This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
File: jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft (raw, json)
Hash identifier: /pXSq0PZ+OSs/rHK2RV9SGqHuXo7uz8zyIiqZ4YnNDk=
Subject key identifier: 60:CA:B0:55:0B:21:DC:90:8E:36:F0:BA:A1:D9:6A:61:CE:FB:C3:A9
Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C
Certificate issuer: /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C
Certificate serial: 075C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
Manifest number: 074C
Signing time: Thu 04 Dec 2025 20:38:31 +0000
Manifest this update: Thu 04 Dec 2025 20:38:31 +0000
Manifest next update: Thu 11 Dec 2025 20:38:31 +0000
Files and hashes: 1: jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl (hash: HtfcJVDpU8pnE5cgs9+94fZfRO9Orw3nKSQ6cKg2KFM=)
2: 4153A4B6A55C11EE9D833C0EC4F9AE02.roa (hash: WXc8/KOS9TX2lE7Vv9xqmJ2kHbWej8tocOb7UBLG2e0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl
rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:38:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1884 (0x75c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D190A, serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C
Validity
Not Before: Dec 4 20:38:31 2025 GMT
Not After : Dec 11 20:38:31 2025 GMT
Subject: CN=6931f147-69dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:b2:1c:63:48:53:95:e7:92:68:68:61:30:
71:09:6d:32:0f:18:75:8c:27:97:98:0e:97:fd:25:
e6:68:6e:d7:1a:1e:df:05:5f:1d:34:be:2d:40:0f:
03:87:74:82:7c:7a:c5:3c:27:b2:02:e7:44:2c:da:
06:25:67:36:bd:de:83:ac:e4:5e:85:6c:95:ec:09:
ac:78:7b:8e:07:31:ed:51:cb:22:15:e1:27:c1:82:
94:fe:bc:74:03:73:7e:db:2c:a5:ee:6f:3d:e4:1a:
06:e2:19:c6:41:c3:cf:cd:8b:0c:3f:6f:52:cf:c2:
e4:73:96:5b:2d:fb:a7:40:a3:44:9a:fb:7a:30:22:
bf:ff:18:24:7c:6c:09:f1:2c:e5:19:cb:7c:cb:cb:
a7:88:db:f6:15:48:06:59:c8:c4:28:5f:d5:7a:2c:
fb:6b:bd:2c:05:96:7a:c9:cf:27:1c:d0:fc:90:6e:
de:00:15:cd:c2:84:6c:b2:d6:97:73:c3:6a:95:1a:
d4:9f:4d:0f:4a:7a:cf:59:8a:36:a1:e1:75:5c:01:
a5:1a:b6:d6:f4:84:76:f3:56:f2:70:a5:fa:3f:76:
1c:0f:65:0d:3b:41:b3:86:e4:34:9e:91:2d:62:67:
d7:64:e0:b1:4c:a2:70:fa:1a:7d:af:93:c2:e2:91:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CA:B0:55:0B:21:DC:90:8E:36:F0:BA:A1:D9:6A:61:CE:FB:C3:A9
X509v3 Authority Key Identifier:
keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:da:ac:46:88:50:68:2d:a4:9c:05:5a:7f:2f:4b:f6:a7:20:
44:5f:0f:c4:97:2f:0b:7b:10:c9:5f:16:e1:a3:91:14:fc:27:
57:b4:b0:ea:6a:64:1c:3f:46:e0:61:0e:1d:a2:23:b6:d9:05:
92:c4:31:d9:8b:a2:6a:2b:c8:a0:36:bf:be:ff:92:1a:94:3a:
20:d7:b5:3d:3b:36:08:98:70:0c:5a:a8:05:74:28:4b:8a:40:
81:37:a9:09:d5:01:0c:28:a9:c4:1e:e7:de:7c:77:35:ab:9d:
ac:fe:15:f3:c3:88:9c:95:da:b9:6d:48:f7:23:86:48:42:06:
3f:52:28:d6:5a:f3:e4:71:ff:b1:c1:f3:f1:32:3a:47:dd:56:
22:b4:f5:7c:4f:2f:68:e8:02:83:b5:8f:b2:f6:76:19:76:4d:
0c:66:80:c4:43:d3:e3:48:c1:5e:23:7a:db:df:ca:e1:fc:1c:
7a:83:50:30:6f:df:55:fe:2f:37:c2:1f:d3:ce:69:f8:5c:c9:
7a:0c:56:79:6a:84:b7:fd:e8:18:b4:c6:d5:31:7c:8a:64:4c:
e9:dc:ff:f3:6c:a4:0c:41:54:51:b2:2f:8e:73:1b:d0:dc:68:
98:f0:6b:a4:bc:fa:9b:45:4b:d2:e4:e1:ae:ed:9b:e4:93:d8:
09:a1:66:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:41 2025 by rpki-client