This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
File: JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json)
Hash identifier: XQXgqC4LoCL7F4O10V0zTGiHmvrldcYk3+veYnuRuss=
Subject key identifier: FF:DF:EC:0E:30:4F:C4:04:AD:3F:98:23:08:D1:02:58:D4:A4:3B:9D
Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
Certificate issuer: /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Certificate serial: 2F8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
Manifest number: 2F76
Signing time: Sat 20 Dec 2025 15:21:45 +0000
Manifest this update: Sat 20 Dec 2025 15:21:44 +0000
Manifest next update: Sat 27 Dec 2025 15:21:44 +0000
Files and hashes: 1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: fFxdGwmD9aw5zxw4H8BHTchp6f9qFV5Fi0pTr4y8h5A=)
2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: Aob8ZJl5qzL6UphkGnJrV6N3zUVz/TL17yzbEpPEPlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl
rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 15:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12170 (0x2f8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1BF8, serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Validity
Not Before: Dec 20 15:21:44 2025 GMT
Not After : Dec 27 15:21:44 2025 GMT
Subject: CN=6946bf09-ebdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:fd:f5:ec:bc:b6:c3:93:5a:da:41:10:de:
0e:9f:d5:12:03:fa:49:74:2f:fc:7c:d8:fa:7c:c0:
3b:72:1c:80:9f:46:79:58:1f:ef:a0:2e:17:a5:38:
fc:77:e6:e0:b8:89:aa:f8:9a:33:c2:3f:ad:aa:e7:
d8:d4:76:55:e0:6b:e5:5a:aa:a0:df:a9:0c:9f:e3:
02:69:b0:74:0c:fe:73:7d:4a:c0:fb:ca:cc:3f:98:
6a:1a:01:e8:97:33:fe:db:2a:3f:cb:c0:1c:9c:11:
26:8a:91:89:1d:d7:38:15:08:4b:64:26:ec:f9:af:
56:e7:3f:b3:1d:e9:db:37:fb:50:85:c7:db:61:6c:
61:2e:72:6b:58:dd:89:46:b7:4f:d9:84:aa:bb:7a:
b9:16:5d:ed:05:74:a3:01:12:5f:fe:99:d1:90:af:
9c:20:26:33:a5:db:38:47:5b:44:17:fe:cc:0f:5d:
ca:77:56:14:0c:bf:03:02:79:52:65:5e:ba:bf:1a:
92:be:75:0b:09:6f:65:08:f5:bd:24:49:be:17:13:
41:48:f2:0c:17:76:c1:68:c3:34:56:3b:b5:91:49:
fc:66:c8:94:80:85:dd:43:85:b1:27:37:76:2e:98:
29:ea:09:61:48:cd:7a:b4:ec:ef:b7:06:57:2e:f7:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DF:EC:0E:30:4F:C4:04:AD:3F:98:23:08:D1:02:58:D4:A4:3B:9D
X509v3 Authority Key Identifier:
keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7a:26:5e:74:89:cf:e7:31:ac:1f:49:dd:3e:52:5c:78:40:
67:54:0f:b4:42:16:cd:05:c3:66:dc:1e:34:d6:50:51:98:7c:
95:67:44:b7:d1:74:8b:df:2c:b9:cd:4f:26:af:8d:3d:a8:ca:
1b:fb:3e:46:ff:61:78:ab:2c:be:85:a1:f1:c1:75:71:1b:ee:
c9:df:f5:a8:78:1b:3d:6f:b8:b8:9a:02:4e:d8:f7:ff:54:b8:
df:c9:c2:d2:b5:8a:6c:60:06:71:30:9a:53:59:6e:50:2c:78:
9c:26:ec:63:d1:64:25:76:3a:ff:22:8d:eb:b0:82:62:55:23:
c9:37:2c:22:10:02:86:a1:46:ea:b3:b9:83:55:cc:79:64:f4:
0c:fc:d2:8b:5a:a6:11:f8:02:f6:04:35:2e:91:85:eb:78:9f:
27:8e:06:91:5f:1a:d0:c5:02:7d:c8:68:86:ca:24:22:f8:cc:
13:2b:6b:bf:ba:e0:34:97:2a:0f:ae:ce:d4:80:ad:bf:cd:47:
65:2e:cd:48:31:c4:fb:81:ad:09:4e:24:76:c2:9d:ff:9c:bd:
5a:f8:7a:97:1e:df:48:54:76:e7:62:e2:71:58:cb:fb:35:ca:
d8:37:b9:dd:51:f3:8d:d2:e2:3d:35:dc:1c:b4:d0:df:a8:da:
5a:1c:da:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 03:23:19 2025 by rpki-client