This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File: mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier: TH91o5oUDUF7mgX17sk0tU9TB+OAJMpJrlZkcvxN9bY=
Subject key identifier: FB:5D:24:F7:14:C1:CF:38:9A:CD:4E:23:09:3E:4A:5F:69:76:83:A7
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0AF0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number: 0ABF
Signing time: Sat 06 Dec 2025 18:46:17 +0000
Manifest this update: Sat 06 Dec 2025 18:46:17 +0000
Manifest next update: Sat 13 Dec 2025 18:46:17 +0000
Files and hashes: 1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: X0PU3iCQ+kaOTlMSCZEO67YjTy8CWMWblpQyW7riANc=)
2: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: b0jHLruEtRzyhGWKnuBBIEAeyGPvSkQqNURAHY7x5fE=)
3: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: gbSrDMCrPI8A3+3d0sfCicNLcWdleMd0w7YOfrmP/TI=)
4: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: Zd7NoechSfahxSRsj2v3JsOwSTFCMebH21LUprHvV20=)
5: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: SFbvxZ2XG8g69o3YZw4mocDKsXgtaeblyR+TN86Ur60=)
6: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: y31kJqG82XvEmO9/QRkcWiRFKFh5zoKjaSnnJfP7MyE=)
7: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: GMZ//QDkBiynojhpbrl7EytSa00iqEIB/AB0/Z7GlXI=)
8: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: mvVRFtNTY10bq4ZO+LKEMEdrzCb/tsvmp6na5wzt45Q=)
9: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: yd/SOlvp9mrxaUSwn8FcZ74+WiXfNeapwvKAhRJ4Sx8=)
10: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: 4HveBCpHvV1swaBGF9e6bY77B+cKbG0JrVqTZsmASrs=)
11: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 2GC7KAVMhvV+YXc4GAZ/vzQonWiNlY6zwWOHBpULon8=)
12: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: Mm2/BkteGaDDz+jKCOQ2/1mPEBu0lMlfQI/ZFwneEPA=)
13: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: MEzvVgdoK3WuLUFmv9SwilQrCS7SZE01USmJAX6/Oss=)
14: 8B8856F4C9DC11EE8B24C55EC4F9AE02.roa (hash: 9pxxuNY/fuCdOuU7dA3COe6L1OGNmS3muKknh0X0O9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:46:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2800 (0xaf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Validity
Not Before: Dec 6 18:46:17 2025 GMT
Not After : Dec 13 18:46:17 2025 GMT
Subject: CN=693479f9-738c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:79:88:5b:02:83:dd:60:09:0d:3d:dc:cd:
31:c7:bd:33:a3:d5:ba:1a:b3:01:2e:65:c6:21:4c:
39:18:e5:d8:68:82:65:2a:05:0f:62:7b:ee:6b:8f:
d2:81:9f:a8:01:2b:00:b2:ea:5c:a1:cf:30:95:50:
6e:b2:fc:04:0f:14:0e:84:b6:39:61:14:e0:5a:e0:
27:9e:c1:c4:bc:7a:e6:d5:02:14:18:6f:94:82:29:
9f:94:f7:af:f2:81:75:88:86:c6:96:af:c4:8e:28:
a2:11:24:ae:9a:ee:ac:50:24:f5:6c:98:b4:72:e5:
64:23:bf:de:cb:83:2c:a7:e2:bd:07:cc:95:0c:e1:
af:33:bc:3c:33:8f:00:d8:dc:29:e2:0a:31:64:1e:
30:a6:5a:59:46:f5:5c:7a:80:40:e2:4a:1a:30:66:
49:f6:56:f9:55:de:48:d4:ec:ad:2f:ce:c2:27:de:
8e:f0:ad:6d:83:3e:1e:db:d8:11:43:40:42:2e:74:
bc:c5:19:b4:a4:de:bd:e6:44:d1:34:d8:7e:cb:6d:
a6:59:25:40:c3:1d:2c:38:0b:6f:d9:df:d7:8f:64:
31:3b:c2:b1:5c:f9:d2:40:2b:9d:cc:b3:28:00:ed:
0d:58:7a:64:f3:ec:05:f7:e9:ef:ae:68:11:24:3b:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5D:24:F7:14:C1:CF:38:9A:CD:4E:23:09:3E:4A:5F:69:76:83:A7
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ad:c0:c1:14:a1:cd:6f:16:72:0e:bf:88:6b:72:4c:64:7a:
92:72:9e:49:5f:4f:e9:6e:03:a9:82:68:3a:19:94:0d:d5:71:
36:06:ec:90:9a:3c:1f:89:02:27:56:52:bb:73:b8:78:6b:d2:
d4:1d:78:45:03:6b:c9:74:4b:1a:3a:79:4d:f9:1e:24:4b:ed:
bc:db:85:f3:f0:97:ca:f5:19:58:6d:38:26:73:8e:1d:4e:6f:
87:dd:51:35:8c:c0:92:0e:5a:23:61:ee:f5:9c:6d:c0:69:ac:
5e:13:f1:8a:5a:5d:1e:b4:b5:72:39:a2:d2:0c:06:7b:14:26:
5b:c9:68:89:ef:10:ea:61:64:55:22:92:12:f7:90:a9:4a:4e:
70:63:c2:d6:ff:12:70:38:12:59:72:b2:88:7b:6d:af:1d:69:
08:36:80:0a:85:31:8c:6c:86:0e:e8:9f:2b:e7:23:a5:fd:4d:
78:3e:21:f9:33:17:cd:c5:74:1d:2d:fb:03:9e:d5:38:f5:55:
e3:3e:2a:41:fe:2d:c8:08:7e:cd:dc:90:36:3d:50:e9:bf:e3:
d9:15:80:1f:5e:78:b6:ab:ae:fb:e7:81:e3:2a:07:22:7e:ee:
6a:e2:61:03:eb:23:5b:dd:3f:34:92:2c:cf:e7:7a:75:8a:46:
bf:7c:42:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:55:27 2025 by rpki-client