This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
File: jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json)
Hash identifier: C34uWEdtSJfW4j1KZjviCi51DnBqnxzedc8hvOcKw6s=
Subject key identifier: FB:B2:45:B0:01:19:F6:7D:DF:4B:BC:55:39:E3:1C:C3:F3:08:55:98
Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Certificate serial: 09C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
Manifest number: 09A6
Signing time: Sat 06 Dec 2025 19:16:06 +0000
Manifest this update: Sat 06 Dec 2025 19:16:05 +0000
Manifest next update: Sat 13 Dec 2025 19:16:05 +0000
Files and hashes: 1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: YXoywi/2Ff1ufH6bWlbJIglWajDIW7MpN0N/D/rn0d0=)
2: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: X16lFY6K2nhljbiLaCzlwi3FHh2sWAR/KpBd/NkhGQQ=)
3: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: 5iCZA8jYlZk3gHKxMQWGtU7Eku76azBHbjf03/KNSIU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2504 (0x9c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Validity
Not Before: Dec 6 19:16:05 2025 GMT
Not After : Dec 13 19:16:05 2025 GMT
Subject: CN=693480f5-fe9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5a:ca:c7:9e:62:15:48:a6:40:6f:5e:18:61:
d2:06:bf:78:5d:b3:2f:f8:7b:a8:cc:b4:34:67:fb:
44:0b:12:c9:71:d7:22:15:eb:7b:2e:7e:e3:5c:b9:
14:2e:5e:aa:2a:77:42:a4:7c:91:4e:5f:bc:14:d0:
2a:3d:31:c9:e3:bc:21:00:de:9e:51:bc:64:a5:6b:
39:d1:28:b4:3e:fa:b4:67:b3:e1:a4:d8:d1:a7:36:
98:8c:2b:e1:c7:fe:83:27:bf:3c:0f:e7:48:e9:04:
ea:6c:af:c6:12:12:0e:23:7a:c3:ae:5b:e7:12:e5:
5a:e3:59:22:50:11:ea:61:83:87:8c:74:bf:4d:be:
f8:88:ab:ba:9c:05:c9:66:4a:7b:30:0f:a3:f5:da:
44:0f:0b:58:78:57:aa:03:ee:df:da:52:08:7a:07:
2d:48:7e:af:6b:d3:42:65:9e:44:0a:27:08:f0:0c:
d9:bc:73:d9:98:b1:21:98:c4:20:37:da:43:aa:bb:
25:9d:5e:3f:83:39:57:df:95:44:19:b7:83:5d:30:
c0:a7:9c:12:dd:f9:2d:8d:a2:dd:1e:aa:b3:46:df:
ae:74:45:19:4f:e7:3d:4d:35:69:c4:05:9c:58:2a:
d0:d2:cd:c5:ac:99:79:d3:e2:41:9a:4a:8a:9d:36:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B2:45:B0:01:19:F6:7D:DF:4B:BC:55:39:E3:1C:C3:F3:08:55:98
X509v3 Authority Key Identifier:
keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:af:6d:6d:a6:7f:25:0b:2a:f9:0c:ad:93:ae:1e:1d:1c:a7:
91:57:56:b4:43:5b:55:72:27:07:1b:63:78:ed:f7:fe:3e:ef:
89:bf:b5:88:d6:c7:ec:7c:45:71:20:17:00:6d:65:71:18:72:
91:de:c3:f0:9a:d9:6a:db:b7:84:ba:90:98:fc:b6:ca:66:a4:
8c:b3:47:85:65:ca:9e:13:f0:aa:5f:6a:08:0c:01:62:52:17:
ae:1d:2b:13:d1:30:7b:e9:02:58:a2:d1:2c:a8:2f:e8:58:05:
62:1e:c1:75:5a:89:0c:39:12:be:d7:6b:f4:0a:32:c5:c2:bd:
fa:a8:58:ae:12:7d:bc:31:0f:e6:a5:ac:0e:23:5c:cb:65:34:
70:db:53:c3:03:ae:57:d7:ed:35:40:3b:a3:5a:66:55:f4:35:
f6:48:93:8b:9d:7c:a6:27:5b:76:43:84:d9:78:08:ef:2f:60:
9d:8b:f0:19:11:9c:cd:a6:85:de:97:cb:6e:52:41:76:77:e8:
2a:6c:fc:84:e5:d7:29:bf:ea:56:f7:d6:61:f7:bd:6c:e4:24:
e6:01:48:f7:00:8d:b0:f1:bc:76:ca:e3:fc:f6:6e:2a:bb:e9:
b5:61:39:17:b7:14:01:03:76:3f:8d:92:c5:e8:02:64:c2:c4:
5b:18:6a:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMzQTgxMTAvBgNVBAUTKDhEQzY2QTY0NzUzNjQzQjBFNzBGQjlCMkJENDAwOUNC
RUM3MDU0NDEwHhcNMjUxMjA2MTkxNjA1WhcNMjUxMjEzMTkxNjA1WjAYMRYwFAYD
VQQDEw02OTM0ODBmNS1mZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA91rKx55iFUimQG9eGGHSBr94XbMv+HuozLQ0Z/tECxLJcdciFet7Ln7jXLkU
Ll6qKndCpHyRTl+8FNAqPTHJ47whAN6eUbxkpWs50Si0Pvq0Z7PhpNjRpzaYjCvh
x/6DJ788D+dI6QTqbK/GEhIOI3rDrlvnEuVa41kiUBHqYYOHjHS/Tb74iKu6nAXJ
Zkp7MA+j9dpEDwtYeFeqA+7f2lIIegctSH6va9NCZZ5ECicI8AzZvHPZmLEhmMQg
N9pDqrslnV4/gzlX35VEGbeDXTDAp5wS3fktjaLdHqqzRt+udEUZT+c9TTVpxAWc
WCrQ0s3FrJl50+JBmkqKnTaKBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuyRbAB
GfZ930u8VTnjHMPzCFWYMB8GA1UdIwQYMBaAFI3GamR1NkOw5w+5sr1ACcvscFRB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC8xNDIwMjM4NEEx
QjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3RG5EN215dlVBSnkteHdW
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pjWnFaSFUyUTdEbkQ3bXl2VUFKeS14d1ZFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzNBOC8xNDIwMjM4NEExQjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3
RG5EN215dlVBSnkteHdWRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUr21tpn8lCyr5DK2Trh4dHKeRV1a0Q1tVcicHG2N47ff+Pu+Jv7WI
1sfsfEVxIBcAbWVxGHKR3sPwmtlq27eEupCY/LbKZqSMs0eFZcqeE/CqX2oIDAFi
UheuHSsT0TB76QJYotEsqC/oWAViHsF1WokMORK+12v0CjLFwr36qFiuEn28MQ/m
pawOI1zLZTRw21PDA65X1+01QDujWmZV9DX2SJOLnXymJ1t2Q4TZeAjvL2Cdi/AZ
EZzNpoXel8tuUkF2d+gqbPyE5dcpv+pW99Zh971s5CTmAUj3AI2w8bx2yuP89m4q
u+m1YTkXtxQBA3Y/jZLF6AJkwsRbGGpl
-----END CERTIFICATE-----
Generated at Mon Dec 8 06:12:01 2025 by rpki-client