This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft
File: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft (raw, json)
Hash identifier: SQFmiuNb9FwEqTVYsAiaepVidn0ArfPNyjn/rFnQo/w=
Subject key identifier: BC:F6:F2:B7:47:07:EA:96:E3:B0:C8:10:A1:7E:88:D1:BA:7F:8B:09
Authority key identifier: F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04
Certificate issuer: /CN=A916BACE/serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04
Certificate serial: 143A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft
Manifest number: 1431
Signing time: Mon 22 Dec 2025 16:37:55 +0000
Manifest this update: Mon 22 Dec 2025 16:37:55 +0000
Manifest next update: Mon 29 Dec 2025 16:37:55 +0000
Files and hashes: 1: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl (hash: 9vN7VMlAnE3DUAymR5glbBa0vR9Z7GUF5BiPPxwsplo=)
2: 1774301E8AF211E89749376EC4F9AE02.roa (hash: 6bfHO59shnVhLVfkZQ/tBBlzPOnqeYneOazsjO1NW44=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl
rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5178 (0x143a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BACE, serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04
Validity
Not Before: Dec 22 16:37:55 2025 GMT
Not After : Dec 29 16:37:55 2025 GMT
Subject: CN=694973e3-9913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:95:81:4a:12:2a:e9:e0:58:bc:ea:4d:b6:
b9:cc:56:51:7e:96:e0:ce:35:78:13:86:f3:6d:e6:
43:ac:01:48:a9:c7:fa:45:12:fe:f8:a1:99:53:d8:
4b:c7:1e:94:1d:40:c1:81:42:5f:22:17:65:36:d9:
c3:ce:b8:56:71:f3:35:65:b4:40:2f:4d:d6:ab:ae:
8b:dc:bb:f1:f5:4b:ab:0e:08:8e:45:90:88:b1:cd:
5c:d5:e7:87:e9:95:bc:6c:46:68:55:a2:a9:54:3e:
41:36:01:4b:de:05:8d:bc:94:1f:e6:6e:fd:ba:ab:
c2:a2:bc:d6:66:1c:38:16:10:ed:e9:6a:53:3a:8c:
57:f4:43:72:51:1b:18:9e:31:f9:6c:bc:c7:b1:87:
e8:d8:27:16:15:f9:ad:16:db:48:36:97:a9:3d:4a:
99:87:93:4f:91:57:f9:cb:19:4e:7e:cf:86:cd:11:
6b:9c:63:30:12:cb:7f:ef:a6:1c:03:cb:ce:05:02:
a3:af:6f:cc:40:67:52:88:1c:8f:5f:d6:8b:28:22:
c2:c9:52:fe:fa:3d:95:f0:19:9c:f4:b2:8c:74:5e:
ba:9e:ae:1f:1e:d9:c2:b1:85:a3:19:0d:76:24:4a:
31:19:9d:bf:fb:18:16:a6:37:97:7f:3b:82:7f:19:
4c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F6:F2:B7:47:07:EA:96:E3:B0:C8:10:A1:7E:88:D1:BA:7F:8B:09
X509v3 Authority Key Identifier:
keyid:F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:bb:81:f8:89:c1:fc:2a:ed:e9:b6:2c:df:18:4f:56:64:0b:
7b:cc:a3:f3:6d:fa:a3:3e:b4:9f:62:d7:bb:4e:b3:4a:00:87:
6a:e6:cf:81:64:c2:ca:54:3d:5f:84:f5:74:ea:e9:39:09:03:
49:5c:cf:20:b6:03:5c:16:96:fa:05:72:f1:c4:78:42:c1:cc:
16:fa:3e:77:64:c6:0c:b0:91:ca:ce:a5:70:f4:9b:0c:8d:07:
46:9d:ea:39:6f:2c:fd:50:1c:df:90:60:ab:c3:83:eb:c3:04:
6f:ef:0e:ec:22:31:31:70:42:da:30:6b:56:a0:58:ce:73:5c:
af:9f:d1:cf:12:16:a6:32:fb:b2:ee:bd:9d:ef:4f:3f:c4:73:
d1:72:85:2c:9a:38:38:17:be:76:85:06:90:6a:7f:3d:6f:69:
de:5e:88:a7:6b:0c:8f:f2:eb:8a:c9:62:37:14:47:26:86:2c:
4e:21:5b:12:61:42:9d:44:4d:d3:47:80:ea:88:b0:05:61:15:
61:d5:ba:22:27:51:45:24:e7:be:e0:84:f3:14:ed:a0:37:90:
c7:57:ca:b6:83:34:3f:cd:8f:fe:91:4e:7b:ae:cd:dc:9b:e3:
f1:c4:3f:7b:17:51:a1:e3:b1:cc:66:ac:0c:a6:f5:50:78:48:
6b:6e:b7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:44:57 2025 by rpki-client