This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
File: jFWTypaApeo4eDP9NEAjS56AINA.mft (raw, json)
Hash identifier: oWIe+Qswid8IgMhL12fkz7RBqWBnMkPtXqT0yfVkObk=
Subject key identifier: 29:0B:14:AB:0F:C2:AC:19:A6:50:E8:4E:4F:FD:F9:DB:63:A0:00:D9
Authority key identifier: 8C:55:93:CA:96:80:A5:EA:38:78:33:FD:34:40:23:4B:9E:80:20:D0
Certificate issuer: /CN=A91D78FD/serialNumber=8C5593CA9680A5EA387833FD3440234B9E8020D0
Certificate serial: 06A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
Manifest number: 0695
Signing time: Sat 20 Dec 2025 21:47:16 +0000
Manifest this update: Sat 20 Dec 2025 21:47:16 +0000
Manifest next update: Sat 27 Dec 2025 21:47:16 +0000
Files and hashes: 1: jFWTypaApeo4eDP9NEAjS56AINA.crl (hash: Du8utZrUBjCHH/pKtP2Nhge09yVgXW1znZHO4q1rXbU=)
2: F603D584E99611EDB0837738C4F9AE02.roa (hash: Okhu1FQgQA+Kf0eFI37SSlIwutQLAOMIG0YXzuCGyrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.crl
rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1702 (0x6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D78FD, serialNumber=8C5593CA9680A5EA387833FD3440234B9E8020D0
Validity
Not Before: Dec 20 21:47:16 2025 GMT
Not After : Dec 27 21:47:16 2025 GMT
Subject: CN=69471964-865d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:91:88:e5:04:99:4f:10:1c:b4:47:87:28:25:
86:3c:09:2c:eb:dc:34:e6:6c:f6:d9:a0:e9:33:ec:
c8:05:d6:5f:f3:71:64:01:aa:27:ed:fe:be:b0:1b:
d7:8a:eb:8d:53:b7:09:d4:b9:9c:7a:2c:c9:be:6e:
71:c4:ba:76:37:18:51:e9:28:6a:0a:24:78:9c:e2:
57:73:f5:62:54:78:50:a7:11:87:59:f4:61:4a:5b:
8c:eb:2b:6c:88:f2:a8:8b:ee:64:fa:22:04:52:54:
d3:52:8a:ac:2a:2b:e5:7e:15:2c:94:ad:a8:ad:8c:
77:d9:d3:71:3e:8e:d2:cb:3e:49:bc:16:5c:ae:58:
84:4f:ec:19:87:5e:ac:be:ad:19:25:73:ef:2d:34:
17:62:62:98:17:2d:16:63:17:91:1f:b4:88:b3:52:
10:b9:a8:bb:3c:e8:c1:fa:d1:d7:aa:75:6b:01:5a:
63:ec:24:00:a5:47:8e:d5:96:8c:9a:98:27:56:27:
91:68:0d:98:62:aa:ac:74:a5:2e:66:a4:0d:46:38:
3c:d4:de:6b:0c:d7:51:9a:55:50:19:28:4a:97:56:
5e:74:4c:2f:80:3d:35:f7:8b:1f:1d:79:71:ed:b1:
4f:8f:f9:fb:98:bd:07:fd:07:db:09:cd:17:88:74:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0B:14:AB:0F:C2:AC:19:A6:50:E8:4E:4F:FD:F9:DB:63:A0:00:D9
X509v3 Authority Key Identifier:
keyid:8C:55:93:CA:96:80:A5:EA:38:78:33:FD:34:40:23:4B:9E:80:20:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:c7:e7:2c:f0:3d:8e:12:ad:bd:f3:65:ca:ae:65:3e:6b:91:
f7:de:4f:36:fb:24:f8:b3:19:a7:ed:b1:5b:c3:74:ac:1b:90:
bd:69:86:5c:99:17:77:c0:21:31:4f:73:e4:63:30:d2:ff:f3:
15:40:a1:33:b5:39:ae:a6:fe:53:ae:00:72:c3:30:18:c0:20:
04:16:b8:2e:66:6c:b3:5d:6f:b6:59:64:50:d4:7e:2b:aa:bc:
b2:9e:56:b4:d1:e3:10:5a:81:ac:bb:6e:6c:2e:00:7b:68:3b:
2c:f1:64:17:1d:90:12:80:13:67:07:0f:06:74:f2:2e:d7:bf:
5e:c4:98:9e:c8:fa:3c:dd:c4:cb:1f:c3:d2:b5:45:c8:1d:24:
47:5f:16:8c:66:ab:a3:32:51:17:6f:2d:36:ff:0d:3e:98:27:
34:21:af:72:26:39:9d:05:99:a3:14:bf:4a:e1:48:67:2f:7a:
ee:74:36:6a:14:b7:44:95:c3:90:1e:3a:b5:0d:e4:a9:30:ad:
90:e2:11:88:4f:c9:2b:fd:97:f4:ac:45:9e:d1:c2:a9:72:79:
19:65:d5:8d:0d:2b:75:7e:e5:0f:c4:84:cb:0b:68:ff:70:e6:
ad:6d:27:d4:0c:b0:cf:ec:49:10:d5:f9:59:21:73:a3:1f:18:
6d:aa:2d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:16:08 2025 by rpki-client