This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft
File: JSQuExmXg1v8mxgEBceXxiiUR-c.mft (raw, json)
Hash identifier: 1FKW4yEpSHKU21/PAdUk1A6rKVLrnNa4cvVmTFt3fCI=
Subject key identifier: AB:68:3B:86:A8:98:47:23:11:00:98:7A:A0:54:EA:4C:E9:61:23:98
Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7
Certificate issuer: /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft
Manifest number: 016B
Signing time: Tue 23 Dec 2025 02:58:37 +0000
Manifest this update: Tue 23 Dec 2025 02:58:37 +0000
Manifest next update: Tue 30 Dec 2025 02:58:37 +0000
Files and hashes: 1: JSQuExmXg1v8mxgEBceXxiiUR-c.crl (hash: e0uUk6jTEWFSyxn9zIPQrPT10ud3OPfLbCugNFfuFIE=)
2: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (hash: c6SlXvh5jnzbFaQ7XL8WHzhEyzH6pjJKr/W4VmAYxxo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl
rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91388E0, serialNumber=25242E131997835BFC9B180405C797C6289447E7
Validity
Not Before: Dec 23 02:58:37 2025 GMT
Not After : Dec 30 02:58:37 2025 GMT
Subject: CN=694a055d-0306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:86:95:35:12:c4:d3:0f:61:57:4a:68:1d:d2:
2f:0c:bd:ef:a0:65:6f:cf:5e:42:3f:78:05:73:35:
04:85:21:ca:39:0b:a0:f4:35:b7:25:36:54:fe:e7:
29:66:3c:df:8a:65:48:a9:d3:f4:15:98:50:91:39:
fd:f5:1d:e1:b6:15:57:ce:45:28:47:eb:f8:e6:28:
ea:e6:51:79:4e:cb:8a:a5:4d:65:a2:d7:68:71:90:
97:40:41:32:9d:0f:3f:e1:85:f6:aa:c5:8a:e7:96:
b4:ac:21:79:03:2a:ea:0e:a0:87:5a:7f:32:bc:a5:
da:3a:7c:af:4d:ac:1e:f8:ce:04:a3:26:1e:b1:96:
b1:8e:0a:be:34:06:8f:d0:88:e8:f7:91:44:5f:b3:
2c:d3:f1:e3:50:b6:0b:80:37:1c:02:ad:14:48:e6:
f2:63:05:8b:a1:f6:7b:eb:18:5e:18:dc:62:02:7f:
fb:f3:d7:9c:92:8e:44:ac:39:5b:0e:17:b9:78:fa:
42:bb:dd:e2:b1:f2:a4:9e:44:23:1f:47:36:b2:93:
c6:08:af:d1:c1:7b:93:10:dc:2c:e0:85:1f:b8:9a:
3a:87:b1:50:43:97:16:fd:f9:06:25:1a:f0:e7:94:
83:46:71:5e:e8:97:a6:24:e3:33:40:78:5a:bd:1d:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:68:3B:86:A8:98:47:23:11:00:98:7A:A0:54:EA:4C:E9:61:23:98
X509v3 Authority Key Identifier:
keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:73:cb:ee:26:1d:a0:79:81:82:b1:cf:6b:9a:31:c3:77:23:
3d:8e:2c:d7:dc:eb:fa:0e:e7:26:a7:68:73:a5:8e:b1:0a:fd:
99:95:4b:a2:66:ca:0c:0d:15:e3:3f:3a:bd:d6:be:91:ac:36:
81:13:74:37:bc:a8:40:43:23:c2:37:ad:69:10:9c:63:c8:e2:
e1:1b:55:3b:d3:3e:91:fa:8d:db:9a:81:4b:18:ce:d2:73:2d:
ab:f8:ae:37:93:c1:00:bc:52:d4:b0:03:79:7e:75:29:0d:7b:
f1:61:dd:fb:34:f6:24:75:06:b2:b8:68:0b:a3:e7:ee:b0:f0:
fb:db:96:f0:af:ef:0e:73:36:04:d4:62:4d:a2:ec:c7:0a:d6:
f1:9f:3b:43:91:84:36:3c:c6:99:9b:39:3f:35:25:b2:84:57:
cf:8a:2a:ca:cf:47:5a:4e:81:aa:b7:10:61:6b:7d:a8:53:bf:
37:7b:a9:d4:1a:3f:16:7a:ab:63:57:63:25:6d:4a:88:ec:44:
d4:19:bc:ce:49:e9:88:3f:41:18:91:ae:1c:c5:55:fa:0e:12:
a0:cf:af:eb:8c:aa:cc:1a:46:31:3b:57:03:99:6a:cf:e7:52:
c1:d2:b9:3a:af:46:e3:2b:39:8a:87:04:c2:b3:5e:1c:e7:26:
fa:fa:27:d5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg4RTAxMTAvBgNVBAUTKDI1MjQyRTEzMTk5NzgzNUJGQzlCMTgwNDA1Qzc5N0M2
Mjg5NDQ3RTcwHhcNMjUxMjIzMDI1ODM3WhcNMjUxMjMwMDI1ODM3WjAYMRYwFAYD
VQQDDA02OTRhMDU1ZC0wMzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4IaVNRLE0w9hV0poHdIvDL3voGVvz15CP3gFczUEhSHKOQug9DW3JTZU/ucp
ZjzfimVIqdP0FZhQkTn99R3hthVXzkUoR+v45ijq5lF5TsuKpU1lotdocZCXQEEy
nQ8/4YX2qsWK55a0rCF5AyrqDqCHWn8yvKXaOnyvTawe+M4EoyYesZaxjgq+NAaP
0Ijo95FEX7Ms0/HjULYLgDccAq0USObyYwWLofZ76xheGNxiAn/789ecko5ErDlb
Dhe5ePpCu93isfKknkQjH0c2spPGCK/RwXuTENws4IUfuJo6h7FQQ5cW/fkGJRrw
55SDRnFe6JemJOMzQHhavR3QmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtoO4ao
mEcjEQCYeqBU6kzpYSOYMB8GA1UdIwQYMBaAFCUkLhMZl4Nb/JsYBAXHl8YolEfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC80Q0JCMUIzMkI4
NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcxdjhteGdFQmNlWHhpaVVS
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0pTUXVFeG1YZzF2OG14Z0VCY2VYeGlpVVItYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODhFMC80Q0JCMUIzMkI4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcx
djhteGdFQmNlWHhpaVVSLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZc8vuJh2geYGCsc9rmjHDdyM9jizX3Ov6Ducmp2hzpY6xCv2ZlUui
ZsoMDRXjPzq91r6RrDaBE3Q3vKhAQyPCN61pEJxjyOLhG1U70z6R+o3bmoFLGM7S
cy2r+K43k8EAvFLUsAN5fnUpDXvxYd37NPYkdQayuGgLo+fusPD725bwr+8OczYE
1GJNouzHCtbxnztDkYQ2PMaZmzk/NSWyhFfPiirKz0daToGqtxBha32oU783e6nU
Gj8WeqtjV2MlbUqI7ETUGbzOSemIP0EYka4cxVX6DhKgz6/rjKrMGkYxO1cDmWrP
51LB0rk6r0bjKzmKhwTCs14c5yb6+ifV
-----END CERTIFICATE-----
Generated at Thu Dec 25 03:00:17 2025 by rpki-client