This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
File: JhOQ197eXRxAsfPigPOKCNqv3N4.mft (raw, json)
Hash identifier: bzXr8wBKfQGUNoG7LqQr2kgJVhdq5TTALAC3OVkdED8=
Subject key identifier: 51:0C:7C:D9:31:AB:83:DF:EA:D9:43:AF:7A:F2:9E:5E:C7:D1:61:01
Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
Certificate issuer: /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Certificate serial: 0219
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
Manifest number: 0215
Signing time: Tue 23 Dec 2025 01:15:01 +0000
Manifest this update: Tue 23 Dec 2025 01:15:01 +0000
Manifest next update: Tue 30 Dec 2025 01:15:01 +0000
Files and hashes: 1: JhOQ197eXRxAsfPigPOKCNqv3N4.crl (hash: Oi7wC46sSS/BBWU+F+aaNtCdEsfr7U1uPnwd7Yw5M4g=)
2: 738195EEB11811ED997EA457C4F9AE02.roa (hash: Dw2hET0XKkDZSavlAvohxfv8vlQxG1CLusRdITgzUP8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E367, serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Validity
Not Before: Dec 23 01:15:01 2025 GMT
Not After : Dec 30 01:15:01 2025 GMT
Subject: CN=6949ed15-9e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:e1:ca:f6:44:3a:ba:53:88:fd:ab:01:0d:
45:d5:e3:f5:63:11:60:e6:73:46:3b:37:2e:e0:9f:
53:eb:ef:8e:51:47:50:cc:81:9d:cd:1c:4f:48:2f:
25:43:68:57:e8:06:fe:a6:66:a3:6e:da:c3:21:83:
f3:10:ab:48:63:05:f1:a9:ea:e0:1e:1a:50:59:93:
b9:e1:b7:c1:61:a7:24:c9:42:fe:f4:27:fb:2d:37:
51:39:4d:16:e1:14:a3:04:a4:9e:7b:fb:8a:41:e1:
77:0e:02:b0:a8:fd:4f:3d:b4:7c:76:0b:ce:43:af:
d3:a2:b5:42:8d:f6:89:d0:18:c8:e7:c3:e9:9d:a2:
74:14:8f:cd:34:82:5d:48:e7:af:25:41:05:1a:2b:
39:11:21:b9:09:c3:5b:bb:bf:90:41:ba:7a:5c:be:
43:13:01:12:f5:26:50:d1:fb:78:06:1d:2d:53:78:
60:66:2f:2d:26:d2:6f:f0:8b:3c:72:38:a7:88:3c:
46:d7:57:4a:83:ed:cf:0b:c7:b2:0e:a2:c0:f5:88:
5a:45:f9:b4:bb:9d:ac:a0:52:fe:a0:95:43:f1:4c:
45:f1:e3:a9:c7:48:9b:e4:a5:81:08:13:95:22:ef:
be:df:25:28:3f:e8:31:03:1e:8f:4a:52:08:d4:a9:
76:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0C:7C:D9:31:AB:83:DF:EA:D9:43:AF:7A:F2:9E:5E:C7:D1:61:01
X509v3 Authority Key Identifier:
keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:71:34:e9:09:a2:0e:d3:f2:f9:63:d6:4c:0d:81:8f:d7:c9:
74:93:59:e7:de:d2:5d:4e:95:39:86:e8:46:fe:35:9e:9b:92:
26:eb:e9:0f:db:ea:d1:f0:7a:5f:8e:3d:3c:02:42:c6:97:98:
24:cc:22:66:c5:b6:26:0c:ea:6f:39:c0:cf:06:cd:4d:7b:16:
f8:46:73:0a:5e:4c:bc:cc:d2:21:e5:2b:d8:7c:c3:3f:1e:cd:
05:de:58:0e:47:3c:20:91:b5:24:2a:2f:7e:ae:49:ef:ef:0e:
f9:4e:2a:34:25:46:0a:d4:36:02:10:1f:61:77:fc:00:f1:36:
6f:35:97:a2:d0:fb:63:98:6c:b1:0c:4e:bd:fa:bc:71:df:5e:
4d:7d:d3:a1:01:ea:2d:10:d1:24:5e:33:ed:0a:d8:da:6a:6f:
c9:cf:80:09:44:d6:9c:f5:a4:2a:f8:9e:81:c4:09:b1:3d:8b:
3c:3e:3b:8a:8d:5f:97:ba:c7:1f:f4:d9:e5:3e:de:43:c2:bf:
c4:ab:5a:a8:e1:52:2c:85:7f:a8:f6:93:f8:d5:bc:d8:6a:2a:
bf:fb:2c:49:b0:e5:0a:26:4c:03:f1:84:1e:28:36:c3:fe:5b:
c4:1d:fd:48:15:66:d6:8f:ab:84:b5:50:41:f6:62:d9:8e:8f:
e2:35:cc:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkUzNjcxMTAvBgNVBAUTKDI2MTM5MEQ3REVERTVEMUM0MEIxRjNFMjgwRjM4QTA4
REFBRkRDREUwHhcNMjUxMjIzMDExNTAxWhcNMjUxMjMwMDExNTAxWjAYMRYwFAYD
VQQDDA02OTQ5ZWQxNS05ZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr43hyvZEOrpTiP2rAQ1F1eP1YxFg5nNGOzcu4J9T6++OUUdQzIGdzRxPSC8l
Q2hX6Ab+pmajbtrDIYPzEKtIYwXxqergHhpQWZO54bfBYackyUL+9Cf7LTdROU0W
4RSjBKSee/uKQeF3DgKwqP1PPbR8dgvOQ6/TorVCjfaJ0BjI58PpnaJ0FI/NNIJd
SOevJUEFGis5ESG5CcNbu7+QQbp6XL5DEwES9SZQ0ft4Bh0tU3hgZi8tJtJv8Is8
cjiniDxG11dKg+3PC8eyDqLA9YhaRfm0u52soFL+oJVD8UxF8eOpx0ib5KWBCBOV
Iu++3yUoP+gxAx6PSlII1Kl2+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEMfNkx
q4Pf6tlDr3rynl7H0WEBMB8GA1UdIwQYMBaAFCYTkNfe3l0cQLHz4oDzigjar9ze
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTM2Ny82QkNFQ0UwQUFE
RjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhSeEFzZlBpZ1BPS0NOcXYz
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0poT1ExOTdlWFJ4QXNmUGlnUE9LQ05xdjNONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTM2Ny82QkNFQ0UwQUFERjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhS
eEFzZlBpZ1BPS0NOcXYzTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA0cTTpCaIO0/L5Y9ZMDYGP18l0k1nn3tJdTpU5huhG/jWem5Im6+kP
2+rR8Hpfjj08AkLGl5gkzCJmxbYmDOpvOcDPBs1Nexb4RnMKXky8zNIh5SvYfMM/
Hs0F3lgORzwgkbUkKi9+rknv7w75Tio0JUYK1DYCEB9hd/wA8TZvNZei0PtjmGyx
DE69+rxx315NfdOhAeotENEkXjPtCtjaam/Jz4AJRNac9aQq+J6BxAmxPYs8PjuK
jV+Xuscf9NnlPt5Dwr/Eq1qo4VIshX+o9pP41bzYaiq/+yxJsOUKJkwD8YQeKDbD
/lvEHf1IFWbWj6uEtVBB9mLZjo/iNcwh
-----END CERTIFICATE-----
Generated at Tue Dec 23 03:19:36 2025 by rpki-client