This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
File: jLkrEub5htMT1T88qrB-vjJVrro.mft (raw, json)
Hash identifier: RWtukFSHpLL6Wp95FKEw4UStjUCgqgiXqNTMDhOsqCI=
Subject key identifier: 61:5A:77:58:D0:A2:B9:15:30:F1:66:EA:B2:AC:C9:B5:EF:12:0B:D7
Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA
Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA
Certificate serial: 1AC5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
Manifest number: 1ABB
Signing time: Sat 06 Dec 2025 15:58:12 +0000
Manifest this update: Sat 06 Dec 2025 15:58:11 +0000
Manifest next update: Sat 13 Dec 2025 15:58:11 +0000
Files and hashes: 1: jLkrEub5htMT1T88qrB-vjJVrro.crl (hash: L6kLLEVYpkGjl/NgbZYdWtmgLBaOJUXn+Ag1VB2CeCY=)
2: 452D6C36BD1411EAA4875216C4F9AE02.roa (hash: yGGkDxuoJ7+8gqf/0aTvyd850ZQHcY8118DqWsFirgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl
rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6853 (0x1ac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF4E, serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA
Validity
Not Before: Dec 6 15:58:11 2025 GMT
Not After : Dec 13 15:58:11 2025 GMT
Subject: CN=69345293-a34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:64:51:28:ae:3f:ef:c6:18:84:f7:5a:54:65:
0d:90:ee:2c:38:6f:07:0f:16:eb:d6:4c:e4:be:d2:
54:e0:52:cf:9c:8d:00:c5:3b:5a:35:1b:06:d2:2f:
b2:c0:14:93:64:77:c2:f3:7c:d3:d2:66:d4:b0:fe:
c4:06:16:16:24:61:23:7c:f4:3a:58:ae:06:7a:11:
3c:ba:b1:b3:1e:2b:df:c5:c8:8b:a7:17:a3:34:da:
2e:b0:ac:7e:c5:51:de:d1:c5:3e:52:6b:c2:8b:6c:
be:21:2c:af:a2:9c:de:83:a4:3a:02:2e:b1:79:f3:
53:35:ce:d1:1c:27:31:74:fd:07:ed:bf:c3:52:2e:
7f:da:2b:3d:0f:7c:b4:61:d8:81:07:2c:3f:7e:d1:
9e:d7:ad:5a:64:ce:53:b9:0d:7a:c0:9c:1d:ed:b3:
d7:37:71:e9:e6:c4:9f:07:30:5f:6e:ea:17:28:09:
e8:ac:88:7f:67:3b:de:df:1e:37:b0:4f:6c:4f:d1:
e4:4b:3f:c9:78:1b:52:c7:f7:45:4f:63:2b:77:13:
6c:c9:df:86:59:95:89:c5:bf:ba:85:49:f0:cf:6a:
36:e2:d7:81:aa:a6:ce:ae:0e:51:bf:b9:c2:0b:97:
9f:69:3d:75:74:1b:b3:ef:d8:3f:92:49:a9:68:2f:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5A:77:58:D0:A2:B9:15:30:F1:66:EA:B2:AC:C9:B5:EF:12:0B:D7
X509v3 Authority Key Identifier:
keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:40:88:51:e2:50:fc:64:91:ba:f0:4c:ee:1d:a2:af:3a:5f:
77:b7:c9:ab:2d:04:38:95:b5:03:46:f9:7d:09:43:70:c6:1b:
60:5c:4b:a5:1c:1c:0c:3c:51:86:f2:a7:fb:00:2d:c8:92:c5:
ac:12:c8:8e:88:bb:fc:65:d9:bc:17:8b:e9:a4:f6:7c:cc:1b:
3b:d7:2b:d1:bd:83:54:ff:ef:1b:22:d1:ef:97:27:0c:b2:23:
72:54:4d:74:02:48:11:77:1c:f4:67:6a:01:75:9f:dc:c6:5b:
bf:ae:de:e3:ed:d7:b2:77:aa:45:59:5c:eb:d8:a3:5e:7c:0a:
73:6e:80:71:8e:2c:b4:38:2e:97:61:bf:ac:98:8f:e9:a6:b9:
0d:a5:10:aa:80:d6:55:98:f2:f8:62:7d:4d:7a:3e:11:a4:5e:
bd:9d:ce:7f:d7:ba:bf:e9:89:f9:4f:7e:e9:e1:13:ab:83:2b:
5d:13:7f:3c:c1:d8:b1:3c:6f:68:89:c6:b0:e5:01:c8:10:f9:
30:ac:63:d5:69:ab:33:1b:12:f3:b0:92:58:4e:fe:2b:ef:90:
c6:a1:b5:81:8a:b6:dd:5f:5c:bd:09:6c:db:11:96:37:86:19:
28:66:7a:c7:e8:0e:11:4c:df:e5:ee:64:59:f3:d6:79:bf:92:
4a:cb:7c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:14:07 2025 by rpki-client