This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
File: JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json)
Hash identifier: jVls/RkqZqw/1M4vQfDejNssVdpvP5tSeIxcQa4/nOk=
Subject key identifier: 7C:B3:73:00:65:6F:A3:C3:C2:27:6F:2B:60:4B:D6:B5:1E:4C:22:7B
Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Certificate serial: 255E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
Manifest number: 2548
Signing time: Mon 22 Dec 2025 15:35:22 +0000
Manifest this update: Mon 22 Dec 2025 15:35:21 +0000
Manifest next update: Mon 29 Dec 2025 15:35:21 +0000
Files and hashes: 1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: 80Sj1mZQSm/2JmLTOOPuzfdj6d0hDNVXI0cA7I2yw4E=)
2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: N5Vn59/DXOfi3X7rqOdzQLvOw6/oh8X23e/dgbXYsyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 15:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9566 (0x255e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Validity
Not Before: Dec 22 15:35:21 2025 GMT
Not After : Dec 29 15:35:21 2025 GMT
Subject: CN=6949653a-8cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:12:8d:cc:5d:95:a3:8c:aa:a8:61:c7:d7:
13:f2:23:a1:ca:47:31:86:b4:a3:3b:82:97:f8:85:
34:a6:b7:22:ac:06:8d:0a:d0:bb:4a:85:b0:79:c8:
68:41:4f:94:3e:65:0d:e4:04:d6:3d:09:9f:02:a0:
1b:6b:13:17:7d:ee:44:02:38:ae:a1:d0:ef:6e:39:
ee:f2:7f:98:ac:0e:bc:b1:31:b4:62:64:29:ec:c3:
6d:5d:ed:73:13:d1:71:91:40:a9:85:ae:75:f6:a2:
e7:e7:94:2d:da:8c:86:73:a7:02:c7:16:9e:b6:08:
3a:61:59:0f:8b:5e:3f:d8:28:9f:82:0f:64:ae:a7:
88:31:65:6a:e1:50:7c:38:87:cc:32:73:7e:aa:3c:
3b:91:f6:5d:7b:2f:db:2e:f8:63:d1:03:36:0c:c2:
0e:72:a7:7a:94:35:10:85:80:ae:46:b1:7f:5b:0a:
1d:13:7a:dc:7c:54:3c:6b:0d:2d:2d:df:07:07:2f:
29:08:f6:ac:6f:99:aa:8b:50:b2:24:af:62:4e:f2:
76:33:79:96:0e:4f:91:f1:ab:20:9c:2a:1c:72:f1:
77:6a:f9:64:73:1d:58:38:5a:ec:67:75:55:6f:ce:
ce:7c:90:41:3f:58:70:9d:ed:16:9e:d2:2e:95:10:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B3:73:00:65:6F:A3:C3:C2:27:6F:2B:60:4B:D6:B5:1E:4C:22:7B
X509v3 Authority Key Identifier:
keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:f2:c3:b0:30:af:4a:6a:8f:b7:36:ac:17:ce:96:3b:a3:7a:
fe:b7:c9:35:2d:be:b7:4d:2c:20:6f:86:4e:34:86:ec:8c:a2:
a9:91:b4:e6:c1:9c:73:29:f1:88:ff:8b:c4:e2:27:fc:5a:19:
8d:82:ca:ae:45:3d:3c:0e:2e:2f:3a:b8:c2:fc:72:e4:02:57:
3f:7f:07:76:11:84:1a:25:04:c6:62:c3:1d:1b:ef:5e:f2:7e:
de:82:91:78:55:ef:58:a4:d8:d8:45:09:35:95:a3:b8:9f:b5:
56:34:de:4f:d8:40:f2:9d:c5:93:b5:7c:25:fa:a0:76:9f:a8:
dd:16:1f:06:c2:91:b5:63:f2:18:93:ef:da:25:1c:ed:c6:72:
71:35:ce:3b:23:dc:79:4e:a5:a9:e6:8e:ed:db:dc:c5:b3:43:
ca:68:38:44:60:c9:fa:2e:fd:08:8c:94:c0:2b:90:3e:ce:81:
cf:81:8c:dc:ea:60:a2:06:26:36:47:a7:50:ae:81:31:7b:9d:
1f:f1:c5:3f:2d:39:6e:e5:54:f2:97:ae:66:ee:d0:91:27:80:
53:4d:2b:e4:d8:8f:90:d4:1f:a8:ff:75:9d:2f:30:ac:0f:fe:
47:f1:e1:30:11:54:6e:e8:fb:e1:d5:ec:dc:93:4c:cd:18:63:
a3:b5:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:46 2025 by rpki-client