This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
File: J38SJEpQvGVO5WP-c5_k63GZZrY.mft (raw, json)
Hash identifier: nMQNNHQRijpCkHPRMk5l8ewVv16TZzdmVzy7fEWkv8I=
Subject key identifier: 54:EE:76:08:EC:76:F0:87:5C:A2:89:26:F3:78:9C:23:2B:CC:D4:10
Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
Certificate issuer: /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
Manifest number: C3
Signing time: Fri 05 Dec 2025 04:03:56 +0000
Manifest this update: Fri 05 Dec 2025 04:03:55 +0000
Manifest next update: Fri 12 Dec 2025 04:03:55 +0000
Files and hashes: 1: J38SJEpQvGVO5WP-c5_k63GZZrY.crl (hash: S33s9uHeVr7oYS4kAoYziCWLaRxtg2w4kszVcIph/z8=)
2: 50B13360267F11F0A061882DC4F9AE02.roa (hash: wZklMFDoQMrom29zHe2kxQjdWsUnZaq+ROOmp4NlaH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Validity
Not Before: Dec 5 04:03:55 2025 GMT
Not After : Dec 12 04:03:55 2025 GMT
Subject: CN=693259ac-7be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:f3:6a:73:93:63:52:ac:ec:4a:d6:6e:11:
27:29:46:26:c2:b0:f7:1e:4d:18:2a:04:56:7a:f4:
2e:21:cc:0a:b5:18:21:d8:18:bd:f2:56:c8:af:f3:
d7:ec:fc:be:ad:b2:19:d1:b8:be:20:93:f3:e6:a9:
b0:7f:40:a1:95:3c:f6:59:dc:ee:a7:f7:76:a6:45:
77:13:10:c5:ea:47:68:86:23:1a:47:ee:19:6b:5e:
93:42:5f:74:3d:6e:8f:03:98:e8:41:0d:5a:4b:b7:
56:bb:f4:ff:93:bf:be:c8:f9:6b:56:e7:f6:3d:49:
70:22:c9:7a:96:c0:cf:6c:c6:68:ab:7e:e2:f9:a1:
6f:7c:7b:78:8d:9d:50:b1:a9:d0:97:87:a8:87:b2:
c7:ca:1e:fc:0f:ae:42:8a:c0:33:8b:66:f4:5b:46:
89:09:31:a2:4b:22:ea:cd:5c:a1:3b:2f:cc:78:fe:
81:20:89:56:3f:07:61:60:2e:98:dc:8f:0e:81:3b:
be:ef:e0:9f:4a:58:4e:55:61:b3:30:19:db:26:16:
88:05:1f:e5:be:8d:55:3d:00:35:bc:50:a8:fc:97:
6d:d9:90:f5:38:a3:ed:fa:70:98:17:2f:c0:e5:bd:
72:3f:b3:3b:07:0f:1e:34:86:b0:7a:42:2f:b5:4d:
c6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EE:76:08:EC:76:F0:87:5C:A2:89:26:F3:78:9C:23:2B:CC:D4:10
X509v3 Authority Key Identifier:
keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:bf:0a:7e:95:58:2b:e4:96:4d:1f:50:4d:37:fe:27:e4:38:
30:ee:3c:95:bf:33:bb:95:ec:d7:e9:77:a0:39:de:fc:47:7d:
18:2f:ed:15:ad:d8:a9:59:d8:1a:88:8e:1a:32:9d:5c:03:58:
28:42:92:13:06:4e:c0:09:a9:2a:1c:82:c1:3a:d5:cf:2d:c7:
46:cf:90:bf:95:d9:0e:bc:a6:97:8e:de:a5:0e:6f:c6:dd:f5:
7e:2e:75:c8:9f:5b:f8:de:fd:c6:9a:67:d4:11:78:81:60:22:
b7:e8:bf:cc:cf:11:86:16:ce:11:02:83:17:86:ce:0b:39:2a:
8f:74:78:3c:05:a8:04:fd:61:41:6c:0f:4c:7b:1c:52:74:3c:
73:81:07:c0:f2:1b:1b:47:14:3b:df:e2:76:70:b2:68:d6:fa:
17:05:72:db:cb:14:43:cf:ee:c6:1c:41:21:35:ec:6e:20:28:
ea:81:0b:f6:96:86:3a:5e:b9:b3:27:50:bb:27:67:cf:a3:d4:
2a:cf:0d:92:51:36:85:d1:8c:f2:35:80:a7:78:a8:96:00:4b:
2d:da:8d:78:df:73:41:97:28:01:15:c8:40:29:7c:be:8e:51:
e2:ed:e1:25:ea:1d:2b:21:53:82:ab:b4:a6:45:9d:ce:46:d3:
25:54:f7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:42 2025 by rpki-client