This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
File: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json)
Hash identifier: FjTTZBqPvITiNYa4fc1qKFabQgNfLoPsFr0f/TIE2gQ=
Subject key identifier: 68:02:10:7F:8D:70:1C:7D:26:F0:44:D0:C6:F3:5D:66:60:C9:6A:09
Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
Certificate issuer: /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Certificate serial: 0BD0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
Manifest number: 0BC5
Signing time: Sat 06 Dec 2025 18:13:54 +0000
Manifest this update: Sat 06 Dec 2025 18:13:53 +0000
Manifest next update: Sat 13 Dec 2025 18:13:53 +0000
Files and hashes: 1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: tBvel4xOHXNvLTovi4p3NFr2e/ySAR/WqEhE6Uit3nw=)
2: A540A624378611EABE283384C4F9AE02.roa (hash: ANMKroNAd8SN9uIGuTzwVBbPP9a2iv11Jpq5VopofpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:13:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3024 (0xbd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC42F, serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Validity
Not Before: Dec 6 18:13:53 2025 GMT
Not After : Dec 13 18:13:53 2025 GMT
Subject: CN=69347262-6aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:ec:f5:f4:01:31:d2:f1:66:6b:35:b6:f2:
a4:17:9b:82:ae:40:11:a1:ba:74:28:14:07:46:08:
7e:d0:47:4b:68:0c:e4:7c:b2:7c:a3:0a:e8:15:6d:
89:d6:af:05:d8:f0:72:f0:d9:0a:ce:2c:c9:14:f2:
1e:46:ae:65:16:b5:87:35:5d:bb:df:32:51:f1:fc:
a4:eb:89:1f:7a:bf:64:59:6d:66:0f:be:a2:1b:a4:
4e:71:a6:94:dd:1d:da:c9:24:f1:a6:95:ff:93:1d:
4f:35:d6:4e:d3:1a:a9:52:6e:96:3c:ac:bd:23:c9:
f0:ab:03:3b:dd:57:7f:0c:ed:f9:c7:0f:30:0f:a5:
aa:02:0d:ab:fd:70:21:d7:47:f3:bc:b1:c1:ba:2b:
2b:67:56:34:3c:95:78:3b:4b:51:75:fa:19:54:b5:
7b:4c:1a:81:90:32:14:d1:c9:c5:43:84:3f:8d:7a:
f2:12:86:35:1f:05:a6:9c:82:23:a9:cd:58:4d:5d:
a8:07:a8:9f:e0:7c:5e:19:ab:dd:37:0d:19:d8:4b:
30:42:60:7f:4b:01:97:55:ae:30:59:c5:f8:6d:fe:
de:4c:0e:8c:38:40:eb:41:0a:78:23:fa:94:8e:33:
46:4a:bd:e0:09:8f:65:f2:dc:f3:a3:79:43:0b:46:
14:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:02:10:7F:8D:70:1C:7D:26:F0:44:D0:C6:F3:5D:66:60:C9:6A:09
X509v3 Authority Key Identifier:
keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:8b:c7:bd:40:d8:e0:72:c2:7f:a2:4c:5f:9c:43:05:10:82:
07:e1:94:ab:fa:e5:99:02:d0:10:a8:6c:8e:81:83:c8:b6:36:
db:e1:d7:61:5e:bc:22:d7:ce:b0:cc:ce:2d:ac:c2:6b:56:a0:
2b:fb:af:67:ec:8f:54:7f:3a:33:dc:18:1e:65:8a:93:04:7b:
f2:a4:8d:85:24:d2:90:c7:64:47:a1:10:01:22:ab:bf:5a:79:
44:29:ce:27:13:3d:4c:be:c8:ee:97:d2:e5:77:12:ed:a4:fd:
43:82:db:79:5c:d3:6a:12:78:70:13:25:15:f1:7a:bc:90:d9:
12:10:d3:44:a4:87:08:1c:96:0f:1d:20:de:19:62:9e:5d:28:
07:33:0e:e8:fe:ba:6e:ce:37:6c:7e:de:ec:9b:04:6d:87:65:
7b:ea:00:49:79:1e:2c:78:67:d2:ff:6a:86:84:e1:60:a0:9f:
91:49:b8:20:2e:bd:1e:d8:a1:34:54:09:00:65:66:39:f0:c0:
6a:7e:4f:8b:21:22:a3:25:a3:d2:19:76:d1:ff:91:c2:1d:d8:
6a:2b:83:cd:9a:b2:52:0d:90:4d:97:7b:8a:39:49:e5:48:7a:
c4:62:a3:0a:40:65:5d:40:34:93:f5:5a:6d:74:75:fe:5c:23:
57:fc:6e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:38 2025 by rpki-client