This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
File: jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft (raw, json)
Hash identifier: 5gTpDrIvGBqc2JnFIOc2Pe0V2Iv4hjhqEMydVi9HyJY=
Subject key identifier: 4D:58:FB:6C:90:0E:5B:6F:0C:F8:37:F6:6B:C9:0E:63:DB:F8:92:6D
Authority key identifier: 8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
Certificate issuer: /CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
Manifest number: 0264
Signing time: Sun 21 Dec 2025 00:51:57 +0000
Manifest this update: Sun 21 Dec 2025 00:51:57 +0000
Manifest next update: Sun 28 Dec 2025 00:51:57 +0000
Files and hashes: 1: jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl (hash: yaC9JRT3swjgNIh0tjKOw0MC+V7GJDFyI56AL8a8/eA=)
2: 9A859F8A480611EDBC63AD52C4F9AE02.roa (hash: WXoVKsbEpghMIIdNaEQbkL+bcA9WkVBDLvgK1gCCHVE=)
3: 001EB4A284C911EFA902172CC4F9AE02.roa (hash: CelPtehNETCHmDVj2SG2Ea8dFXqnAorjh7+Ir6OBG24=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 00:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B202, serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Validity
Not Before: Dec 21 00:51:57 2025 GMT
Not After : Dec 28 00:51:57 2025 GMT
Subject: CN=694744ad-4020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b5:34:c6:cb:49:76:a8:b3:e2:58:74:97:91:
56:0e:8b:ff:25:2c:82:8a:95:9f:65:f8:2a:4b:c4:
26:65:d6:fd:e8:2b:eb:b3:dd:1e:e6:dc:d0:6b:31:
26:d6:5c:d7:04:e1:45:39:2e:11:69:cf:cd:ac:ac:
a1:a7:d9:19:e2:39:d4:59:25:98:72:66:da:78:c5:
d5:9c:23:92:e6:4b:8d:b1:11:16:87:5e:3f:2c:c7:
8b:32:8d:4a:4e:37:21:38:a9:e1:22:b4:26:71:c1:
48:1f:35:c2:13:2f:5c:51:1b:01:1d:a1:8b:8c:08:
7d:3a:a7:a0:aa:7e:6e:32:f2:f3:a2:df:a3:26:5f:
bd:7e:4e:1d:51:6d:e2:8a:ba:81:66:dc:6a:53:d3:
ed:7f:a2:d5:0e:99:61:6a:01:93:d7:a4:c9:a1:c0:
95:07:6c:c7:5a:0e:d0:2f:27:d1:d1:96:06:32:b9:
a4:0d:c8:73:aa:18:87:52:89:3e:3a:63:c1:c4:fe:
e7:c5:e4:c2:e1:d4:c9:e1:8a:49:6b:3a:4e:c4:7d:
a7:56:62:68:2e:1f:db:81:46:ea:cf:62:0d:7b:c9:
2a:07:3a:5f:b4:ab:d8:da:96:42:9f:bc:4f:2f:68:
33:1c:b0:05:93:fb:4e:40:85:94:5b:64:17:3a:62:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:58:FB:6C:90:0E:5B:6F:0C:F8:37:F6:6B:C9:0E:63:DB:F8:92:6D
X509v3 Authority Key Identifier:
keyid:8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:f1:b6:d6:76:f5:0e:fb:2d:7f:13:94:27:84:90:83:69:f0:
8e:a1:43:54:52:e9:61:64:a8:e0:0f:d0:2f:54:ea:7d:65:1b:
18:b9:cc:f4:4e:21:7a:ff:9f:ac:f3:61:4c:36:62:0e:7a:ba:
ec:47:fc:76:65:d4:78:3d:ef:bd:38:af:c1:e2:b9:2e:7b:e4:
7d:f0:30:73:d0:d4:45:25:58:a9:7e:4a:f1:90:fb:1f:2a:e0:
07:41:c2:c9:8b:2a:d2:79:00:e0:21:6c:09:90:4b:76:99:1c:
1e:b5:2c:f4:5d:e0:1a:4b:88:cc:fb:6f:2c:3a:70:88:4e:43:
fd:2b:30:25:65:d0:23:7a:fa:e9:53:87:38:eb:fa:e1:d7:a8:
2f:7e:2e:10:cd:b1:14:a7:bd:f1:a7:ef:d4:83:4a:b5:e6:61:
7a:d1:cf:9e:e1:f3:cd:54:e1:a3:8e:68:14:dd:29:ef:e4:d0:
93:d2:d3:88:d9:c0:60:8c:47:89:d3:9e:c3:d4:a4:61:12:a5:
4e:50:eb:3b:7b:1c:96:6f:15:19:09:05:2d:90:d1:2f:d1:b3:
d8:ad:90:74:a1:14:58:93:c7:07:cd:ae:24:ee:91:a9:5d:a4:
5f:27:85:3e:57:a9:52:c4:fe:a1:f2:5d:5f:c4:2b:fd:00:dd:
59:c5:bc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:34:08 2025 by rpki-client