This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
File: JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft (raw, json)
Hash identifier: b8h/4fsIIUN4/l8cnzB0st5pl6uPbb0WiNxVCZOw5qc=
Subject key identifier: 34:48:26:2F:5E:E3:3C:45:CE:8C:0E:8B:4E:AA:33:A1:E2:38:37:BE
Authority key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
Certificate issuer: /CN=A91B8A86/serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
Manifest number: 72
Signing time: Sun 25 Jan 2026 05:58:13 +0000
Manifest this update: Sun 25 Jan 2026 05:58:12 +0000
Manifest next update: Sun 01 Feb 2026 05:58:12 +0000
Files and hashes: 1: JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl (hash: rCS8lHKplQ51a6L9kNjrtPtnNuZZwHL0JkvLMvFfICA=)
2: E879D5BC4B1911F08F30867AC4F9AE02.roa (hash: OZHK+au5UwVImKpl7QVZcEGwIUNhlUMC18l25bqrmZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Validity
Not Before: Jan 25 05:58:12 2026 GMT
Not After : Feb 1 05:58:12 2026 GMT
Subject: CN=6975b0f5-bc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:21:d2:bb:94:6b:6b:90:90:74:2a:f5:85:ba:
e0:a7:65:12:f5:17:63:b5:a9:37:3d:3a:d0:40:27:
45:d8:a4:22:fb:a0:e2:2f:7f:51:87:e1:ae:ed:fc:
fc:41:e8:21:7d:55:1f:7d:4a:f8:fd:59:5e:43:aa:
96:5b:38:01:9c:12:df:5f:05:c9:8a:b0:bd:97:ef:
48:49:e2:36:4a:28:b1:0c:85:ce:6b:ad:69:7d:3d:
99:22:5a:2a:a4:13:e0:d0:53:c1:43:bb:d4:a8:b9:
1a:9f:f5:33:07:01:38:f9:7e:e1:0b:aa:7d:20:28:
34:a1:64:41:e6:9e:0c:d7:4b:23:da:53:54:c5:05:
bb:b1:c2:6c:df:74:1e:d3:49:f2:10:a8:2c:be:dc:
be:b3:ce:b5:b0:90:1e:16:ae:d9:e5:26:81:aa:06:
e3:20:8c:d9:13:13:02:7d:34:62:7a:5d:39:6a:c1:
81:37:40:f8:4b:a6:60:30:18:70:f4:4d:91:47:93:
d0:32:b1:84:57:7d:e3:e2:da:bd:e8:2a:ec:ca:80:
1d:d8:63:1d:77:41:78:81:03:6d:2c:5a:25:49:ce:
b3:da:fc:74:c9:99:01:65:33:30:2d:31:79:1f:a1:
32:ac:c3:4b:6a:bb:3b:40:56:98:f5:e2:36:e7:2e:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:48:26:2F:5E:E3:3C:45:CE:8C:0E:8B:4E:AA:33:A1:E2:38:37:BE
X509v3 Authority Key Identifier:
keyid:24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:73:8b:af:c4:95:a6:8c:87:5b:89:7d:b0:95:9f:17:90:1d:
23:94:9d:1f:65:8b:b7:2c:2d:b7:07:a1:89:2c:d5:be:71:7f:
ad:e5:f2:fa:f3:db:7d:76:13:6f:b9:e4:13:14:a4:a4:49:c7:
aa:36:b3:82:75:a6:a4:d8:a4:81:d5:2c:3d:d1:2b:8c:d0:34:
c6:e1:8a:2d:e7:9d:76:17:b9:ca:1a:ec:0f:12:02:d6:f6:fc:
2b:95:24:cc:ff:4b:52:80:cc:70:c7:b6:e2:cb:8b:db:a0:f5:
55:35:7b:64:9d:fc:6d:d2:73:0f:ee:84:f1:7c:d1:3f:21:0d:
b5:4c:0b:0c:7d:ae:da:da:51:c1:55:69:09:6d:41:30:de:4d:
46:ce:f5:73:ce:df:eb:5a:77:0a:9d:3c:a7:c5:d1:32:5e:7b:
68:ee:9b:da:32:09:47:10:7b:3d:31:a6:9e:26:a3:88:0b:91:
86:ba:b3:b9:30:ac:5b:e9:7a:3b:e7:99:3a:ef:00:8e:7d:8b:
a4:89:57:e9:df:d2:e5:e4:1e:69:50:66:02:7a:bf:f7:65:ca:
95:72:ce:db:0d:bf:a9:25:02:12:64:fe:7c:57:27:04:79:a8:
bc:c1:05:2b:85:19:a7:ba:ce:a3:5f:b4:3e:9b:19:b6:a2:7c:
eb:5b:75:84
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
OEE4NjExMC8GA1UEBRMoMjQ1RkY0NUMyODY1MkJGNzE1NjU4NUEzRkQ5QTc5NzRF
NTM3NUQwMzAeFw0yNjAxMjUwNTU4MTJaFw0yNjAyMDEwNTU4MTJaMBgxFjAUBgNV
BAMMDTY5NzViMGY1LWJjMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiIdK7lGtrkJB0KvWFuuCnZRL1F2O1qTc9OtBAJ0XYpCL7oOIvf1GH4a7t/PxB
6CF9VR99Svj9WV5DqpZbOAGcEt9fBcmKsL2X70hJ4jZKKLEMhc5rrWl9PZkiWiqk
E+DQU8FDu9SouRqf9TMHATj5fuELqn0gKDShZEHmngzXSyPaU1TFBbuxwmzfdB7T
SfIQqCy+3L6zzrWwkB4WrtnlJoGqBuMgjNkTEwJ9NGJ6XTlqwYE3QPhLpmAwGHD0
TZFHk9AysYRXfePi2r3oKuzKgB3YYx13QXiBA20sWiVJzrPa/HTJmQFlMzAtMXkf
oTKsw0tquztAVpj14jbnLhKPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNEgmL17j
PEXOjA6LTqozoeI4N74wHwYDVR0jBBgwFoAUJF/0XChlK/cVZYWj/Zp5dOU3XQMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QTg2L0I2M0YzMUFFNEIx
NTExRjBBQzNBQTI0OEM0RjlBRTAyL0pGXzBYQ2hsS19jVlpZV2pfWnA1ZE9VM1hR
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSkZfMFhDaGxLX2NWWllXal9acDVkT1UzWFFNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4
QTg2L0I2M0YzMUFFNEIxNTExRjBBQzNBQTI0OEM0RjlBRTAyL0pGXzBYQ2hsS19j
VlpZV2pfWnA1ZE9VM1hRTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACBzi6/ElaaMh1uJfbCVnxeQHSOUnR9li7csLbcHoYks1b5xf63l8vrz
2312E2+55BMUpKRJx6o2s4J1pqTYpIHVLD3RK4zQNMbhii3nnXYXucoa7A8SAtb2
/CuVJMz/S1KAzHDHtuLLi9ug9VU1e2Sd/G3Scw/uhPF80T8hDbVMCwx9rtraUcFV
aQltQTDeTUbO9XPO3+tadwqdPKfF0TJee2jum9oyCUcQez0xpp4mo4gLkYa6s7kw
rFvpejvnmTrvAI59i6SJV+nf0uXkHmlQZgJ6v/dlypVyztsNv6klAhJk/nxXJwR5
qLzBBSuFGae6zqNftD6bGbaifOtbdYQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:05:50 2026 by rpki-client