This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File: JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier: X7vrxHOvsz964LUET0vTTdJf/aKb7C/2mhk4vvaX4Hs=
Subject key identifier: BE:6A:B0:2A:51:18:CE:37:F1:0F:C6:5C:C1:64:DB:4C:77:1B:D0:78
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer: /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial: 01CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number: 01BB
Signing time: Fri 19 Dec 2025 02:19:23 +0000
Manifest this update: Fri 19 Dec 2025 02:19:22 +0000
Manifest next update: Fri 26 Dec 2025 02:19:22 +0000
Files and hashes: 1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: bZwc10kCWBSzcM9wNiTQeD2tixm+r29UIOLHQaZIOmI=)
2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: Iuws9NrVtp4Hp18jNO1d1Y0TiH8At1P1mnw1eI9JeUU=)
3: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: 9II8C/zPZ8Sqh/GnkvMtaceds37LRqTiNOgVoHgvhUI=)
4: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: WV1AYVH+VxYegf7IkYCFOtt6eabKoa8E7Gk8VCZklvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Validity
Not Before: Dec 19 02:19:22 2025 GMT
Not After : Dec 26 02:19:22 2025 GMT
Subject: CN=6944b62b-8526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:6d:b6:68:8e:71:0b:c6:18:66:24:dc:47:
e6:0e:33:82:bc:ab:c0:55:1a:b4:06:8a:d0:4f:2e:
c5:3d:f6:4f:3b:11:1c:15:76:46:64:7f:1a:ca:85:
7d:dd:7c:6d:55:ba:98:ee:0c:50:63:d3:9e:b0:44:
d5:c4:ba:05:0d:2f:f3:79:30:87:9e:42:36:fd:48:
3b:3a:5e:45:85:b6:fb:d8:8f:dc:3c:6e:06:85:bf:
86:46:24:57:0c:b7:e2:2d:38:e2:d1:c9:7d:59:42:
14:a2:ce:49:55:9c:95:06:ce:cf:77:9e:34:a1:15:
57:d8:22:f1:5a:42:34:35:28:1d:3e:3b:76:f5:ff:
5c:67:ab:e1:2e:67:aa:c3:74:88:30:92:e5:97:9b:
a0:71:d8:8b:1c:23:5b:2e:86:69:c5:20:a0:57:19:
63:ed:66:c0:e2:88:66:df:e7:55:11:47:f3:80:8f:
c0:62:02:0e:99:cd:95:ff:78:c2:c5:cd:e7:16:5d:
38:23:8c:31:e9:66:fb:97:3e:1c:8b:a8:46:01:cd:
b0:b7:ed:00:07:a8:65:3f:ba:3b:69:ab:d5:e5:fd:
5a:11:0a:3b:25:9a:53:8b:9d:11:fe:fe:26:8d:4d:
db:16:ad:93:74:ea:07:fd:71:86:6e:b8:b8:48:a3:
e1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6A:B0:2A:51:18:CE:37:F1:0F:C6:5C:C1:64:DB:4C:77:1B:D0:78
X509v3 Authority Key Identifier:
keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e3:ee:a0:d4:d7:67:1c:d7:30:ed:31:ca:58:df:11:de:41:
a5:ce:ef:2d:82:b7:53:8e:0f:20:e1:22:d4:ce:d6:dd:65:f5:
08:d3:da:5b:ee:a9:6c:48:79:cb:96:5a:14:85:53:37:69:9b:
37:fb:03:7e:ae:bd:a0:45:de:1b:db:95:de:93:91:6b:41:b7:
de:d1:d3:15:ca:6f:70:f3:32:c5:a8:4e:6c:2d:93:fb:91:0f:
ac:76:7c:7f:53:e2:1c:25:e7:5d:d2:a2:73:e9:e1:a3:ae:0e:
2a:c9:54:e6:fa:53:a9:19:7e:a1:6e:1e:91:e8:1e:d8:e6:a6:
11:aa:69:08:da:3b:b4:20:ac:c3:99:34:11:04:88:9e:4d:db:
95:a6:80:b6:1e:30:c5:1c:e3:2c:a4:94:23:c0:28:0c:82:1b:
38:9d:c6:ec:8b:de:08:2e:3c:61:25:78:f9:c1:73:ed:66:ac:
6e:db:28:a8:31:60:71:d0:1e:49:2a:64:c2:3f:78:7f:8f:f4:
fc:f9:4a:34:38:7f:f3:f6:7e:84:57:1e:40:a8:55:24:1f:e4:
9f:00:94:d3:e4:1a:95:82:77:dc:71:a7:9d:fb:cf:dd:81:2c:
1d:d8:5f:5e:26:6a:38:46:7f:0a:9e:ec:ba:ef:ef:b9:da:99:
65:ed:13:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:03:43 2025 by rpki-client