This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json)
Hash identifier: pLzhohl50T5YZ8aceerYIWhgw3+bFlNgeComnR6qFok=
Subject key identifier: 69:D3:79:56:1F:8E:DC:6D:6B:BB:CE:FB:28:B6:CE:E0:F8:FC:D8:63
Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74
Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274
Certificate serial: 02F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
Manifest number: 02F0
Signing time: Tue 23 Dec 2025 00:15:34 +0000
Manifest this update: Tue 23 Dec 2025 00:15:33 +0000
Manifest next update: Tue 30 Dec 2025 00:15:33 +0000
Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: IYmA4b59bsmqgORFdzteQey+tIv0NtdLhzJp/MyP+hk=)
2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: eeihbPUCNIm6wOFP5OHLweAd8KKgDQdtMhUILkD0GVg=)
3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: Or6QdVGJ8KlEltpgE/vRaVt3d7tmMydHusIypsTqbXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl
rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:15:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 761 (0x2f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274
Validity
Not Before: Dec 23 00:15:33 2025 GMT
Not After : Dec 30 00:15:33 2025 GMT
Subject: CN=6949df26-2a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:55:b8:15:3f:a9:36:f3:0b:50:b3:00:d7:
8b:52:d8:2a:0f:21:d7:7b:df:91:be:0a:f8:9e:ab:
30:55:a5:c6:bf:62:68:49:e7:ec:10:c1:9d:c2:c9:
0c:29:e4:51:05:76:dd:ee:b9:2a:b3:be:1e:ae:a3:
78:26:48:4f:e7:94:bb:27:f8:50:af:fd:a7:c2:15:
a7:0c:69:a3:b5:51:37:b9:77:a4:df:80:90:61:d4:
8f:32:c7:e0:2f:b3:32:9d:d3:94:c2:da:3c:55:3c:
8f:28:cc:76:12:ad:84:59:c0:ca:9f:92:2d:4e:f0:
b0:5d:d2:75:3e:41:4e:0d:b0:66:e3:e6:b9:cc:b4:
e2:ff:0e:8f:35:ea:55:00:cb:da:0f:00:51:5d:45:
12:e5:57:48:a7:b4:c1:b5:30:76:a5:5a:ea:9f:e2:
07:28:d9:74:a5:0f:5a:8b:89:48:59:6a:ce:77:71:
33:de:fc:54:ef:32:35:05:82:f7:82:e8:93:dc:d7:
73:20:86:9a:80:60:51:1f:26:71:00:b4:56:fa:30:
ae:01:6b:70:d2:45:70:3c:38:3f:92:0f:b2:54:41:
33:23:84:95:b1:ac:e1:90:50:b0:48:53:a0:8e:07:
ec:49:0e:8a:20:7b:48:8d:f5:b1:62:f2:bf:e3:57:
50:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D3:79:56:1F:8E:DC:6D:6B:BB:CE:FB:28:B6:CE:E0:F8:FC:D8:63
X509v3 Authority Key Identifier:
keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:a6:46:1a:ba:12:a7:8f:b5:27:7f:c9:2f:cc:9b:6c:13:d0:
9c:60:8a:4f:a8:ac:a8:5b:11:62:bf:fc:6d:b4:a7:ad:2d:2e:
fd:c3:47:ee:3a:7d:aa:ed:e4:38:c3:54:5a:88:db:09:9e:c5:
a7:a1:21:aa:15:2c:b3:a3:6c:42:11:a6:bb:c3:7a:95:9d:f4:
ff:22:97:01:d7:47:31:6b:f1:fd:23:bd:fd:0d:af:ca:b2:ec:
0e:11:f1:d1:96:b1:b1:41:d2:7e:ba:ba:8f:02:d2:9e:64:d8:
62:59:37:6d:fd:45:7f:65:fc:98:26:a4:1d:68:ce:01:e5:4d:
53:c2:fe:37:76:cd:d0:5f:0b:09:17:e1:a2:a0:e9:5f:d8:cf:
56:93:ae:45:97:c5:09:26:44:eb:f6:b5:5a:26:49:e7:ad:69:
66:92:d0:9a:bd:70:6e:a8:9b:81:b5:88:40:ee:cc:1b:2f:f8:
b1:63:05:be:60:24:96:b5:9c:d6:41:b4:1c:23:de:9f:68:2c:
6f:94:17:16:4b:2d:17:7a:96:91:e7:f5:ac:0f:27:4c:e6:c8:
16:45:2e:2b:cf:5c:1e:ab:64:6f:a8:e7:f3:51:c0:14:7a:96:
b2:4f:08:88:f8:53:9f:d6:22:4e:14:43:51:da:2c:56:5e:4d:
39:15:ed:45
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB
QUYyNTMyNzQwHhcNMjUxMjIzMDAxNTMzWhcNMjUxMjMwMDAxNTMzWjAYMRYwFAYD
VQQDDA02OTQ5ZGYyNi0yYTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxn1VuBU/qTbzC1CzANeLUtgqDyHXe9+Rvgr4nqswVaXGv2JoSefsEMGdwskM
KeRRBXbd7rkqs74erqN4JkhP55S7J/hQr/2nwhWnDGmjtVE3uXek34CQYdSPMsfg
L7MyndOUwto8VTyPKMx2Eq2EWcDKn5ItTvCwXdJ1PkFODbBm4+a5zLTi/w6PNepV
AMvaDwBRXUUS5VdIp7TBtTB2pVrqn+IHKNl0pQ9ai4lIWWrOd3Ez3vxU7zI1BYL3
guiT3NdzIIaagGBRHyZxALRW+jCuAWtw0kVwPDg/kg+yVEEzI4SVsazhkFCwSFOg
jgfsSQ6KIHtIjfWxYvK/41dQoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnTeVYf
jtxta7vO+yi2zuD4/NhjMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4
RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN
blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC
T3B6UUlBYmZ3cENxOGxNblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBTpkYauhKnj7Unf8kvzJtsE9CcYIpPqKyoWxFiv/xttKetLS79w0fu
On2q7eQ4w1RaiNsJnsWnoSGqFSyzo2xCEaa7w3qVnfT/IpcB10cxa/H9I739Da/K
suwOEfHRlrGxQdJ+urqPAtKeZNhiWTdt/UV/ZfyYJqQdaM4B5U1Twv43ds3QXwsJ
F+GioOlf2M9Wk65Fl8UJJkTr9rVaJknnrWlmktCavXBuqJuBtYhA7swbL/ixYwW+
YCSWtZzWQbQcI96faCxvlBcWSy0XepaR5/WsDydM5sgWRS4rz1weq2RvqOfzUcAU
epayTwiI+FOf1iJOFENR2ixWXk05Fe1F
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:34 2025 by rpki-client