46:79:60:ee:73:77:d6:d1:60:e4:81:7e:64:af:f8:78:8b:
bb:68:05:bb:a1:68:ba:29:ba:ac:9d:c8:9f:6d:80:84:dd:6e:
1c:96:e1:9a:25:ff:6d:69:70:a5:f7:a7:f6:e6:a4:0d:7e:6e:
39:06:2d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:19 2025 by rpki-client