This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
File: J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft (raw, json)
Hash identifier: +zA23WrDBT8u/EB9Bpl8bOAXj2tr4HRDkNBoWew2+KY=
Subject key identifier: A6:B1:F6:08:0C:8C:A1:67:BB:85:F6:A5:F3:54:CB:CA:43:3E:50:9E
Authority key identifier: 27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B
Certificate issuer: /CN=A91BBCAF/serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
Certificate serial: 019A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
Manifest number: 0195
Signing time: Fri 05 Dec 2025 01:42:15 +0000
Manifest this update: Fri 05 Dec 2025 01:42:14 +0000
Manifest next update: Fri 12 Dec 2025 01:42:14 +0000
Files and hashes: 1: J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl (hash: u4IOmf5t6Z/TujgJlQBb1U5deDcRfXQEgZkqA9VcS/Q=)
2: D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa (hash: A3UoC+eD4LWvV0sQ3hMRTRUEpIyxxhW+ZYQuaZu5Frk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl
rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBCAF, serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
Validity
Not Before: Dec 5 01:42:14 2025 GMT
Not After : Dec 12 01:42:14 2025 GMT
Subject: CN=69323877-b5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:a0:f5:a8:9b:e1:fc:df:95:11:00:3f:01:
04:03:34:ee:cd:95:bf:c4:e3:fb:a2:51:a5:c9:0f:
99:4f:77:10:6f:50:aa:dc:94:9a:d6:57:02:e7:c1:
f2:ff:3a:d1:3d:1b:ef:81:2e:03:9d:0e:c2:1b:eb:
09:70:04:a1:0e:e9:37:57:6e:45:fe:85:cc:57:98:
26:d0:1f:6c:56:54:96:69:c0:9d:97:ad:43:08:b8:
fe:ff:6f:91:8e:86:72:1f:9d:d4:b7:92:d6:7d:1a:
7a:92:a0:75:9e:55:a0:d4:dc:6d:60:ba:0e:90:6c:
d9:5f:3b:5d:1b:74:2e:ea:6b:99:da:60:ae:07:65:
a1:38:93:0c:28:a3:45:46:e7:83:dc:28:1b:5a:bd:
67:d4:1c:e7:3f:10:3f:20:9a:5a:c3:85:02:84:27:
ff:d4:68:42:cd:1d:f3:32:ef:79:0e:b0:4e:27:00:
5c:48:05:e2:48:dd:8d:f5:88:76:0b:12:af:7f:87:
87:35:96:a7:15:b5:d6:c5:01:6f:04:9f:23:43:42:
d2:ff:e1:a8:03:f1:ca:45:25:9f:f3:69:dd:9c:43:
34:41:dc:11:01:a6:b1:e6:4d:29:a8:0f:fb:91:2e:
ad:c6:dd:42:9d:47:f9:c1:dd:af:ff:32:af:da:10:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B1:F6:08:0C:8C:A1:67:BB:85:F6:A5:F3:54:CB:CA:43:3E:50:9E
X509v3 Authority Key Identifier:
keyid:27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e7:06:6e:02:0c:f4:5a:be:5d:51:49:e7:85:01:9b:7e:15:
8b:94:ae:21:2f:fa:95:46:9f:6a:15:c3:f9:2b:90:93:a2:8b:
bb:4c:a3:90:09:01:b0:d2:b1:48:da:b3:00:9c:02:a2:91:34:
d0:66:de:ea:0d:02:8f:46:75:d7:16:7d:f2:21:58:04:28:89:
bd:cf:eb:4f:32:ad:31:1e:76:9e:25:1e:45:d1:b7:fc:f4:dd:
ca:1d:38:4b:42:42:f1:74:39:26:bb:90:01:ae:2c:d4:af:bb:
af:9e:81:c1:c5:de:87:03:6c:ad:fa:f7:2c:85:4f:ac:3a:65:
de:7b:fc:e7:ce:cd:13:5f:c6:29:7f:4e:89:0d:aa:a5:3e:5f:
f4:1d:23:52:36:89:f2:a5:db:df:c4:3b:a7:0e:ee:5e:41:79:
7b:cd:ba:d1:f8:2b:14:fe:1a:20:d3:a5:f7:34:7b:ab:4c:21:
89:11:28:c9:d5:5e:fb:be:ca:a3:b0:db:2f:18:a3:6b:df:8f:
fb:bc:f2:ee:9a:7d:63:20:a1:91:e6:32:31:b4:52:08:d5:1b:
a0:8b:38:22:17:fb:60:36:b1:dc:5e:ae:31:76:b3:0b:eb:eb:
cf:c2:04:25:de:9d:2b:1d:45:32:ae:65:4c:12:41:2e:45:f6:
65:d1:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:07:19 2025 by rpki-client