This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft
File: JXqeaRTVinRbDuar5UjNvgIEiNQ.mft (raw, json)
Hash identifier: /OQ7VKHrAbkrVG4dHdRtjR/UgmpDB3bbL/Y07k79aio=
Subject key identifier: 3D:14:24:45:CD:E7:32:60:50:16:5C:00:44:C2:48:26:2F:45:4E:C4
Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Certificate serial: 02E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft
Manifest number: 02A1
Signing time: Fri 19 Dec 2025 01:09:32 +0000
Manifest this update: Fri 19 Dec 2025 01:09:32 +0000
Manifest next update: Fri 26 Dec 2025 01:09:32 +0000
Files and hashes: 1: JXqeaRTVinRbDuar5UjNvgIEiNQ.crl (hash: 6o3iPwAno/26io66do13tCGfzgYGe4TExTQy2N8p6b8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl
rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744 (0x2e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E015D, serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Validity
Not Before: Dec 19 01:09:32 2025 GMT
Not After : Dec 26 01:09:32 2025 GMT
Subject: CN=6944a5cc-dcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:0b:88:5c:90:da:99:83:21:d0:1c:81:81:
1a:c6:fa:cd:71:57:95:71:3e:aa:25:ba:f5:5e:f9:
b1:d3:d4:9e:cf:63:17:a8:16:49:a0:13:29:d9:28:
b4:4a:b4:39:92:ce:8e:2c:e0:b7:80:51:54:bd:3a:
da:bb:e3:28:17:3f:88:5d:53:6f:b2:2c:96:85:35:
69:82:ff:a7:6f:35:46:e1:77:f9:8f:30:5e:22:66:
0f:dc:1b:42:06:82:e3:13:54:8a:dd:03:51:7f:75:
c9:ec:7a:bd:72:66:4f:db:b9:96:ad:8c:d2:a3:97:
3f:a6:ec:9c:ab:60:a1:c8:c3:89:25:39:8b:eb:9f:
2d:0a:d2:cf:bb:63:1d:cb:d8:66:f4:5c:42:5a:81:
bf:15:f9:d6:e6:82:06:98:77:23:7d:9b:04:8a:41:
d8:05:3c:db:37:42:2b:b6:91:01:eb:26:cb:4d:8e:
ff:e9:81:81:fc:d5:9e:df:d9:2b:56:91:90:7c:76:
8e:d6:b6:96:78:50:ea:a6:4d:27:4f:3e:5c:18:11:
79:36:e7:2b:3c:e0:4a:7e:d7:32:7e:9f:6b:9c:ef:
d7:f2:aa:e8:46:5d:e1:ab:c6:2f:45:97:2a:de:44:
0f:17:32:8c:24:c6:15:ee:12:c4:55:28:d0:3e:b6:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:14:24:45:CD:E7:32:60:50:16:5C:00:44:C2:48:26:2F:45:4E:C4
X509v3 Authority Key Identifier:
keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a2:42:5a:16:12:0a:2c:6f:fe:ae:a6:73:84:73:18:55:fe:
a8:d8:ac:57:da:67:6c:2d:3b:1d:15:f1:2d:13:63:cf:37:34:
6d:9e:d8:81:ee:62:fc:7b:eb:16:29:e8:db:70:1b:ef:79:a7:
55:30:96:62:e2:bf:3d:b4:3c:36:73:f4:57:8a:0e:c5:ce:9d:
13:37:11:ad:ed:ff:5c:8b:88:4f:c1:1e:88:24:c3:0d:26:2f:
4b:cc:22:be:9e:4c:02:ce:85:91:08:36:50:bc:4f:ca:18:56:
04:94:9f:22:c2:d9:7c:8d:59:8d:fd:2a:e3:90:b7:79:9a:58:
32:56:3f:40:2f:3c:d3:c6:2c:23:c3:4e:cc:35:25:3e:18:62:
f9:b5:3c:00:bd:24:32:72:f9:da:90:79:83:48:b3:0e:47:b5:
53:1c:08:74:1c:0d:ed:83:a9:8b:23:2e:08:70:14:19:4b:55:
a5:11:58:3b:aa:73:a8:b3:57:3c:9f:93:ee:04:83:32:15:fa:
d9:b0:5a:a2:b7:6e:8c:9a:72:43:1c:71:b8:fe:7c:d9:ef:a7:
72:75:ad:15:00:c4:5d:c1:64:1a:b1:9d:e0:d2:0f:30:5c:7c:
dc:1a:52:b9:bc:1c:9a:02:64:e1:97:64:c1:df:26:f5:83:8e:
8e:7d:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:14:16 2025 by rpki-client