This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
File: JtUcwUoj0KiCO18cogDnCGrJqWk.mft (raw, json)
Hash identifier: ixTkopd04Han4/Rc1T/dv8Jx5GAb+Tmv2KOOt/pdBDw=
Subject key identifier: F6:16:9B:84:E7:82:3B:E9:A9:32:65:B1:84:BE:79:F6:80:C9:79:05
Authority key identifier: 26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69
Certificate issuer: /CN=A91B0022/serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
Certificate serial: 0795
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
Manifest number: 0790
Signing time: Mon 22 Dec 2025 20:48:11 +0000
Manifest this update: Mon 22 Dec 2025 20:48:10 +0000
Manifest next update: Mon 29 Dec 2025 20:48:10 +0000
Files and hashes: 1: JtUcwUoj0KiCO18cogDnCGrJqWk.crl (hash: eZstr0qlvrrBvt+2ljSdLfcgxr0i0yluKyuyk+opSBY=)
2: 736BC8B433B011EBB38B4E68C4F9AE02.roa (hash: FBuNSRl7XnXjjg9AlzEceanFZnpfOYLenTTWUna+f+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl
rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 20:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1941 (0x795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0022, serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
Validity
Not Before: Dec 22 20:48:10 2025 GMT
Not After : Dec 29 20:48:10 2025 GMT
Subject: CN=6949ae8b-f788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:51:a0:c2:07:83:e3:12:14:13:97:2f:e2:
89:54:7c:88:d4:f7:f4:3b:02:ef:3b:80:c8:fb:2f:
6e:a8:c9:51:3d:17:35:38:d4:47:5a:df:b5:5f:52:
6a:55:ca:6e:bc:b5:43:92:19:9a:28:64:1a:3d:e0:
1b:1e:44:77:ff:a8:d2:6a:b5:f1:1f:56:03:79:99:
de:05:70:29:72:d2:b7:69:75:67:a4:e8:3b:9d:c3:
3b:c5:8d:cc:8b:6a:57:a6:3c:17:9c:ee:ee:cc:b6:
29:ec:74:68:d2:3f:d4:f3:5f:79:3d:6d:66:33:6e:
6c:da:2d:60:f3:64:b6:74:11:1b:f3:0b:cf:3e:85:
44:79:bc:9b:de:94:90:ad:8b:65:a1:ce:a6:07:3e:
38:ea:76:2a:b9:60:e6:3f:9b:06:5f:1f:b6:8d:2b:
2a:73:d7:59:cb:5b:65:ac:03:06:95:80:bb:31:8d:
a7:11:26:27:9f:b4:47:91:d7:84:70:71:5f:b1:86:
83:63:fc:3a:db:34:c7:f3:91:2f:fc:6b:49:10:2d:
f0:57:af:43:08:ba:22:e8:83:d5:26:dd:d0:de:d9:
17:5c:37:9a:c1:bf:62:11:3b:7e:b9:cd:f4:ae:60:
36:53:20:0d:43:33:8e:dc:a2:47:61:32:30:e3:bf:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:16:9B:84:E7:82:3B:E9:A9:32:65:B1:84:BE:79:F6:80:C9:79:05
X509v3 Authority Key Identifier:
keyid:26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a8:f5:97:4b:f6:80:4b:97:27:4d:8e:94:2f:41:c8:b5:4c:
67:78:d5:83:61:c5:3e:4a:a3:6e:2a:93:33:18:24:82:28:d1:
07:22:fe:b8:0f:97:3c:dc:5d:b0:bb:1e:f3:93:38:4b:53:fd:
e6:07:be:87:16:34:4b:85:a9:5d:9a:4e:49:10:90:16:10:fe:
58:18:e9:f8:c0:aa:d4:f3:a4:f2:12:73:6e:62:5b:4b:e4:6f:
48:08:a1:a8:82:b3:9b:71:5d:ba:c1:25:90:07:cb:10:8d:d8:
79:34:d8:29:83:49:a3:7a:43:7c:73:fe:3c:57:09:66:10:e7:
ca:e7:3f:34:29:aa:61:03:52:9a:58:90:c7:38:20:9d:b8:20:
23:29:19:8e:f5:f8:0a:7f:f1:4f:a0:7b:85:f2:ac:45:54:69:
36:50:28:47:8a:df:c3:a3:5e:8c:3b:d1:08:ec:30:7d:91:58:
3d:c9:79:10:fa:71:ce:b4:44:59:9f:dd:93:9a:4c:ca:c5:40:
2c:90:81:23:98:a2:40:97:ce:3d:c6:b2:09:c8:e4:87:65:41:
b6:40:ae:27:4e:47:8a:c7:92:9a:3f:63:d9:ba:19:4f:bb:87:
48:ee:2e:8f:9b:d6:b1:b2:fb:6b:b9:5f:ab:62:25:10:9f:7d:
c3:e5:dc:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAwMjIxMTAvBgNVBAUTKDI2RDUxQ0MxNEEyM0QwQTg4MjNCNUYxQ0EyMDBFNzA4
NkFDOUE5NjkwHhcNMjUxMjIyMjA0ODEwWhcNMjUxMjI5MjA0ODEwWjAYMRYwFAYD
VQQDDA02OTQ5YWU4Yi1mNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtEtRoMIHg+MSFBOXL+KJVHyI1Pf0OwLvO4DI+y9uqMlRPRc1ONRHWt+1X1Jq
VcpuvLVDkhmaKGQaPeAbHkR3/6jSarXxH1YDeZneBXApctK3aXVnpOg7ncM7xY3M
i2pXpjwXnO7uzLYp7HRo0j/U8195PW1mM25s2i1g82S2dBEb8wvPPoVEebyb3pSQ
rYtloc6mBz446nYquWDmP5sGXx+2jSsqc9dZy1tlrAMGlYC7MY2nESYnn7RHkdeE
cHFfsYaDY/w62zTH85Ev/GtJEC3wV69DCLoi6IPVJt3Q3tkXXDeawb9iETt+uc30
rmA2UyANQzOO3KJHYTIw47/yOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYWm4Tn
gjvpqTJlsYS+efaAyXkFMB8GA1UdIwQYMBaAFCbVHMFKI9CogjtfHKIA5whqyalp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDAyMi85NEU3Q0FGODMz
QUUxMUVCQTFGRkJGNjNDNEY5QUUwMi9KdFVjd1VvajBLaUNPMThjb2dEbkNHckpx
V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p0VWN3VW9qMEtpQ08xOGNvZ0RuQ0dySnFXay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDAyMi85NEU3Q0FGODMzQUUxMUVCQTFGRkJGNjNDNEY5QUUwMi9KdFVjd1VvajBL
aUNPMThjb2dEbkNHckpxV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQALqPWXS/aAS5cnTY6UL0HItUxneNWDYcU+SqNuKpMzGCSCKNEHIv64
D5c83F2wux7zkzhLU/3mB76HFjRLhaldmk5JEJAWEP5YGOn4wKrU86TyEnNuYltL
5G9ICKGogrObcV26wSWQB8sQjdh5NNgpg0mjekN8c/48VwlmEOfK5z80KaphA1Ka
WJDHOCCduCAjKRmO9fgKf/FPoHuF8qxFVGk2UChHit/Do16MO9EI7DB9kVg9yXkQ
+nHOtERZn92TmkzKxUAskIEjmKJAl849xrIJyOSHZUG2QK4nTkeKx5KaP2PZuhlP
u4dI7i6Pm9axsvtruV+rYiUQn33D5dw0
-----END CERTIFICATE-----
Generated at Tue Dec 23 18:04:30 2025 by rpki-client