This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft
File: b-jBYY_6_7LM_1aejqkV2vpNTjY.mft (raw, json)
Hash identifier: XwZCYJ/XtMszZVoQbs7C7nR4ugOd2lA/BItUyQn1m3k=
Subject key identifier: 53:13:1F:0F:67:8F:E9:CF:2C:B2:DA:63:A8:0B:F7:99:B1:36:9A:C9
Authority key identifier: 6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36
Certificate issuer: /CN=A91232C2/serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft
Manifest number: 0140
Signing time: Tue 23 Dec 2025 03:22:49 +0000
Manifest this update: Tue 23 Dec 2025 03:22:49 +0000
Manifest next update: Tue 30 Dec 2025 03:22:49 +0000
Files and hashes: 1: b-jBYY_6_7LM_1aejqkV2vpNTjY.crl (hash: cl0G02rr5B//ovsQSnflZnbTl8SHR2AoQqbqqGFtnP4=)
2: 85035A64F0CD11EE8CC1FC16C4F9AE02.roa (hash: 9ZKq+nwt9P9nCI+BvZS/E6A1E5sodaBd/S4ZxhUXp0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl
rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91232C2, serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36
Validity
Not Before: Dec 23 03:22:49 2025 GMT
Not After : Dec 30 03:22:49 2025 GMT
Subject: CN=694a0b09-9f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:cb:10:18:c5:54:81:fe:54:b2:8d:50:c0:
29:91:1f:11:6f:e7:b6:65:e5:18:ba:c1:59:3e:41:
98:74:02:30:46:ab:4c:34:67:bc:12:e6:46:ad:e9:
20:3f:99:4a:7f:87:30:d6:2c:c6:9a:03:4a:ea:46:
41:50:6e:3f:54:b9:73:0d:c4:a3:24:e0:6a:ca:e3:
1c:97:a5:7c:4b:52:38:f2:45:3a:ac:9c:3c:18:7f:
06:dd:c4:77:91:62:c2:69:85:ed:12:a2:94:e4:f5:
ac:84:e8:d8:c9:75:40:b6:30:ae:13:12:18:cb:60:
da:76:b9:79:6f:0f:8b:2c:e6:53:55:3e:56:16:16:
37:7b:3a:04:3e:58:0a:cd:4c:4a:58:32:fd:5a:3c:
c4:c6:f4:f2:99:56:ec:e3:a5:0c:c5:43:12:b1:42:
c2:a9:59:8d:4b:31:f7:1a:25:49:a0:bb:27:40:b3:
bb:df:44:90:79:54:cd:bb:8f:22:12:86:dc:6a:30:
f9:52:73:a7:64:55:f8:8b:c8:30:fb:55:22:91:ba:
53:e5:11:ee:ad:5f:72:03:d4:53:24:cb:90:7b:83:
6f:e5:93:3d:c1:22:41:ef:f9:ba:e0:db:da:9a:44:
0e:24:99:c9:93:37:c6:90:9c:62:63:60:34:96:e2:
0a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:13:1F:0F:67:8F:E9:CF:2C:B2:DA:63:A8:0B:F7:99:B1:36:9A:C9
X509v3 Authority Key Identifier:
keyid:6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:ac:58:78:54:db:5c:b9:db:d3:26:3f:e1:54:85:7a:6e:8e:
04:b3:6e:ad:df:f5:a4:4c:f6:f6:5d:0e:b2:c2:a8:44:b6:38:
59:dd:4c:0c:5b:5e:16:da:13:8d:dc:de:26:95:d9:54:fa:6a:
7b:72:74:6b:89:84:3e:9f:65:18:f5:60:39:43:d6:2b:ac:a7:
f0:5b:43:5b:8e:4d:8f:da:15:d7:a7:30:da:cf:0d:d9:32:55:
5c:91:c8:76:86:a1:67:67:30:0a:6d:9a:58:32:8c:0a:7a:8c:
69:3e:a5:1f:e2:c6:5d:5a:4e:56:90:86:5a:76:39:ac:04:64:
68:d6:f3:8d:d5:6d:02:4a:f5:6b:f6:ea:2c:9c:07:9b:ca:33:
34:d6:3d:fb:4f:fe:77:76:d7:67:b1:06:7d:48:62:62:b9:78:
23:93:8e:6b:4a:81:15:7a:d9:01:8b:34:e4:e3:8e:d7:c3:4f:
b6:7f:7d:3a:2c:ca:0f:7a:6b:35:9e:bc:a1:0c:9e:cd:0d:4d:
94:7b:62:b5:e9:42:8d:4a:46:2f:f1:b9:37:54:c9:a0:d2:94:
c0:39:a6:12:59:41:e3:1c:4b:c5:0d:ee:10:06:2d:53:d0:6d:
9a:b4:da:b0:57:a5:b9:e5:49:bf:c9:be:58:54:05:a7:3e:4b:
6a:cd:03:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:23 2025 by rpki-client