This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft
File: jl6uTAO8OzRb54-MjppDt_mOM6Y.mft (raw, json)
Hash identifier: O01YF0YsQRdodu8lR3qwv6miTkZED/oROA2k/8LlBY4=
Subject key identifier: E8:ED:63:50:8B:B9:41:B2:E7:09:5A:22:72:D1:33:71:B4:D6:A2:25
Authority key identifier: 8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6
Certificate issuer: /CN=A917C512/serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6
Certificate serial: 9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft
Manifest number: 9B
Signing time: Fri 05 Dec 2025 04:19:56 +0000
Manifest this update: Fri 05 Dec 2025 04:19:55 +0000
Manifest next update: Fri 12 Dec 2025 04:19:55 +0000
Files and hashes: 1: jl6uTAO8OzRb54-MjppDt_mOM6Y.crl (hash: b7pmoeEWjU4s87NONhm2BmznkDNjxX25ls74SumpDzc=)
2: 6031B83AE89211EFA8EA2645C4F9AE02.roa (hash: AC+SXi1UsfNodH/t6eT8f4fZVqnQxWUGCxU261CtJPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl
rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C512, serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6
Validity
Not Before: Dec 5 04:19:55 2025 GMT
Not After : Dec 12 04:19:55 2025 GMT
Subject: CN=69325d6c-de66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:71:67:8b:06:ec:a0:fd:07:37:c7:8f:a2:51:
c2:65:ba:90:5a:28:94:e7:a5:ce:dc:cf:6e:c9:46:
49:b1:bc:c7:f2:a4:9f:f8:2f:ca:e2:39:92:24:70:
da:74:01:f4:13:a3:ac:bc:52:30:fb:bc:56:af:10:
2d:89:82:25:59:29:1c:87:1d:ff:d8:8d:fb:2b:1a:
2a:3a:9b:2c:11:9d:9d:79:ec:7e:4d:26:e1:41:61:
11:c1:bd:24:f6:ac:c1:7d:cf:a7:e2:86:b7:7a:1e:
ef:ad:9f:01:c2:38:c0:51:c3:5f:b9:51:df:6e:e6:
d3:f3:84:66:5a:8b:ff:38:83:3b:91:c9:22:4b:e6:
28:4a:c4:d3:f0:25:02:3b:6a:6f:c6:bf:4a:66:0c:
31:a2:60:84:1c:43:e9:14:8b:00:de:0c:b8:4e:2e:
3d:63:9a:3a:7e:f3:92:71:af:54:a1:fd:e3:a6:f4:
af:ea:11:bf:36:f3:f3:8b:7a:ed:83:05:cf:99:81:
d4:b1:a8:f4:15:59:bd:1f:f9:0f:b9:68:16:d9:fd:
af:34:c1:88:41:ce:7e:d5:75:31:84:74:2d:bd:6a:
da:d8:c0:56:22:d7:7c:43:d8:d9:01:d1:c0:50:eb:
6c:83:ff:45:88:67:89:c4:50:c1:05:8d:da:99:aa:
c4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:ED:63:50:8B:B9:41:B2:E7:09:5A:22:72:D1:33:71:B4:D6:A2:25
X509v3 Authority Key Identifier:
keyid:8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:16:37:d1:5e:7a:ee:28:16:81:86:c7:7b:c3:f4:8b:7a:bd:
