This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
File: JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json)
Hash identifier: o8io6hN3V/4/7Juhi9d+T4TRi+rrFSe3N8Xnh6FwcGM=
Subject key identifier: B2:C1:DB:46:66:E9:21:9C:12:7B:9B:7C:E7:3C:FE:00:12:CE:77:B8
Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
Certificate issuer: /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Certificate serial: 2F83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
Manifest number: 2F6F
Signing time: Sat 06 Dec 2025 15:16:47 +0000
Manifest this update: Sat 06 Dec 2025 15:16:46 +0000
Manifest next update: Sat 13 Dec 2025 15:16:46 +0000
Files and hashes: 1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: XuOoD0bgsgqbCaI6kvb3/XH3OaTvbkOCu8VbdlzCS9s=)
2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: Aob8ZJl5qzL6UphkGnJrV6N3zUVz/TL17yzbEpPEPlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl
rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12163 (0x2f83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1BF8, serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Validity
Not Before: Dec 6 15:16:46 2025 GMT
Not After : Dec 13 15:16:46 2025 GMT
Subject: CN=693448de-5b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2b:76:ac:3f:ab:3e:32:b6:3d:6f:29:e8:0f:
fb:c7:1f:3c:96:de:a8:04:b1:f7:f4:31:35:5b:7b:
eb:94:45:6e:57:fb:28:8d:56:ff:fa:93:7e:d3:31:
0d:b1:01:11:4c:17:15:ac:a2:54:58:1e:46:94:97:
1e:f4:69:bc:61:41:80:ec:6f:3c:c1:96:22:ff:6d:
2e:5f:75:14:3b:4d:be:cd:91:d9:20:43:92:e5:5d:
83:fb:c1:a5:cb:31:fb:20:21:93:ae:d2:98:30:8a:
8f:d4:b1:b4:66:cb:04:b5:cf:d8:68:87:af:ca:6f:
22:ea:48:97:1b:52:04:75:8f:e8:2a:ed:a9:63:a2:
b9:d5:28:c2:2f:59:12:42:28:56:0d:7f:16:77:78:
3f:15:8c:20:16:9f:e6:05:e8:10:84:32:94:e0:5d:
fb:14:c9:99:ad:9a:59:ec:f7:33:75:8e:ef:43:a2:
90:ab:e1:a0:2f:7b:1a:0e:eb:b5:66:58:66:4a:ef:
c4:a6:ea:6f:c4:fe:06:c2:17:06:13:40:50:c6:58:
72:a3:c2:e0:10:82:8d:01:86:62:71:ad:0f:4b:2b:
ad:d4:ad:a3:23:07:78:12:5d:d3:64:a8:46:e9:06:
93:45:d1:8c:6a:7c:a3:9b:1c:b0:78:a1:cf:88:ac:
3d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C1:DB:46:66:E9:21:9C:12:7B:9B:7C:E7:3C:FE:00:12:CE:77:B8
X509v3 Authority Key Identifier:
keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:59:27:48:33:4c:ef:1e:41:9c:8b:f8:cb:b7:75:4e:06:a0:
52:ff:42:02:2f:81:d5:0c:46:5e:0d:cf:ca:5e:5c:06:7b:37:
df:fd:f9:72:66:20:3f:84:04:ac:9a:a8:69:c9:68:e7:51:f9:
cc:e2:e7:75:7f:8f:e8:0d:07:07:9f:3d:3e:8b:08:75:28:b6:
52:96:84:8a:8a:c8:08:fd:b3:4e:cd:41:54:ea:63:96:da:97:
a3:b5:76:be:34:35:35:98:97:7e:f4:09:41:94:b9:ed:1d:5f:
28:99:df:a0:09:eb:39:b6:10:d8:30:41:ca:1c:76:12:cb:28:
1a:82:9b:05:5e:81:8d:0f:72:8a:2c:40:33:1b:ca:0c:ad:58:
58:1b:4c:13:b7:e0:2d:67:a8:40:1d:c3:50:4d:9b:6d:b4:2d:
8d:62:8e:72:98:bf:07:60:8d:02:9b:c8:ab:d3:41:ba:2c:aa:
89:c9:4b:9a:28:85:ed:c8:04:8b:b7:06:a3:e6:7e:05:bf:61:
cb:8b:c5:90:24:a5:80:55:c6:42:38:21:3a:a2:40:fd:7c:a2:
a2:9e:a2:8e:13:bc:b8:d6:1c:79:12:e3:3e:b4:9d:f4:83:6e:
10:c6:d4:bc:c4:99:7b:b5:ec:e0:92:2b:dc:bd:50:93:95:c3:
1e:d1:75:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICL4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFCRjgxMTAvBgNVBAUTKDI2MDNDNjc0Mjk2RDM0NTY2QzhFRThGOTdDREI0QTRC
MjBGNjIzRTkwHhcNMjUxMjA2MTUxNjQ2WhcNMjUxMjEzMTUxNjQ2WjAYMRYwFAYD
VQQDEw02OTM0NDhkZS01YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4it2rD+rPjK2PW8p6A/7xx88lt6oBLH39DE1W3vrlEVuV/sojVb/+pN+0zEN
sQERTBcVrKJUWB5GlJce9Gm8YUGA7G88wZYi/20uX3UUO02+zZHZIEOS5V2D+8Gl
yzH7ICGTrtKYMIqP1LG0ZssEtc/YaIevym8i6kiXG1IEdY/oKu2pY6K51SjCL1kS
QihWDX8Wd3g/FYwgFp/mBegQhDKU4F37FMmZrZpZ7PczdY7vQ6KQq+GgL3saDuu1
ZlhmSu/EpupvxP4GwhcGE0BQxlhyo8LgEIKNAYZica0PSyut1K2jIwd4El3TZKhG
6QaTRdGManyjmxyweKHPiKw91QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLB20Zm
6SGcEnubfOc8/gASzne4MB8GA1UdIwQYMBaAFCYDxnQpbTRWbI7o+XzbSksg9iPp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUJGOC9EMDg5MzQ5RTM0
ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5GWnNqdWo1Zk50S1N5RDJJ
LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pnUEdkQ2x0TkZac2p1ajVmTnRLU3lEMkktay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MUJGOC9EMDg5MzQ5RTM0ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5G
WnNqdWo1Zk50S1N5RDJJLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDKWSdIM0zvHkGci/jLt3VOBqBS/0ICL4HVDEZeDc/KXlwGezff/fly
ZiA/hASsmqhpyWjnUfnM4ud1f4/oDQcHnz0+iwh1KLZSloSKisgI/bNOzUFU6mOW
2pejtXa+NDU1mJd+9AlBlLntHV8omd+gCes5thDYMEHKHHYSyygagpsFXoGND3KK
LEAzG8oMrVhYG0wTt+AtZ6hAHcNQTZtttC2NYo5ymL8HYI0Cm8ir00G6LKqJyUua
KIXtyASLtwaj5n4Fv2HLi8WQJKWAVcZCOCE6okD9fKKinqKOE7y41hx5EuM+tJ30
g24QxtS8xJl7tezgkivcvVCTlcMe0XUV
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:59:14 2025 by rpki-client