This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
File: js-frkP30c1uEgKDTA9BrMG-HDg.mft (raw, json)
Hash identifier: uYkIkQ4CziI+MIEqG9HztcBw1Hf7Uo+95jIxjZe3ylg=
Subject key identifier: 9B:E7:28:1B:A3:ED:7F:A7:03:81:44:E9:6C:4A:69:F9:8C:47:2E:A1
Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38
Certificate issuer: /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
Certificate serial: 0316
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
Manifest number: 0307
Signing time: Wed 10 Dec 2025 23:33:44 +0000
Manifest this update: Wed 10 Dec 2025 23:33:44 +0000
Manifest next update: Wed 17 Dec 2025 23:33:44 +0000
Files and hashes: 1: js-frkP30c1uEgKDTA9BrMG-HDg.crl (hash: CI84wBi1KOsFLuTRjqIqpwPCe8yy55uW4ua/BqlrRRg=)
2: 30FD2F34717711ED807F3C30C4F9AE02.roa (hash: Z1+2srjHcffoSnsNHW/6kMtu1QEBMk8cg+vN7B6fKN0=)
3: 31A9E86E717711ED807F3C30C4F9AE02.roa (hash: b/uz4uUGbldWv98MGi9g31ZiA1AfDx60qTlS76qiVkw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl
rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 23:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 790 (0x316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136592, serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
Validity
Not Before: Dec 10 23:33:44 2025 GMT
Not After : Dec 17 23:33:44 2025 GMT
Subject: CN=693a0358-6670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:02:cc:f5:a7:c8:b3:ef:48:d3:df:82:ec:
ba:af:95:cc:fc:e6:3c:34:ec:c3:16:05:71:fe:27:
1c:49:75:c9:5e:69:86:ea:7c:d6:0c:71:4b:54:b9:
e6:52:9e:98:f5:a1:8f:7c:b9:6b:88:3c:17:1f:ed:
97:94:5a:8d:89:4d:50:61:f9:b8:56:b7:a0:87:3f:
bb:39:2f:9d:17:ee:b1:b5:4c:9e:fb:c6:39:0d:66:
bf:0e:71:6a:65:99:b2:c5:e4:45:b2:88:cc:16:cc:
dc:8c:45:03:41:0c:44:04:de:2e:f7:21:07:ee:47:
71:89:cb:db:32:35:68:bc:82:d7:f7:8f:a1:31:a2:
bb:f9:00:d1:ee:79:e3:e7:dc:60:55:ce:27:fc:aa:
82:6e:1f:ab:53:6e:55:24:e6:7c:52:66:eb:24:04:
7f:61:65:d2:d0:c2:41:28:88:86:0a:10:0f:57:16:
51:24:f2:fd:a6:31:2d:6a:af:9f:8c:20:96:f5:22:
7b:37:59:09:0a:8c:98:8f:a5:9f:12:ff:9f:bc:dc:
1d:f3:39:e8:17:35:d1:35:f6:29:d0:37:43:9e:c7:
44:70:c9:ce:56:75:ea:aa:9b:84:8d:9e:37:9c:1a:
1e:8e:8d:d8:71:70:48:d4:a3:85:93:66:1c:52:cf:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E7:28:1B:A3:ED:7F:A7:03:81:44:E9:6C:4A:69:F9:8C:47:2E:A1
X509v3 Authority Key Identifier:
keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:32:2d:13:4c:8d:2b:e6:52:86:51:31:4d:5c:c4:5d:ab:96:
88:53:5b:ce:9b:f4:ff:eb:3c:b3:e4:39:73:f6:9f:8a:67:c8:
66:57:70:28:ea:91:08:85:27:43:16:0f:02:66:15:80:34:2e:
59:6d:61:41:b7:9a:17:ad:4c:45:95:93:39:3e:3b:2f:b1:3d:
fe:ca:32:cf:f4:e1:51:c2:15:2f:7c:f6:36:90:3d:8b:13:c5:
e9:bd:4e:72:7a:0b:5d:40:49:49:a6:39:a2:be:00:0d:5b:0f:
b9:b6:9b:a4:43:1b:9c:63:32:57:d7:03:67:c9:3c:d8:ad:45:
08:56:78:f0:a4:73:b9:1d:ff:9b:bf:61:ce:e2:43:d4:de:55:
1f:22:eb:84:4b:0a:0e:6a:f7:7a:f7:bd:d3:6c:7b:ee:a5:3f:
eb:2e:3c:35:ff:9c:52:0d:93:c5:b6:b6:cf:c4:b7:61:cf:09:
07:2b:5c:b5:09:dc:01:00:c3:f0:54:75:2d:6b:da:c0:43:24:
2e:6b:d1:ba:a0:12:a2:31:36:2f:a5:16:14:b7:31:50:72:e8:
75:05:59:fc:c5:bd:66:4c:10:0d:fb:8a:84:83:fb:6f:2d:7f:
ce:8e:56:a6:34:69:53:b6:4c:47:3e:ca:9f:08:56:57:f8:6e:
2b:db:40:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 08:02:22 2025 by rpki-client