This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json)
Hash identifier: M8zT/ZxkLoWxRDO3hncJDVKMu0BZspQbqAl9gScKrLA=
Subject key identifier: D8:08:CF:F4:A4:AC:66:08:C0:A7:FD:D4:3A:60:3F:2C:58:84:27:94
Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Certificate serial: 051E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
Manifest number: 0513
Signing time: Sun 14 Dec 2025 22:55:29 +0000
Manifest this update: Sun 14 Dec 2025 22:55:28 +0000
Manifest next update: Sun 21 Dec 2025 22:55:28 +0000
Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: lPaAtgWhr+oBtgVJ/6Owfjxu1+jo6shoMBIfFhBbfn0=)
2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=)
3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 22:55:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1310 (0x51e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Validity
Not Before: Dec 14 22:55:28 2025 GMT
Not After : Dec 21 22:55:28 2025 GMT
Subject: CN=693f4061-1dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:a2:2e:3a:fe:e9:fa:80:2e:3c:28:52:de:
04:f3:a3:ee:c5:00:a8:46:00:88:fa:64:5c:98:d4:
43:1e:bf:d2:f1:4b:cc:c1:42:71:ca:5e:88:bb:0b:
b4:7e:60:53:6e:12:49:d2:bb:93:89:86:b9:e6:fe:
f9:74:50:96:f9:9c:01:51:d2:60:87:24:46:8c:37:
5d:fe:22:53:24:d0:e7:25:6a:a1:d5:ba:31:54:dd:
39:d2:b6:b7:c6:6d:de:e7:54:58:f3:40:95:f4:ca:
4b:c9:61:2d:f3:86:e8:f7:e5:d6:42:bc:dc:fc:a5:
ed:9d:45:b9:39:33:3b:58:7e:c6:10:ff:57:0b:5d:
a8:6f:e5:f4:d8:6b:85:cd:ce:0c:ad:36:b5:b8:f3:
ba:02:09:e8:95:56:c9:a4:54:0f:d6:6d:ff:fc:a6:
72:a0:c0:4a:dc:d0:d6:e9:2b:55:1f:8f:b6:29:fd:
dc:52:1b:3d:d4:53:1d:f0:c5:19:4d:ef:6b:22:3c:
f2:0e:33:b7:88:21:bc:43:34:82:7e:a3:4b:b8:ca:
37:2c:4c:0f:22:f1:57:52:51:69:8c:e8:fe:96:3c:
45:b1:89:45:d4:3c:68:c6:f6:d6:48:2d:23:96:4e:
c4:15:f9:3d:48:d1:76:06:b3:c8:41:32:95:6f:a6:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:08:CF:F4:A4:AC:66:08:C0:A7:FD:D4:3A:60:3F:2C:58:84:27:94
X509v3 Authority Key Identifier:
keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:20:c2:2c:eb:26:9c:af:9a:3a:0b:d5:fb:f6:56:5e:3b:69:
23:2c:d1:0b:8d:7e:d5:02:f4:38:e4:62:61:60:a6:28:9c:59:
b6:01:96:58:de:cd:92:86:49:9f:b7:f7:eb:36:32:d8:79:c6:
3d:dd:b9:0d:c6:e2:ea:c5:32:bd:b9:0a:4e:6d:60:c1:f1:8b:
0d:fe:ba:43:43:7c:ef:8a:31:ba:2c:01:3a:34:e4:76:b4:12:
de:a4:ad:78:0e:80:22:74:66:07:6f:4b:37:10:69:6f:f2:60:
13:cb:0d:b2:fa:6f:80:15:82:e6:3d:e2:bb:56:5e:1f:33:1f:
6f:9e:a7:aa:9d:c7:61:cd:46:c7:92:3a:92:b1:bc:2c:5a:7e:
3d:04:34:08:54:03:7d:1c:a5:e2:4a:1f:cc:07:51:02:36:90:
54:1d:2a:bc:b6:17:25:46:9a:dd:21:21:37:93:fd:88:c5:c1:
2a:e0:47:e3:07:7b:99:9f:36:0f:e4:2d:e0:61:87:5a:ba:f3:
22:e4:33:82:53:8c:d7:dd:0b:c5:bd:30:12:07:9a:40:6c:03:
10:0d:9c:dd:0b:7a:ed:e1:d3:b4:df:48:28:1f:e2:e0:ad:a4:
5c:31:b9:ff:50:31:98:c7:6f:10:df:a1:e4:51:83:f8:2b:a8:
3e:3c:82:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 12:51:08 2025 by rpki-client