This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
File: jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft (raw, json)
Hash identifier: dw1P6xliFuJYJKNjHiFjzZFygr6NaIqGH+D+QH69e20=
Subject key identifier: 46:22:F5:CC:62:51:5E:22:C2:FE:4D:2F:1B:60:6A:DC:DF:E2:99:8B
Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C
Certificate issuer: /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C
Certificate serial: 0764
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
Manifest number: 0754
Signing time: Sat 20 Dec 2025 21:02:57 +0000
Manifest this update: Sat 20 Dec 2025 21:02:56 +0000
Manifest next update: Sat 27 Dec 2025 21:02:56 +0000
Files and hashes: 1: jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl (hash: A8YN22wkNegVk6ZFicW+EQMj6dedLJ4hBbV7vv5x+aU=)
2: 4153A4B6A55C11EE9D833C0EC4F9AE02.roa (hash: WXc8/KOS9TX2lE7Vv9xqmJ2kHbWej8tocOb7UBLG2e0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl
rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1892 (0x764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D190A, serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C
Validity
Not Before: Dec 20 21:02:56 2025 GMT
Not After : Dec 27 21:02:56 2025 GMT
Subject: CN=69470f01-992d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:da:8e:38:a2:f1:61:cd:d5:72:2e:f7:ea:
7a:cf:87:d5:97:8c:6a:ae:9b:53:ff:64:90:98:9b:
81:d4:c5:dc:73:37:a2:07:11:f8:e7:44:ae:e9:8c:
ab:74:15:b1:10:84:2d:10:df:51:cf:f1:bb:14:6d:
4a:50:f9:e4:c0:b8:54:94:81:6c:95:33:8a:46:bf:
06:3a:4e:92:a5:62:ec:61:0c:be:88:6a:66:53:52:
b3:ca:87:a6:78:26:e2:6f:0a:2f:11:b6:e7:e7:11:
6a:ad:0a:19:a8:3a:a9:a4:8a:67:39:31:41:79:5a:
f7:16:f7:da:33:0f:af:fb:d9:2e:f9:35:d6:a9:43:
b0:e6:e0:67:d3:30:57:d6:25:ff:54:20:5c:8c:3a:
e6:c5:a1:c8:7f:bb:18:5f:07:f5:2c:66:4a:37:25:
34:39:31:51:c4:ce:06:8c:d4:78:3f:b3:78:5e:e1:
a9:fe:09:0f:20:3f:bf:ce:67:f8:7a:76:b0:b2:cb:
de:e0:f0:76:96:da:d7:4e:fa:d2:26:e8:0a:b5:0f:
ec:59:91:47:69:26:fe:00:52:ff:f0:b7:aa:56:8e:
6d:b5:cd:a4:3c:46:8c:03:2a:bb:39:ca:89:76:4b:
10:00:59:0b:61:45:47:08:93:93:8f:ba:0f:53:55:
b6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:22:F5:CC:62:51:5E:22:C2:FE:4D:2F:1B:60:6A:DC:DF:E2:99:8B
X509v3 Authority Key Identifier:
keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ff:18:46:a7:d5:cc:ff:24:3e:5e:39:89:37:92:e6:88:36:
08:c9:fa:90:76:f6:fb:c8:44:09:8b:a0:3c:91:17:16:3e:e6:
36:56:67:5e:20:07:b2:f6:79:27:17:ec:ea:0f:51:60:7f:94:
f9:ec:68:21:48:40:0c:a6:59:d0:f2:82:24:d2:5d:3f:16:57:
17:04:cc:63:00:e7:71:bd:f2:f7:25:bf:10:9f:90:ff:f4:36:
91:7a:9d:54:9b:05:a1:a0:a2:51:57:e5:92:e1:ed:6e:86:4a:
f5:42:88:58:bd:9c:1d:f2:6e:1a:75:86:16:b6:8b:8c:a8:93:
1a:c6:eb:44:22:ee:10:1c:3b:eb:32:10:e5:cf:f4:bb:91:20:
d1:9d:fd:75:63:0f:ec:32:e7:42:3f:f2:0e:e3:7d:69:27:fc:
db:2b:65:a2:cc:e1:9c:ec:dd:e6:9b:de:0d:5a:0a:90:b7:6a:
68:b2:fd:6e:e5:eb:51:b0:d1:1b:f1:a0:48:b2:08:f0:0b:13:
d2:6e:5f:c9:5e:07:a3:54:4d:72:01:9e:d7:b0:6d:71:71:4e:
e9:cb:a3:ee:2f:64:be:3a:8f:ad:ec:4a:81:67:5d:06:81:6c:
6c:ef:e1:56:c9:88:ac:98:aa:51:25:3f:48:a8:4c:e0:0c:a8:
bc:22:bb:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE5MEExMTAvBgNVBAUTKDhFNzBEM0E1MjQwRTMzODhBM0YxQzBEOEY3MkQ4RjhB
RTE1OUM0NkMwHhcNMjUxMjIwMjEwMjU2WhcNMjUxMjI3MjEwMjU2WjAYMRYwFAYD
VQQDDA02OTQ3MGYwMS05OTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt5Lajjii8WHN1XIu9+p6z4fVl4xqrptT/2SQmJuB1MXcczeiBxH450Su6Yyr
dBWxEIQtEN9Rz/G7FG1KUPnkwLhUlIFslTOKRr8GOk6SpWLsYQy+iGpmU1Kzyoem
eCbibwovEbbn5xFqrQoZqDqppIpnOTFBeVr3FvfaMw+v+9ku+TXWqUOw5uBn0zBX
1iX/VCBcjDrmxaHIf7sYXwf1LGZKNyU0OTFRxM4GjNR4P7N4XuGp/gkPID+/zmf4
enawssve4PB2ltrXTvrSJugKtQ/sWZFHaSb+AFL/8LeqVo5ttc2kPEaMAyq7OcqJ
dksQAFkLYUVHCJOTj7oPU1W2BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYi9cxi
UV4iwv5NLxtgatzf4pmLMB8GA1UdIwQYMBaAFI5w06UkDjOIo/HA2Pctj4rhWcRs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTkwQS8wNzFDNERFNDUw
MEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000aWo4Y0RZOXkyUGl1Rlp4
R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2puRFRwU1FPTTRpajhjRFk5eTJQaXVGWnhHdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTkwQS8wNzFDNERFNDUwMEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000
aWo4Y0RZOXkyUGl1Rlp4R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCL/xhGp9XM/yQ+XjmJN5LmiDYIyfqQdvb7yEQJi6A8kRcWPuY2Vmde
IAey9nknF+zqD1Fgf5T57GghSEAMplnQ8oIk0l0/FlcXBMxjAOdxvfL3Jb8Qn5D/
9DaRep1UmwWhoKJRV+WS4e1uhkr1QohYvZwd8m4adYYWtouMqJMaxutEIu4QHDvr
MhDlz/S7kSDRnf11Yw/sMudCP/IO431pJ/zbK2WizOGc7N3mm94NWgqQt2posv1u
5etRsNEb8aBIsgjwCxPSbl/JXgejVE1yAZ7XsG1xcU7py6PuL2S+Oo+t7EqBZ10G
gWxs7+FWyYismKpRJT9IqEzgDKi8Irt9
-----END CERTIFICATE-----
Generated at Mon Dec 22 00:25:53 2025 by rpki-client