This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
File: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft (raw, json)
Hash identifier: bC4UxGdlVvF32o9VonEzzeoFeX8BfXdrwyfNovy1aq4=
Subject key identifier: 1B:CF:0D:13:96:C6:94:68:98:B3:08:AE:D4:5F:3D:BC:30:D2:FB:27
Authority key identifier: FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E
Certificate issuer: /CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
Certificate serial: 04BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
Manifest number: 04AF
Signing time: Thu 18 Dec 2025 23:23:33 +0000
Manifest this update: Thu 18 Dec 2025 23:23:32 +0000
Manifest next update: Thu 25 Dec 2025 23:23:32 +0000
Files and hashes: 1: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl (hash: E6X5iy3Rx35qYwL6I5x9hB47keHeINWfX886smxcCjU=)
2: 3615B9806CB911EE91852F72C4F9AE02.roa (hash: oX7iVEw87PxrlXLRiZsATHbTumAb9Jcb4paecAnP08M=)
3: A46DD938EF8D11EEAF47227BC4F9AE02.roa (hash: ySDLsUnA1Px9ZdN4Rj4bZJvdBUg6R7IdLHrHlc350Os=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl
rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215 (0x4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FF2C, serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
Validity
Not Before: Dec 18 23:23:32 2025 GMT
Not After : Dec 25 23:23:32 2025 GMT
Subject: CN=69448cf5-471c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:ab:f0:f2:3b:17:61:fb:36:2b:8d:15:0a:
2f:70:88:d5:be:66:c8:b8:fc:a3:13:fa:f6:41:57:
c7:54:2b:83:cd:a2:45:6c:47:2b:98:a3:3e:9a:32:
93:49:54:30:97:44:88:9b:6c:88:7b:5d:fc:e7:e6:
88:87:f8:e6:44:03:cc:79:9e:08:4c:f3:e4:5d:5c:
cb:d8:0e:6f:eb:ff:7a:f2:2d:15:02:24:7b:58:55:
96:c3:ac:91:4f:1f:0f:a3:37:e2:d9:32:87:ad:42:
68:4d:fb:e2:0d:b1:78:fc:1a:1e:51:c3:b1:b8:2c:
9d:fc:93:5a:25:0e:c0:b9:f4:0f:0e:b2:3c:91:26:
93:42:5b:7d:37:08:ea:28:9b:c4:45:3c:0a:a1:f8:
df:16:1e:07:df:61:9c:d9:84:4e:ce:9c:80:f6:4f:
ca:c9:6a:f7:33:a2:9c:e5:41:7c:c4:51:27:1e:8e:
ab:76:17:e5:68:3e:aa:e5:5c:6c:e3:ca:65:e0:f4:
4f:f1:50:e1:cb:c8:41:6a:54:19:c9:d7:f8:ef:51:
87:79:1b:8e:24:2a:d1:ee:8d:58:5b:d6:7a:ae:a9:
c6:13:96:b2:2c:4e:65:73:10:f0:d5:c1:91:0f:55:
36:d7:5b:75:c1:f4:91:c8:58:c0:01:4e:43:bf:7b:
e2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CF:0D:13:96:C6:94:68:98:B3:08:AE:D4:5F:3D:BC:30:D2:FB:27
X509v3 Authority Key Identifier:
keyid:FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c7:ef:e6:9e:e2:2c:55:b3:14:8d:24:0d:4d:7c:cc:0a:fb:
3f:ba:1e:35:74:0c:1a:5f:e3:57:73:35:6b:ad:66:42:24:0c:
6d:20:08:12:78:81:0f:60:0b:35:f4:dc:80:31:b6:24:2b:d8:
ee:9c:cb:a7:4a:82:af:38:9a:4b:77:1f:01:cc:c9:82:14:36:
ca:b8:cf:b7:e3:e6:85:b9:73:db:fa:88:60:83:ec:bc:42:03:
3c:aa:9a:12:98:d0:6a:14:5b:4f:2d:d4:0d:7a:2b:9e:1c:33:
8b:ae:b1:14:21:e8:f6:d9:28:35:46:71:5f:ec:c2:ff:b6:0c:
27:58:f2:09:bf:33:d1:53:77:22:91:2e:cc:a4:6f:d7:71:e1:
74:8a:e3:cb:ae:98:e2:71:78:c5:ed:b5:b9:6f:f5:a3:b4:bc:
ee:34:8a:e6:1d:25:34:2a:d7:27:a8:4a:9c:45:03:6a:60:e7:
2b:42:44:c8:86:e0:0b:cc:e1:e4:a0:81:33:3e:c0:b8:d6:8e:
dd:3e:b1:bc:a3:65:0f:4c:b7:33:95:9c:f0:01:a9:0f:99:c0:
a0:a4:96:1f:2e:06:9f:c5:63:8f:d5:46:d9:96:9f:1b:42:75:
09:96:15:08:f9:5b:02:c6:43:6a:c7:e9:50:db:50:e5:b8:76:
92:a7:08:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:12:18 2025 by rpki-client