This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
File: JCmj7lCI89RTcqjjs2g0x16ubSk.mft (raw, json)
Hash identifier: o90BjqkVzTLpZz6i7ep+r86nuLXGeISER5s5qJQBB/o=
Subject key identifier: 59:03:B7:B2:63:92:99:3A:D7:A4:76:F6:C6:DA:16:0A:9B:7B:86:24
Authority key identifier: 24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29
Certificate issuer: /CN=A91EE96E/serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
Manifest number: 9B
Signing time: Fri 05 Dec 2025 04:24:20 +0000
Manifest this update: Fri 05 Dec 2025 04:24:19 +0000
Manifest next update: Fri 12 Dec 2025 04:24:19 +0000
Files and hashes: 1: JCmj7lCI89RTcqjjs2g0x16ubSk.crl (hash: ZxlYzqj4tzytOkVrQ4TPC1VWEHkX7lr4BOQT2oy1kXY=)
2: 92B377C82CB011F0A2E86B16C4F9AE02.roa (hash: FoDHZvXeH5e/XFJzf3AymBW0SIuGnIL2DXJhgfsRixg=)
3: 7F639A182CB011F08B722116C4F9AE02.roa (hash: 8SOJ6SdOtJ/q3NwLkWGRY6LjHM44wHGZjzKG2cwDOuk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl
rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE96E, serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29
Validity
Not Before: Dec 5 04:24:19 2025 GMT
Not After : Dec 12 04:24:19 2025 GMT
Subject: CN=69325e73-6bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:96:a1:63:59:f3:02:d6:b6:65:4c:42:40:
b9:0d:bb:33:6a:17:7f:4a:3f:2b:da:bd:34:dd:d7:
ae:62:19:60:53:b2:17:80:28:c0:e6:d9:9b:b1:4a:
f6:3b:8c:2b:74:5d:68:ad:fd:00:8f:b9:f8:16:91:
89:ef:99:70:b6:43:30:49:53:ba:16:1a:b2:30:25:
2d:e3:9f:29:8d:a7:3d:2f:30:53:b4:e5:f0:47:f0:
1b:35:fd:bf:a0:63:97:ff:50:5f:15:67:f2:22:98:
ec:b4:09:9f:61:a8:86:7a:8e:e4:55:a2:6b:38:24:
3e:15:4b:1a:c0:3e:68:35:c1:94:fc:6e:3b:ba:97:
9a:cd:f8:d5:f8:3b:db:e8:f7:0c:d8:06:5c:77:5a:
94:88:bd:72:c0:09:5b:2b:33:30:05:1e:58:a0:aa:
fe:90:c0:e0:9b:fb:f8:d8:ae:6b:38:34:41:5e:4a:
4c:ad:c8:04:90:3c:74:d9:3c:a8:ee:20:83:2c:b1:
e3:fe:2b:69:8b:c3:f6:d5:b4:2a:97:d6:05:80:33:
65:f0:65:9c:8a:71:15:f3:f5:e7:d4:2d:d3:4e:83:
e3:ab:de:4f:08:6f:3a:ff:5b:22:93:58:36:a2:8c:
02:42:fd:0e:1c:aa:ae:0c:01:33:52:69:9e:f6:d6:
63:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:03:B7:B2:63:92:99:3A:D7:A4:76:F6:C6:DA:16:0A:9B:7B:86:24
X509v3 Authority Key Identifier:
keyid:24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b2:84:fe:ee:c4:ae:ac:8b:ce:33:0e:1f:57:3b:8d:cd:47:
37:32:a2:34:92:b9:97:5d:a0:ea:b5:53:3e:24:01:cf:1b:f3:
e8:f5:7d:2e:27:aa:5e:cb:ff:27:a6:ef:23:85:63:7d:8e:5e:
98:c9:9a:67:d5:0a:59:a0:cb:c0:12:42:13:af:c3:fa:fe:5b:
bc:c6:04:30:9f:ef:44:63:8b:d1:5b:72:8a:c8:3e:03:34:5f:
f9:94:b4:39:18:6a:70:c2:4c:97:dc:2c:a5:3f:1f:2d:04:f5:
81:b1:68:a1:c2:69:ef:3a:d8:8e:23:05:6f:7d:77:a3:91:9e:
73:38:28:30:6d:a4:5c:72:8e:20:6b:61:6f:71:8a:cc:d3:3d:
af:9c:c0:36:b3:eb:41:96:95:b9:12:59:ae:e8:1c:32:21:f4:
ff:b5:14:e3:ce:d5:c4:53:a5:f4:9c:46:a0:40:7d:90:d7:4d:
8a:8c:41:c5:54:d3:5f:82:63:e9:0d:3e:d8:4d:c7:65:12:55:
30:06:f5:ab:c3:44:f3:a2:13:84:f2:8a:42:14:42:8a:3b:ae:
00:f8:20:79:ca:db:de:12:4f:bc:83:bf:2a:80:c6:75:ee:c3:
c6:3d:b6:31:a7:10:f9:e3:c8:99:62:48:f3:dd:87:2a:ed:56:
6f:fd:bd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:24:55 2025 by rpki-client