6f:e4:31:a9:a8:8f:d4:eb:fc:63:c1:16:74:1c:0c:49:ea:e2:
c8:85:78:33:08:e9:78:5a:a4:0f:a0:9c:5c:6d:5b:16:6d:e8:
7f:e7:a5:d0:2f:61:fd:32:47:ef:3f:ab:fa:af:99:ac:1b:7d:
0d:1a:62:b8:86:95:c0:9e:c3:17:80:07:4f:5b:67:43:96:bc:
92:18:b3:2c:d8:1b:c7:5c:43:0f:9c:5f:f3:f5:02:ad:ab:5f:
0c:3c:7d:ab:ac:89:0a:a8:64:2c:08:bf:51:f2:31:7c:5a:13:
f0:fd:80:6c:1a:4e:65:37:ca:f3:32:59:21:c9:b0:18:31:20:
22:b7:a5:15:f1:9c:4f:4e:a6:22:2e:20:b8:26:ac:85:b9:48:
80:ac:b0:49:53:86:6a:18:9a:ed:2b:46:bf:aa:86:9b:93:6f:
a3:24:7a:1e:39:f3:28:b4:32:cc:79:dd:e4:e5:ee:8c:d5:8d:
f4:2f:e4:44:54:98:f5:e6:69:7d:92:6f:48:b0:89:01:fc:c8:
9a:17:87:a8:ba:aa:1e:7e:d0:f1:2d:f0:df:20:02:c5:f9:79:
54:30:1d:9b:eb:59:2e:2d:c1:f4:8d:5f:94:67:bd:fa:16:75:
ec:20:6a:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M1MTIxMTAvBgNVBAUTKDhFNUVBRTRDMDNCQzNCMzQ1QkU3OEY4QzhFOUE0M0I3
Rjk4RTMzQTYwHhcNMjUxMjA1MDQxOTU1WhcNMjUxMjEyMDQxOTU1WjAYMRYwFAYD
VQQDEw02OTMyNWQ2Yy1kZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3nFniwbsoP0HN8ePolHCZbqQWiiU56XO3M9uyUZJsbzH8qSf+C/K4jmSJHDa
dAH0E6OsvFIw+7xWrxAtiYIlWSkchx3/2I37KxoqOpssEZ2deex+TSbhQWERwb0k
9qzBfc+n4oa3eh7vrZ8BwjjAUcNfuVHfbubT84RmWov/OIM7kckiS+YoSsTT8CUC
O2pvxr9KZgwxomCEHEPpFIsA3gy4Ti49Y5o6fvOSca9Uof3jpvSv6hG/NvPzi3rt
gwXPmYHUsaj0FVm9H/kPuWgW2f2vNMGIQc5+1XUxhHQtvWra2MBWItd8Q9jZAdHA
UOtsg/9FiGeJxFDBBY3amarE+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjtY1CL
uUGy5wlaInLRM3G01qIlMB8GA1UdIwQYMBaAFI5erkwDvDs0W+ePjI6aQ7f5jjOm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzUxMi9BMThBQkYyOEUz
QTMxMUVGQjhFQjhDNTFDNEY5QUUwMi9qbDZ1VEFPOE96UmI1NC1NanBwRHRfbU9N
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2psNnVUQU84T3pSYjU0LU1qcHBEdF9tT002WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzUxMi9BMThBQkYyOEUzQTMxMUVGQjhFQjhDNTFDNEY5QUUwMi9qbDZ1VEFPOE96
UmI1NC1NanBwRHRfbU9NNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDBFjfRXnruKBaBhsd7w/SLer1v5DGpqI/U6/xjwRZ0HAxJ6uLIhXgz
COl4WqQPoJxcbVsWbeh/56XQL2H9MkfvP6v6r5msG30NGmK4hpXAnsMXgAdPW2dD
lrySGLMs2BvHXEMPnF/z9QKtq18MPH2rrIkKqGQsCL9R8jF8WhPw/YBsGk5lN8rz
MlkhybAYMSAit6UV8ZxPTqYiLiC4JqyFuUiArLBJU4ZqGJrtK0a/qoabk2+jJHoe
OfMotDLMed3k5e6M1Y30L+REVJj15ml9km9IsIkB/MiaF4eouqoeftDxLfDfIALF
+XlUMB2b61kuLcH0jV+UZ736FnXsIGrf
-----END CERTIFICATE-----
Generated at Fri Dec 5 19:52:49 2025 by rpki-client