This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
File: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft (raw, json)
Hash identifier: u1LT8JGPUqwhF5u2I27te5a+0w2hByj/uLkN+16HFXY=
Subject key identifier: C0:66:81:86:A6:46:23:40:B5:B1:FB:88:FF:F2:43:DA:59:7A:AE:E6
Authority key identifier: 27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD
Certificate issuer: /CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD
Certificate serial: 05F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
Manifest number: 1F8E
Signing time: Sat 06 Dec 2025 16:01:26 +0000
Manifest this update: Sat 06 Dec 2025 16:01:26 +0000
Manifest next update: Sat 13 Dec 2025 16:01:26 +0000
Files and hashes: 1: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl (hash: 2Tsum20GOrLZIMM5P2LEdz6nxyrBLcNgkMkfDtJaCHA=)
2: 08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa (hash: 18yGqSgC4OjskRlJV7bTeEZSgygKIsdz22IPs64qVtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl
rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1525 (0x5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5FCD, serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD
Validity
Not Before: Dec 6 16:01:26 2025 GMT
Not After : Dec 13 16:01:26 2025 GMT
Subject: CN=69345356-57ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2a:26:bc:78:5c:55:00:6d:1f:3d:17:54:04:
12:38:c2:28:8a:e0:c0:8d:9e:36:5d:74:59:45:9b:
72:f5:f5:73:72:bb:dc:57:21:5c:7f:4f:53:16:2f:
a0:d2:8f:15:23:f2:65:74:1d:f2:70:48:6f:69:2b:
49:88:fc:df:b1:57:86:5c:8e:94:a2:dd:4a:7d:9e:
8d:91:61:2c:e3:84:12:ea:7f:dd:e4:1f:a9:38:4e:
f1:8a:84:c8:2b:73:32:44:1a:65:84:fc:cc:7b:31:
2a:10:38:e0:00:1b:34:f5:3a:19:9c:a1:e6:ad:ec:
b0:30:81:1f:af:ce:dc:4e:28:0b:cb:72:00:64:b5:
5d:f0:d1:92:57:fa:57:99:67:a8:0d:6f:7a:5b:c0:
02:8d:69:38:53:bb:5c:ba:23:df:15:7f:6d:71:91:
aa:99:2d:69:3e:25:e6:58:bb:fb:7f:46:10:53:19:
e2:dc:19:80:ba:fd:b1:41:29:9b:36:64:5a:e1:0c:
4b:ad:4d:53:61:3e:21:76:86:b8:b9:d4:ca:1e:f1:
04:aa:05:0f:0f:fe:4c:e1:35:5c:a8:df:c1:6d:04:
12:6e:80:e7:c8:a2:40:27:7f:7d:9b:44:97:61:eb:
a1:f0:85:9a:e3:96:88:cd:b5:ef:51:37:a2:45:4d:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:66:81:86:A6:46:23:40:B5:B1:FB:88:FF:F2:43:DA:59:7A:AE:E6
X509v3 Authority Key Identifier:
keyid:27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:98:5b:eb:21:06:dc:a8:9b:6c:5d:b6:e1:e0:e1:92:5f:8f:
19:61:c1:8a:09:16:ce:37:d0:1a:f7:a0:45:df:e6:8d:77:78:
fd:c2:e5:e7:5f:3b:70:90:b6:19:fb:f1:e9:dc:87:c9:0f:76:
33:f8:a2:bf:9a:59:07:3b:5a:9b:75:6e:ba:2c:54:9d:1b:3b:
f0:a7:19:23:42:1e:38:65:f0:ea:4a:f2:04:c5:92:31:63:de:
03:51:e2:77:27:03:6e:de:4a:76:1b:28:96:01:54:c3:9c:5b:
d7:96:2c:bb:1d:ce:bb:68:14:e1:4b:60:26:8a:9a:ce:43:8c:
bb:d5:72:30:bc:30:70:d9:ad:22:7b:d5:60:b9:25:55:2b:1e:
64:66:71:72:f8:2e:1a:44:64:9f:0f:cb:28:36:bf:c9:44:d9:
e0:48:2a:bd:0b:b5:e4:b9:10:cd:c5:7e:a9:3d:11:29:8b:ac:
e4:22:9c:87:8c:5b:e1:67:f1:eb:5b:c9:59:5c:36:2c:19:3b:
77:d4:f2:57:aa:f1:f5:2a:57:5d:4c:d1:e5:50:2d:9f:4a:0a:
08:5a:21:0a:6a:e1:b6:67:5a:47:24:64:6d:e2:ba:b6:96:5e:
d5:c0:a0:ae:ad:28:14:db:45:3c:08:b2:14:2e:5a:68:a0:94:
08:14:ef:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:14:15 2025 by rpki-client