This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
File: J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json)
Hash identifier: eQQyt0wUDd3yy2FEzC8WxXoWxIICAn/PNewpShUTdBg=
Subject key identifier: B5:BC:FA:B3:A8:21:1F:72:C7:65:DC:C8:B7:B4:05:B2:A5:08:CB:2B
Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2
Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
Certificate serial: 0CA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
Manifest number: 0C92
Signing time: Mon 22 Dec 2025 18:03:34 +0000
Manifest this update: Mon 22 Dec 2025 18:03:34 +0000
Manifest next update: Mon 29 Dec 2025 18:03:34 +0000
Files and hashes: 1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: u00NV++GviM+VGk41eY/zxuE2dPjt90VZFMZ/9GqW5M=)
2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: fPyMz9KhC5TO2GXmYwuNL/8fF1nSLqleV8d4Bv+swGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl
rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3234 (0xca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
Validity
Not Before: Dec 22 18:03:34 2025 GMT
Not After : Dec 29 18:03:34 2025 GMT
Subject: CN=694987f6-838c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:55:bf:af:fc:e6:e9:f3:18:5d:09:a0:a7:
19:8c:3f:dd:2d:ff:f8:d2:72:bd:32:05:d5:7c:01:
45:c2:33:e5:47:86:42:8b:79:bc:14:ac:a8:10:8f:
f8:79:1f:90:61:73:e5:6b:f7:ef:82:b7:67:3e:d7:
9b:5b:b7:3d:dc:c5:34:5c:53:81:8f:85:ef:a9:87:
9f:2f:2e:8b:78:1d:05:84:9b:6b:b7:7c:a5:e9:fc:
bb:97:be:26:a5:e4:37:b8:9c:77:0b:ad:e2:73:f7:
2c:42:e9:64:71:cb:f8:68:0a:ec:32:1c:4b:b5:8b:
c4:9d:66:4f:44:26:65:5d:20:0d:9f:a5:d6:4f:ad:
b0:e0:19:ba:39:fb:01:70:e0:82:ca:5d:ff:e0:e1:
0a:42:17:cb:88:09:8e:e1:24:9f:51:c5:73:08:10:
f1:38:fa:17:6d:5e:cc:0e:34:01:48:2c:12:47:73:
23:0e:a9:bd:2b:aa:8c:e1:ac:36:80:f6:bd:a6:d5:
0d:bd:a3:a4:3b:52:c9:10:bb:76:cc:1b:92:58:4a:
b9:4b:dc:86:a9:a5:9e:2f:4c:ac:2a:7c:02:ab:a9:
02:98:93:31:45:63:34:7f:ed:7b:99:bd:56:a1:b0:
d9:9e:2e:76:70:9a:80:68:1c:b3:09:c9:dd:4c:ed:
53:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BC:FA:B3:A8:21:1F:72:C7:65:DC:C8:B7:B4:05:B2:A5:08:CB:2B
X509v3 Authority Key Identifier:
keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:13:4e:d1:65:c2:9e:d4:27:01:dd:59:a3:84:1f:26:eb:29:
4f:17:eb:7d:07:66:e8:1b:4b:de:87:23:b8:d4:42:de:b1:43:
47:1c:47:5c:28:e9:41:ff:f9:37:95:8c:5c:f3:66:8e:42:e3:
9a:40:bd:6d:c3:53:6a:81:1a:de:85:22:c0:b0:9f:8d:18:7e:
48:55:2c:4b:1e:06:bd:47:2b:69:71:fe:04:ad:bc:31:45:77:
ce:6d:0e:1a:4b:c6:8e:2e:7e:3d:c2:f6:5d:b7:75:0e:0a:8c:
5b:9f:7c:b2:61:67:35:2e:be:5c:99:3b:cc:1c:73:5e:92:bf:
61:55:9e:ed:be:5b:0e:44:dd:64:81:42:14:97:68:29:81:e1:
a7:97:96:17:86:a4:72:b9:73:72:83:5a:eb:57:f5:b2:4f:8a:
5a:07:2b:1e:aa:43:44:b0:3f:a7:b1:c2:8b:28:66:cf:61:22:
e6:0c:db:ca:ac:a7:4f:15:18:f0:dc:74:5d:f6:bf:60:1f:31:
21:c4:29:2b:86:d3:6b:fd:79:73:df:4f:70:70:a5:59:38:45:
32:00:08:0d:db:dd:d7:0e:35:34:49:39:7f:13:80:5e:f2:50:
33:d1:d5:3a:81:5c:f4:ff:04:d2:42:ee:ea:b9:0b:96:08:e9:
b8:9b:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:39 2025 by rpki-client