This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
File: JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft (raw, json)
Hash identifier: Ta0SisQPmvY/OYAPa0t7per57JF5hfwc1htJcrF4Poc=
Subject key identifier: 7C:30:01:BA:04:67:BF:8F:9F:DE:41:15:B6:03:D9:E7:6F:C5:A9:9C
Authority key identifier: 26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8
Certificate issuer: /CN=A91DD5EC/serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
Certificate serial: 01E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
Manifest number: 01DB
Signing time: Fri 05 Dec 2025 01:02:39 +0000
Manifest this update: Fri 05 Dec 2025 01:02:38 +0000
Manifest next update: Fri 12 Dec 2025 01:02:38 +0000
Files and hashes: 1: JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl (hash: nBXjdcCB8Euicp3z1H3ccpOPfGIXHYAKgv8Lf5nPk9c=)
2: EB75D8C4FDE111ED848B004CC4F9AE02.roa (hash: YpFErwZo1axpVyXEr0hM4pYq0y+I/yl/KVqfMICnISA=)
3: 2DDB3932FF4711EDA9459E3DC4F9AE02.roa (hash: znGYWacCwGwaRyaos7K6AvZznHx5iYA9Iw7SZxronyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl
rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483 (0x1e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5EC, serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
Validity
Not Before: Dec 5 01:02:38 2025 GMT
Not After : Dec 12 01:02:38 2025 GMT
Subject: CN=69322f2f-a18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:69:b0:9c:d6:e7:b5:a0:3e:98:21:e4:08:
ef:c2:a9:c8:38:9a:4d:61:27:c1:66:f2:82:0e:98:
e4:fc:da:9e:4c:7a:98:b0:67:2d:21:dd:62:e1:36:
74:fb:14:e9:4a:cc:7b:96:e2:ca:80:70:32:8d:a1:
d5:8e:44:e1:69:a5:5c:f2:9b:e2:f0:d9:73:92:3b:
94:65:af:c9:40:4a:73:90:b7:07:b4:12:8f:cd:26:
2e:02:33:f2:cf:ae:43:2c:25:44:fd:f6:46:31:cf:
e4:27:39:56:45:ba:8f:f8:97:df:69:10:55:f8:be:
25:1c:38:dc:6c:a2:dd:83:79:07:ef:79:f2:90:22:
a7:67:95:e2:2f:88:5e:3d:21:db:5f:3a:62:a1:aa:
cd:ea:78:57:d0:1c:ca:1f:45:6c:c4:33:a7:f1:92:
d6:13:f0:1d:5b:71:78:47:ff:73:01:9b:76:71:34:
d1:54:5c:2c:00:40:99:89:35:bc:a9:be:da:07:6e:
c7:83:8c:91:2c:69:67:46:72:3f:0b:1a:24:e8:2b:
e4:51:10:8b:75:1d:8c:41:f5:30:32:c1:bd:40:b1:
f9:df:64:d3:99:62:db:a8:c9:9d:79:9a:03:10:e2:
ea:48:54:c3:fe:bd:08:cd:f9:b4:46:d0:54:51:34:
25:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:30:01:BA:04:67:BF:8F:9F:DE:41:15:B6:03:D9:E7:6F:C5:A9:9C
X509v3 Authority Key Identifier:
keyid:26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1b:01:92:e4:2b:03:1c:c5:36:a4:73:ea:f5:03:6c:65:c7:
f7:0d:0a:67:36:a7:e1:19:c8:7c:eb:7f:a7:e5:9f:23:33:4f:
67:72:c7:f5:b9:6b:56:05:03:2f:c6:70:6e:a3:1a:ce:53:7c:
ae:03:35:75:06:f1:57:5a:21:e0:46:f0:94:7a:34:59:7c:99:
45:35:7d:05:95:93:a7:c4:d5:6f:6d:ef:9d:5b:84:9a:a6:53:
2b:24:54:b9:64:eb:f2:c1:5d:33:72:ab:ae:57:04:e7:20:68:
ee:f6:b1:41:e4:6f:06:a2:fd:f1:1c:c7:0d:0c:21:64:7d:30:
7f:cd:a3:be:90:7d:e1:3f:cf:be:af:67:50:c9:93:1b:0d:b3:
f1:eb:e8:07:bf:28:bd:93:e8:01:4e:6b:b1:96:1e:16:2b:e1:
19:0d:92:f4:6c:9a:56:9f:eb:3b:17:23:b9:39:a1:6f:36:b7:
04:60:b8:ec:60:df:d8:08:7c:f5:0c:73:57:04:7b:31:b8:ab:
c7:00:56:9a:a5:8d:58:88:94:0a:d0:32:2b:ed:16:0f:0d:fb:
a4:bf:e6:b0:12:da:8f:24:13:8f:72:4f:c2:cb:96:86:a8:69:
22:15:b9:69:f5:20:81:3d:c7:e2:7a:2f:a2:af:1f:3a:0e:ec:
f3:d5:e5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:52:52 2025 by rpki-client