This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
File: _JzDgDXfD9iyRV42dn4TAif06Hs.mft (raw, json)
Hash identifier: Q0FgSfFZ34YfSIeQgDrtu1QOOEIh5XNS/7ZCoeiFvqo=
Subject key identifier: C4:B7:7A:92:91:E7:06:B1:14:3A:24:E9:58:DE:8B:82:6C:D3:F8:8E
Authority key identifier: FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B
Certificate issuer: /CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
Certificate serial: 17EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
Manifest number: 17D8
Signing time: Mon 22 Dec 2025 16:18:50 +0000
Manifest this update: Mon 22 Dec 2025 16:18:49 +0000
Manifest next update: Mon 29 Dec 2025 16:18:49 +0000
Files and hashes: 1: _JzDgDXfD9iyRV42dn4TAif06Hs.crl (hash: M1ADqZk1/eesvwFh2WlD9J6f8d5633qZssK7qn9eXGI=)
2: 1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa (hash: H2kVJ1Qljol4RJT+WjYqTUcreshPKQd5F8/PLTtjDEU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl
rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6122 (0x17ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E49, serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
Validity
Not Before: Dec 22 16:18:49 2025 GMT
Not After : Dec 29 16:18:49 2025 GMT
Subject: CN=69496f69-5fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:ca:36:2d:dd:f0:7d:e1:10:f0:f9:3a:44:
99:0e:51:06:c9:03:90:34:2c:73:34:45:b9:65:c1:
f6:67:f4:c3:3c:fc:f7:20:92:0c:76:17:73:9e:95:
6e:69:78:18:4a:46:19:18:1b:92:7d:65:f5:54:98:
f9:f3:81:d0:a7:9c:c7:2c:12:9e:4d:fa:bb:d2:50:
10:6d:8b:f8:b5:1e:4e:f7:99:02:c3:8c:b0:9a:44:
ed:c2:e6:82:1f:b6:2c:56:c0:52:64:57:0b:d4:0b:
d8:96:8c:e9:2e:53:b4:93:60:d0:2c:3b:93:e2:96:
ce:d6:5a:cf:c4:cb:36:0e:83:2b:cc:52:d7:76:22:
e4:7c:fe:a2:c9:92:30:6b:e6:9b:f8:70:38:7b:30:
92:a3:1c:68:14:98:0f:63:f6:b4:ff:02:5b:d4:03:
74:a1:a8:34:48:8f:57:a3:82:8f:9b:10:13:de:ad:
10:fa:92:40:fd:0c:ad:6a:e9:7e:34:a8:9b:6d:2b:
e4:ac:c6:65:73:21:cc:18:e2:a6:89:f2:6e:46:c7:
89:1a:09:39:e5:fb:26:2b:bd:c3:4d:4b:cb:78:51:
85:45:ba:f6:24:90:46:fe:48:c1:45:14:96:55:69:
df:7c:9c:42:7c:ae:28:22:52:35:70:69:8f:f0:92:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B7:7A:92:91:E7:06:B1:14:3A:24:E9:58:DE:8B:82:6C:D3:F8:8E
X509v3 Authority Key Identifier:
keyid:FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:31:98:a5:a2:9f:b8:47:1d:49:17:55:a3:c4:e2:da:e6:75:
47:be:5f:b3:e6:28:ea:39:4c:f3:ca:58:d6:c1:3e:54:d7:72:
39:19:2c:95:1b:62:63:c5:5a:2e:f6:37:57:1e:c5:34:71:3f:
1f:af:57:75:af:48:68:f8:c5:0c:72:0e:af:26:4c:45:8a:15:
59:53:03:2e:2d:7c:0d:48:33:fb:a9:ba:a0:82:b4:69:ce:50:
7e:db:04:ba:ae:bf:94:35:0d:6b:02:f9:c9:77:de:a6:ad:c4:
59:ae:e5:9d:28:b3:13:36:4e:ba:0a:b6:8f:b6:dc:a3:69:2b:
6b:07:3f:7c:bc:b5:3f:56:7e:db:c9:a6:ec:84:47:b9:cc:4e:
55:75:2f:21:e0:b4:d7:53:87:35:e5:5a:70:d2:32:08:a7:6d:
80:57:56:b3:09:c0:c0:00:9a:12:ed:de:04:73:ae:52:4c:05:
4e:04:30:ce:5a:0e:9b:c8:6e:ba:43:2e:81:b7:c8:e8:96:11:
25:0a:00:1c:be:17:c0:cb:74:a2:19:38:88:b7:b8:18:60:52:
f8:f3:23:c7:09:a5:13:3c:56:94:ea:69:c2:4b:2b:79:e9:0e:
a7:80:de:5b:2e:0e:64:d4:72:2f:e8:d8:9d:10:83:8c:45:4e:
10:11:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:08:59 2025 by rpki-client