This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
File: jhahBq30E6__xY8QEZJ09wDPpZM.mft (raw, json)
Hash identifier: qI4fc6TdCbZdp1uUk9Ii7rAbMBueqZ6fCdLmJkFAaGE=
Subject key identifier: F2:BB:A6:6B:7F:36:90:A3:2C:F3:C5:D1:08:10:7F:D3:00:7E:78:94
Authority key identifier: 8E:16:A1:06:AD:F4:13:AF:FF:C5:8F:10:11:92:74:F7:00:CF:A5:93
Certificate issuer: /CN=A913EF8E/serialNumber=8E16A106ADF413AFFFC58F10119274F700CFA593
Certificate serial: 02CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
Manifest number: 02CA
Signing time: Tue 23 Dec 2025 00:24:34 +0000
Manifest this update: Tue 23 Dec 2025 00:24:34 +0000
Manifest next update: Tue 30 Dec 2025 00:24:34 +0000
Files and hashes: 1: jhahBq30E6__xY8QEZJ09wDPpZM.crl (hash: yvgvQL1uqYNUB/9b5aeHqICA/hsHQ7wr02z6Nee4wwk=)
2: 92F8EAF428F511EDA8D1655FC4F9AE02.roa (hash: g0WHVr1kPPMvFlHteDjphuuHkMNmIovAW1zjTKN/Axk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.crl
rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:24:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719 (0x2cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EF8E, serialNumber=8E16A106ADF413AFFFC58F10119274F700CFA593
Validity
Not Before: Dec 23 00:24:34 2025 GMT
Not After : Dec 30 00:24:34 2025 GMT
Subject: CN=6949e142-d2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:55:23:e5:68:8f:92:59:57:30:55:a5:b4:
80:88:91:b6:03:c9:24:42:25:ee:ad:0a:aa:97:3f:
d6:1e:fd:49:22:2b:dd:9f:41:bd:66:d4:d9:63:d8:
8c:0d:9f:f5:51:57:9f:f2:61:a1:16:02:ac:a3:0a:
29:5d:f3:96:95:25:0b:d9:68:be:e1:a7:58:a0:4d:
31:97:44:ff:ce:00:fb:9a:92:cd:f2:99:61:da:3d:
2b:70:4c:c5:43:bb:63:53:5e:23:3c:09:c0:85:fe:
11:3e:70:91:65:b6:58:69:88:00:b7:45:6c:a1:a0:
1d:14:35:67:48:ce:49:47:f6:98:93:41:29:78:7e:
52:b8:86:19:e5:05:c9:9c:ba:21:fb:7c:3c:55:28:
7d:d8:23:e6:6c:e0:69:b9:64:e8:e8:59:4d:4b:0c:
25:f1:79:d0:e0:9a:0f:2e:77:81:06:97:de:62:79:
17:4c:96:7e:fe:13:fa:5f:7b:c8:11:75:fb:db:96:
dd:f2:b8:32:7c:04:d2:9e:a8:15:df:92:b0:35:f9:
05:81:e3:9d:1e:3d:4d:7e:ae:ff:b7:d4:89:94:78:
07:55:1c:6c:4a:8c:ed:6a:6b:44:8e:a4:47:9d:6c:
ba:e1:da:7b:c6:ec:66:60:e8:4e:6a:da:50:9f:61:
00:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BB:A6:6B:7F:36:90:A3:2C:F3:C5:D1:08:10:7F:D3:00:7E:78:94
X509v3 Authority Key Identifier:
keyid:8E:16:A1:06:AD:F4:13:AF:FF:C5:8F:10:11:92:74:F7:00:CF:A5:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:22:2d:58:50:45:97:56:66:0b:f6:ca:e4:cc:b9:57:3f:2d:
d3:24:b0:27:07:1d:ce:ef:58:fd:49:64:7c:60:ed:f3:cf:54:
a2:b0:0a:ee:f9:b5:86:72:09:24:ff:9c:89:bc:2a:0f:ad:6c:
d9:54:cd:0a:49:a6:77:c8:ca:28:8e:32:10:c7:58:7b:85:a2:
a5:ee:06:e0:00:31:e2:1d:8b:f4:cf:2a:48:c7:96:13:26:85:
f7:b0:be:3a:e7:9d:92:d7:9c:e2:29:2b:5e:24:a3:fb:6b:61:
18:8c:e8:25:f6:59:63:90:40:dd:d3:7c:2c:9a:8b:f2:9d:04:
6e:b3:6a:dd:26:df:d6:0e:6c:46:f7:a6:44:43:e6:ed:a1:ea:
be:60:13:d3:92:b6:16:50:de:b5:34:ec:df:f8:98:74:b0:b5:
a7:2c:1e:79:0b:36:a5:66:68:ad:3d:e8:0a:56:d3:43:02:a2:
05:eb:5c:57:2f:e2:e5:cf:56:f4:62:a9:5b:5b:89:6f:7d:b9:
ce:24:4b:2c:44:33:e6:08:d4:7a:70:75:5a:78:cc:92:8c:18:
3c:88:73:28:07:88:f5:b9:a8:d6:74:2e:88:20:83:ab:a4:41:
84:f9:7d:90:7a:17:1a:32:4f:14:2f:96:76:1e:ec:92:80:08:
09:27:d0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:51:03 2025 by rpki-client