This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
File: jH1rofFVCazzExWCWX1crZ5Bm08.mft (raw, json)
Hash identifier: ZpemDVT+HK1nTyNHBj5ayaumRELcnWVYfunFLWyroqU=
Subject key identifier: 09:EB:B5:A7:D4:B5:26:49:65:FF:8A:4C:E6:51:A3:59:75:37:6F:A7
Authority key identifier: 8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F
Certificate issuer: /CN=A91E46B1/serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
Certificate serial: 14E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
Manifest number: 14DF
Signing time: Sat 06 Dec 2025 16:24:39 +0000
Manifest this update: Sat 06 Dec 2025 16:24:38 +0000
Manifest next update: Sat 13 Dec 2025 16:24:38 +0000
Files and hashes: 1: jH1rofFVCazzExWCWX1crZ5Bm08.crl (hash: i2k0ZE/NGVs1Yp7ZxZiIrsMa+SaPzedkkuMOEFC1yKU=)
2: 39D4D290CB8311E88E74AD83C4F9AE02.roa (hash: mRh05D/XShHwy0gj5RK1ka6rqzpFsAG0dDwaNHbPs7E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl
rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5353 (0x14e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E46B1, serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
Validity
Not Before: Dec 6 16:24:38 2025 GMT
Not After : Dec 13 16:24:38 2025 GMT
Subject: CN=693458c6-a8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:21:36:94:a1:ad:ef:2c:e5:e6:83:f4:6a:51:
c0:42:94:7d:31:9d:eb:0a:02:4c:13:aa:80:77:ff:
9b:51:fb:cf:43:6a:54:a2:c7:76:e0:63:8d:8f:be:
26:c2:f4:fa:b6:80:9c:58:86:1d:55:ae:8a:a9:bb:
f1:d2:fa:a2:85:78:c6:f0:47:04:b4:68:b6:18:d5:
6e:d9:c0:57:c1:f5:29:6d:d2:10:20:56:ac:4e:e2:
a2:c9:21:b6:b8:79:b7:75:33:c6:81:0b:05:fa:9c:
3e:55:20:99:6b:e9:1a:58:98:cc:92:27:4c:a8:b3:
c1:8f:3d:00:5a:63:97:f3:80:8d:0b:34:6c:4e:31:
71:97:35:94:a9:72:4b:b9:64:af:ce:b2:df:e0:1e:
4a:c3:5d:80:c4:2f:a9:d3:05:36:e5:7c:24:34:37:
79:0f:46:85:b2:05:fc:95:75:10:a7:dc:8c:d8:56:
35:02:d2:ae:0c:7e:c3:a5:08:4e:2f:f1:cd:d6:3d:
88:45:c7:04:9f:f4:27:88:00:06:a1:1b:66:72:a2:
c9:61:97:be:9a:4d:fe:59:6d:82:a9:88:c8:fe:fd:
8b:27:66:a5:96:d8:91:a6:31:e6:6c:d8:86:53:14:
b4:71:16:9a:8b:53:36:fc:ae:26:13:64:d7:7c:1f:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EB:B5:A7:D4:B5:26:49:65:FF:8A:4C:E6:51:A3:59:75:37:6F:A7
X509v3 Authority Key Identifier:
keyid:8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:b4:b3:6c:4a:93:1a:56:a6:fa:c8:17:ad:47:59:b6:9e:7e:
ed:85:02:84:82:d5:1c:80:b4:1b:b1:c7:c8:86:5b:45:c6:ee:
8d:db:71:6d:7a:b9:cb:1f:5c:12:cb:a9:cd:10:b5:5d:25:20:
98:cc:00:50:f3:7c:b1:cc:5a:fb:9d:15:09:03:71:8c:bc:56:
6e:ef:86:9b:14:9d:05:73:7e:c5:7f:cd:09:0f:f0:6e:d9:0e:
65:30:71:b9:eb:61:e5:98:db:7f:22:48:f4:62:71:08:25:5c:
fd:1c:b4:b0:1e:ed:9e:cc:da:15:0d:91:f0:74:da:c4:7c:7d:
16:fa:55:2b:b7:0d:27:b5:f2:99:6d:85:52:88:5f:dd:39:54:
1a:b2:8c:82:20:fe:a3:fa:03:34:44:ee:43:41:87:3f:80:f9:
93:da:4a:9b:01:0a:3b:50:42:fc:3e:cd:8b:66:bf:03:81:bc:
38:a4:65:a9:2d:f7:4f:b7:a5:67:58:41:ed:0c:9f:b9:85:52:
e2:09:0f:a0:f5:cf:bb:cf:78:d3:a7:8e:8c:a1:e5:83:49:67:
8c:c6:6c:a7:bc:9a:d4:3b:ce:2c:d4:21:f6:0a:02:08:ca:20:
60:f6:ec:0d:55:03:d5:3c:07:a9:2f:a3:4d:88:33:b6:1e:46:
04:b6:ca:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQ2QjExMTAvBgNVBAUTKDhDN0Q2QkExRjE1NTA5QUNGMzEzMTU4MjU5N0Q1Q0FE
OUU0MTlCNEYwHhcNMjUxMjA2MTYyNDM4WhcNMjUxMjEzMTYyNDM4WjAYMRYwFAYD
VQQDEw02OTM0NThjNi1hOGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2yE2lKGt7yzl5oP0alHAQpR9MZ3rCgJME6qAd/+bUfvPQ2pUosd24GONj74m
wvT6toCcWIYdVa6Kqbvx0vqihXjG8EcEtGi2GNVu2cBXwfUpbdIQIFasTuKiySG2
uHm3dTPGgQsF+pw+VSCZa+kaWJjMkidMqLPBjz0AWmOX84CNCzRsTjFxlzWUqXJL
uWSvzrLf4B5Kw12AxC+p0wU25XwkNDd5D0aFsgX8lXUQp9yM2FY1AtKuDH7DpQhO
L/HN1j2IRccEn/QniAAGoRtmcqLJYZe+mk3+WW2CqYjI/v2LJ2alltiRpjHmbNiG
UxS0cRaai1M2/K4mE2TXfB+xywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnrtafU
tSZJZf+KTOZRo1l1N2+nMB8GA1UdIwQYMBaAFIx9a6HxVQms8xMVgll9XK2eQZtP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GOTBEOTQ3NjY3
OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9qSDFyb2ZGVkNhenpFeFdDV1gxY3JaNUJt
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pIMXJvZkZWQ2F6ekV4V0NXWDFjclo1Qm0wOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDZCMS9GOTBEOTQ3NjY3OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9qSDFyb2ZGVkNh
enpFeFdDV1gxY3JaNUJtMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDYtLNsSpMaVqb6yBetR1m2nn7thQKEgtUcgLQbscfIhltFxu6N23Ft
ernLH1wSy6nNELVdJSCYzABQ83yxzFr7nRUJA3GMvFZu74abFJ0Fc37Ff80JD/Bu
2Q5lMHG562HlmNt/Ikj0YnEIJVz9HLSwHu2ezNoVDZHwdNrEfH0W+lUrtw0ntfKZ
bYVSiF/dOVQasoyCIP6j+gM0RO5DQYc/gPmT2kqbAQo7UEL8Ps2LZr8Dgbw4pGWp
LfdPt6VnWEHtDJ+5hVLiCQ+g9c+7z3jTp46MoeWDSWeMxmynvJrUO84s1CH2CgII
yiBg9uwNVQPVPAepL6NNiDO2HkYEtspp
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:27:54 2025 by rpki-client