This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
File: JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json)
Hash identifier: +dce+qQnng7D4+b2OFtM8v8JcsST1aPPsyycPkyReQA=
Subject key identifier: 4B:22:A4:72:85:D3:F8:CB:F9:99:A7:FC:C1:95:74:A1:D3:EA:5B:E6
Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Certificate issuer: /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
Manifest number: 0119
Signing time: Tue 23 Dec 2025 03:50:30 +0000
Manifest this update: Tue 23 Dec 2025 03:50:30 +0000
Manifest next update: Tue 30 Dec 2025 03:50:30 +0000
Files and hashes: 1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: D2RGo5KcT5F6zTXC+709NO3ZRb5Opr30IsS6GCs8UFE=)
2: 1381259CCA3811F0B890C35CC4F9AE02.roa (hash: 2AIbsNw95CGEUCI+hzWilcZK30P6hAcxR4zxP/RQzJ4=)
3: AE82DA3CCA3711F09D02C15BC4F9AE02.roa (hash: dFNn3jO43SdP+6Z3qx4suVU/JHAZ4DSHsOgrTOhwaUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Validity
Not Before: Dec 23 03:50:30 2025 GMT
Not After : Dec 30 03:50:30 2025 GMT
Subject: CN=694a1186-428c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:35:e5:ca:0e:ce:d1:97:72:de:db:11:e0:
c4:38:9f:1c:ea:e5:74:74:03:a9:e7:af:0c:27:71:
cf:f0:4c:04:24:91:16:00:14:c4:2b:3a:ef:98:ce:
fd:ce:22:8e:a4:73:0e:68:09:01:27:44:11:47:fa:
fc:42:08:8e:04:c9:9d:07:f5:f3:b3:4f:95:d4:cc:
22:48:83:c9:5d:3d:5e:7c:e3:94:51:98:f6:4e:d4:
9f:a7:ec:fa:2c:fa:ed:cb:91:18:35:69:f3:c8:dc:
70:c7:73:a9:73:e2:02:3b:9e:f7:c1:ca:14:33:c8:
eb:3b:ce:c1:8a:ba:d3:fa:dd:79:1d:66:03:16:ef:
b7:ad:80:3d:bb:5a:55:45:27:33:9e:c6:a8:23:65:
8a:6f:ca:87:a4:b4:2d:2a:cf:9c:12:08:99:bc:1f:
cd:12:e1:77:52:79:39:1f:fc:e7:ac:55:c0:89:5f:
4d:0b:f6:98:31:96:6e:a0:97:cc:04:e0:65:6d:00:
43:7c:d0:4d:20:b2:cf:54:fb:50:44:b9:c5:a4:8f:
35:84:ed:7f:fd:d1:ec:7a:1d:02:15:2c:bf:2d:b3:
62:f9:ec:0c:66:cd:74:2c:7d:21:b2:91:7f:f3:8d:
ef:93:d6:80:bc:9e:06:39:08:7c:09:8b:70:5d:77:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:22:A4:72:85:D3:F8:CB:F9:99:A7:FC:C1:95:74:A1:D3:EA:5B:E6
X509v3 Authority Key Identifier:
keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4f:01:22:8d:e7:e1:c8:9d:0c:35:8a:4a:d9:51:eb:3c:57:
c1:10:71:5f:08:7f:d3:d5:de:c6:ad:90:fb:84:11:69:45:76:
61:26:0e:d4:37:53:fa:09:3a:9d:4d:09:f0:92:8a:d6:8a:19:
7c:79:09:3f:e1:d2:68:a4:81:82:2e:3a:58:79:fb:22:99:e3:
c2:db:c8:5d:37:17:fe:bc:90:9b:2a:64:97:fa:e9:ee:99:35:
32:cf:c2:ef:87:16:ab:fa:09:7d:9e:75:90:fa:d8:fa:c1:fa:
bc:df:03:c3:d0:e1:0a:2f:91:fe:88:82:9b:dc:23:cd:0e:c6:
6b:7b:e0:48:d2:5a:2d:9c:3d:81:f1:8c:93:10:93:6c:87:ca:
7c:44:93:e1:36:04:67:c9:e2:c2:a2:da:d2:2a:d3:45:3c:45:
a6:8d:f5:06:3d:b7:d2:21:ea:1b:14:01:92:e5:83:cc:72:32:
cc:5e:a4:be:aa:2c:27:1d:d7:86:c7:c5:42:e4:00:e2:1a:e7:
b5:d4:53:08:6b:bd:9d:30:ef:49:49:6d:aa:f9:a0:19:4d:4c:
72:fa:4e:25:f0:f7:25:80:f9:ec:d3:d0:73:82:63:79:d1:37:
5d:8b:ba:c3:75:35:e1:0e:07:ef:f5:24:27:07:94:87:d2:13:
92:25:78:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:20:27 2025 by rpki-client