This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
File: Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json)
Hash identifier: fcfMO4wrYaexUJr8E6QlKOM6KzEdsdY95+Tsqro+Z68=
Subject key identifier: FC:5B:26:8A:24:40:F4:44:7F:89:C7:41:D0:85:58:74:5C:4B:86:27
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial: 05FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
Manifest number: 05F4
Signing time: Mon 22 Dec 2025 22:05:32 +0000
Manifest this update: Mon 22 Dec 2025 22:05:32 +0000
Manifest next update: Mon 29 Dec 2025 22:05:32 +0000
Files and hashes: 1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: HHCQQ6AWVsO7Fu96U9A28yQm0o7IVBPm9qPuhnemjvI=)
2: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: GHWxrMyj8cTLBR3x3Zxqpb0ny9iM0klScYyqOL/kuUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1534 (0x5fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Validity
Not Before: Dec 22 22:05:32 2025 GMT
Not After : Dec 29 22:05:32 2025 GMT
Subject: CN=6949c0ac-bd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:e5:37:9f:db:a6:0e:22:d8:33:2f:4b:3c:
b4:97:e3:69:14:f5:28:cd:ca:de:a5:ef:ba:af:e0:
31:9a:0f:91:25:0f:2e:54:0b:1f:f1:ac:d5:1a:cc:
e5:e8:80:cc:bc:5e:6c:01:94:9d:52:52:05:b2:4f:
10:9f:a1:2f:7a:91:8f:51:45:86:8b:a6:7b:76:b3:
e0:e7:f2:48:be:08:93:0b:51:33:01:20:4e:77:74:
2b:4f:61:1d:c9:9e:35:9e:f0:4a:de:10:db:da:82:
04:46:8f:27:dc:ad:60:0d:d0:2d:3e:c3:6a:93:7b:
c7:6d:3c:d2:7f:fc:d8:87:41:3f:ee:ec:8e:bc:40:
2a:54:6b:27:11:fe:b4:c0:46:d0:ce:9a:bf:70:46:
bf:45:06:3a:11:ad:20:a6:d7:ab:c4:66:da:7e:52:
92:04:7a:67:73:e8:a1:87:cf:ab:15:b7:ab:78:8d:
24:05:45:4e:a2:98:29:a8:2c:24:1d:39:81:13:39:
fe:81:c8:17:2a:d7:b7:78:25:e4:67:9d:34:61:e5:
68:94:04:5f:b3:a4:70:15:c4:83:53:c6:bd:d7:76:
fb:bb:65:46:05:31:87:42:90:06:f4:52:d1:02:22:
eb:a0:91:c9:71:2f:77:e8:b3:57:f3:52:26:da:f9:
c1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5B:26:8A:24:40:F4:44:7F:89:C7:41:D0:85:58:74:5C:4B:86:27
X509v3 Authority Key Identifier:
keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a4:26:37:ad:d1:5f:24:18:99:e9:44:ee:82:12:8e:25:3c:
ed:c2:87:ee:a4:b2:15:d0:4c:dc:68:e6:2a:3c:15:b4:38:08:
37:a0:dd:55:9b:f1:82:06:5b:5f:72:34:a7:29:89:42:4b:b4:
b8:5e:26:89:a3:d2:4f:34:aa:7e:70:5b:e5:0d:21:7e:51:79:
4d:55:bb:b1:bc:ab:b1:07:1c:b4:64:91:64:cc:55:db:6e:11:
7f:8f:5a:07:04:5f:ad:0c:f7:88:99:46:f3:ef:10:fc:29:96:
05:be:f7:85:d5:e3:1d:e3:99:93:ad:bf:b9:45:9a:d7:16:18:
ce:ba:89:00:27:b1:88:0a:75:ee:d1:67:16:f0:95:b0:ee:24:
48:ce:69:75:04:a5:b9:1a:e6:8d:a8:7d:56:6b:a7:ad:92:8d:
ca:6a:33:7d:50:a4:7e:82:5e:f8:3e:b6:70:73:4a:e0:d6:3c:
cc:62:df:b0:11:f4:c5:73:68:42:31:ed:1d:07:81:d9:e9:f3:
8f:be:30:a0:bd:ce:29:69:6c:09:90:1a:3d:21:62:ea:78:6f:
55:9a:a2:8c:b4:60:02:a4:71:09:4b:83:73:a0:61:15:b1:71:
e9:4c:a5:c1:eb:17:e0:23:82:e4:16:52:1b:cf:1a:bf:0a:23:
53:4c:66:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:08:52 2025 by rpki-client