This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
File: jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json)
Hash identifier: HL0KxNmFzfj1cA/PfxYL7amQVc4zNzFfcanmjQMUhZc=
Subject key identifier: 0D:84:17:F4:8B:71:BB:52:2B:55:0A:CD:BE:08:52:6A:BA:16:33:48
Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1
Certificate issuer: /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
Certificate serial: 0B09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
Manifest number: 0B01
Signing time: Mon 22 Dec 2025 18:50:29 +0000
Manifest this update: Mon 22 Dec 2025 18:50:28 +0000
Manifest next update: Mon 29 Dec 2025 18:50:28 +0000
Files and hashes: 1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: mfmvRwlPJL6ou+J7AvMfiBDny+YlRyFLOy/mkxTRBkw=)
2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: 7Rjkv9es3qmrpwGoh+nsTmGk0d+b2oIzwsuxat3h6cE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl
rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2825 (0xb09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
Validity
Not Before: Dec 22 18:50:28 2025 GMT
Not After : Dec 29 18:50:28 2025 GMT
Subject: CN=694992f5-dfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:43:cc:83:2f:47:71:94:38:eb:13:e8:ff:
d8:e6:31:70:0b:f0:dc:d6:f3:d9:bc:d6:fb:e8:3b:
8f:85:ee:9d:d3:dd:b8:f2:3f:a2:39:6c:04:73:f1:
15:63:b8:74:94:0a:5e:bf:17:6e:4e:27:dd:5f:65:
15:79:89:11:fb:07:88:aa:96:f9:22:ce:c0:de:ad:
80:ad:8e:be:3a:e9:62:13:a3:22:c1:dd:05:cf:c0:
05:c7:18:56:1c:77:cf:79:d2:ff:f1:00:dd:e7:f3:
5a:33:b2:f9:ec:4f:b4:74:b6:e5:eb:f4:b8:62:a4:
16:7e:66:2c:00:26:bc:8b:fa:8a:56:cf:ef:11:74:
64:66:6f:83:8f:55:02:81:fc:11:1a:95:8e:56:4b:
45:b4:84:b5:92:7d:74:83:dd:4d:48:19:40:a6:e8:
ee:7e:ab:62:95:df:1e:de:26:69:02:30:09:e6:08:
ec:e3:e1:ac:33:7e:3f:2f:52:84:c6:1a:b1:22:28:
ee:64:21:27:20:e2:b4:5f:66:0c:4e:94:cf:22:e7:
61:40:f2:1f:1c:ce:92:b4:74:c4:14:2e:c7:13:0a:
36:14:db:81:39:14:ed:c6:bc:8e:cf:43:56:0d:72:
9a:44:7a:a6:3c:8c:1f:03:a7:55:90:80:b0:74:a3:
9c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:84:17:F4:8B:71:BB:52:2B:55:0A:CD:BE:08:52:6A:BA:16:33:48
X509v3 Authority Key Identifier:
keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cc:a7:37:ab:6d:19:5e:6c:6f:18:af:66:e8:6b:7b:1a:4d:
e9:f6:6d:b1:6f:a5:f9:22:48:8f:b0:57:3c:31:51:ac:57:ca:
17:69:85:9e:28:67:c7:87:0f:b9:b8:3b:96:c4:fe:ce:7b:44:
32:4f:d4:47:c1:66:94:71:e5:83:c4:75:44:20:e8:31:09:24:
98:61:c2:f6:69:6e:9f:1b:7c:42:94:81:ca:3a:9b:7d:e0:d8:
76:bf:5e:b4:40:dd:45:02:be:9b:f1:ef:a7:c7:56:f7:31:ea:
02:99:1c:5a:36:82:9e:09:c3:cd:1f:88:65:34:5c:32:a1:b3:
a5:8e:04:04:f7:8b:87:88:b3:45:6d:26:02:cf:64:fa:fc:c6:
af:16:96:d5:4f:64:bc:83:ec:19:73:a3:09:f5:4a:d6:32:d8:
e8:19:01:fa:96:14:d1:99:a3:6f:63:6b:72:ca:f7:b0:6b:0f:
33:69:55:0e:fa:4d:1b:76:17:14:a7:fa:8e:f5:b1:1b:c7:80:
71:b7:80:3e:5c:58:df:50:7e:d4:67:26:5c:9f:3c:01:c3:a7:
9d:ee:7e:4e:0a:4a:f3:ad:b8:fc:0d:f0:1b:d3:4b:7d:f2:9e:
1d:8c:54:1c:96:80:02:7c:f3:3a:ad:9a:5d:23:32:ac:44:6b:
d3:42:ec:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:32 2025 by rpki-client