This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
File: J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft (raw, json)
Hash identifier: jfjQMWiJP8iDRVyxsErdP4vlqpbjBNCx2i4ummuvrmY=
Subject key identifier: 59:64:F0:CD:83:8F:A3:89:09:66:C2:CA:0B:E5:91:14:A1:56:96:99
Authority key identifier: 27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B
Certificate issuer: /CN=A91BBCAF/serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
Certificate serial: 01A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
Manifest number: 019E
Signing time: Tue 23 Dec 2025 02:24:19 +0000
Manifest this update: Tue 23 Dec 2025 02:24:19 +0000
Manifest next update: Tue 30 Dec 2025 02:24:19 +0000
Files and hashes: 1: J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl (hash: g3TlabBkX2hF2x+4QLfaQqw1Qsb5DVeKeQTX0KF8jfs=)
2: D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa (hash: A3UoC+eD4LWvV0sQ3hMRTRUEpIyxxhW+ZYQuaZu5Frk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl
rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBCAF, serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
Validity
Not Before: Dec 23 02:24:19 2025 GMT
Not After : Dec 30 02:24:19 2025 GMT
Subject: CN=6949fd53-66e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:2b:1e:4b:23:7e:2d:1f:81:67:62:31:98:
6a:46:a9:2e:5e:8b:74:f8:c1:65:0a:af:6d:3a:3e:
44:76:8b:da:2d:d7:c0:0b:04:81:e4:d0:b1:ae:6b:
58:6e:4a:35:9b:db:49:dd:27:31:53:d3:1c:f9:3a:
11:30:26:06:fc:86:2a:72:4c:a2:a5:a4:6e:a4:76:
6d:28:39:75:d8:d7:6f:8d:d1:34:43:33:2c:4f:3c:
fe:b7:38:8f:2f:48:96:ed:75:42:5f:a7:be:80:82:
d9:2d:87:19:c3:3b:80:fd:f3:0a:56:25:f7:fb:d8:
60:7e:3c:0b:28:1d:f1:4d:0b:bd:34:a9:2a:e8:2f:
fc:37:fa:58:0c:bb:95:21:81:57:df:58:cd:b3:e7:
92:72:f0:56:19:3d:72:dc:a5:7e:73:4e:e2:cb:d0:
6c:cd:32:ee:f6:bf:32:3c:bb:65:99:73:48:5a:be:
a5:7d:0d:0c:85:82:c4:7c:a0:fe:58:46:b5:88:ea:
ea:5b:d1:d1:82:ab:d2:65:45:f7:f5:6c:53:94:cd:
f5:4d:50:d0:70:9f:7f:39:9f:70:9b:8a:b8:17:42:
80:eb:f7:71:90:64:1c:81:30:99:78:a8:a1:36:80:
ef:e7:5c:4f:9d:53:58:a7:c5:c3:42:58:59:73:e0:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:64:F0:CD:83:8F:A3:89:09:66:C2:CA:0B:E5:91:14:A1:56:96:99
X509v3 Authority Key Identifier:
keyid:27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:be:c0:6e:b8:2f:27:05:25:23:04:b4:8f:d9:15:4d:39:38:
c4:9c:e5:20:9d:32:b0:6a:6f:16:f4:72:7f:8b:5d:d5:f5:09:
f0:7a:e9:fe:02:fd:e8:f3:42:34:76:60:fb:86:a5:fb:13:30:
df:c6:0e:9b:af:00:d7:f8:bd:b9:df:35:09:97:d1:57:de:10:
0b:35:cb:bf:d4:f9:6a:1c:d1:f1:6e:d8:e5:44:38:e7:3b:9c:
b8:ad:47:09:4c:63:fe:1d:51:90:3c:a8:79:73:6c:fd:f6:bc:
96:ed:eb:e2:f1:db:32:f9:b6:8a:e6:a5:2f:57:60:46:03:d2:
8b:91:1b:3f:b9:77:42:3e:7e:fd:a7:66:6c:d2:46:48:33:71:
44:d2:b0:03:19:59:b8:70:a0:c6:9b:d2:a6:57:a0:02:a8:2a:
d3:ff:2e:50:30:fd:a0:19:d7:9e:04:37:75:3f:4d:da:5c:e7:
95:59:c6:5b:c2:c4:31:df:1d:c6:79:c7:bf:eb:8e:3c:fc:c2:
83:55:91:8c:13:d0:4f:a1:92:0c:72:1a:b5:79:06:e2:44:ad:
0d:7f:10:ba:1a:73:18:51:21:fe:52:cf:0b:be:20:c9:64:ec:
0e:86:bc:59:11:1c:d1:5e:89:b2:de:e5:8e:d7:6f:e7:68:a4:
4a:ce:88:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:08:50 2025 by rpki-client