This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
File: jH1rofFVCazzExWCWX1crZ5Bm08.mft (raw, json)
Hash identifier: CWCEyXQPBG1gIPA0ezcXSlGScbkANhmXw7F2/IFd0P8=
Subject key identifier: BF:02:82:68:14:4D:FD:E1:8A:92:7F:0A:01:FD:9A:A6:BF:CD:12:3C
Authority key identifier: 8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F
Certificate issuer: /CN=A91E46B1/serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
Certificate serial: 14F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
Manifest number: 14E6
Signing time: Sat 20 Dec 2025 16:36:24 +0000
Manifest this update: Sat 20 Dec 2025 16:36:23 +0000
Manifest next update: Sat 27 Dec 2025 16:36:23 +0000
Files and hashes: 1: jH1rofFVCazzExWCWX1crZ5Bm08.crl (hash: FWAfc4mxcrB28IP35UwgrM/EuXVLR5eSzJUEcOsDqSs=)
2: 39D4D290CB8311E88E74AD83C4F9AE02.roa (hash: mRh05D/XShHwy0gj5RK1ka6rqzpFsAG0dDwaNHbPs7E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl
rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 16:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5360 (0x14f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E46B1, serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
Validity
Not Before: Dec 20 16:36:23 2025 GMT
Not After : Dec 27 16:36:23 2025 GMT
Subject: CN=6946d088-dbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:f1:fe:99:6e:70:a6:e9:b4:77:28:f6:05:
8d:a2:22:c9:0d:27:ce:93:5b:7e:09:6f:d5:70:9b:
84:cf:d6:72:bc:ff:b4:02:53:63:43:a4:90:40:d6:
f6:71:43:51:6d:5a:54:4a:5d:59:5e:a6:b4:45:13:
55:a8:aa:af:d7:a1:47:26:e5:d6:0b:b3:1a:4a:2a:
20:cb:72:4a:84:e2:d4:0a:a6:c2:4b:08:cf:f7:7b:
f2:ee:5e:5d:e9:73:e2:5f:73:1a:86:48:a7:01:8b:
f6:c9:17:6a:ac:9b:4d:76:95:ff:7b:8c:9c:a4:f1:
60:6d:6a:46:73:9c:20:f2:b3:4a:15:a2:2e:02:8b:
69:99:a8:62:a7:9a:ab:5e:90:7e:57:c4:56:85:83:
b5:38:13:19:0b:03:8b:68:ba:86:e7:c7:c5:12:bc:
2f:2c:ea:09:94:ac:03:9c:41:5b:6f:88:cc:c2:cb:
e2:75:53:6d:8e:9d:b5:e9:90:51:2b:4e:d7:53:de:
04:70:93:e3:35:1b:1c:f0:bd:92:f0:61:3a:20:fd:
ed:62:52:e6:e1:47:c8:81:87:9a:ce:06:b8:6d:eb:
0d:6b:f7:8f:00:64:8f:f4:10:ca:de:35:a5:a9:fd:
ab:c2:71:94:5b:fc:5a:3b:a9:75:9a:d5:48:0e:ef:
d7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:02:82:68:14:4D:FD:E1:8A:92:7F:0A:01:FD:9A:A6:BF:CD:12:3C
X509v3 Authority Key Identifier:
keyid:8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:63:62:36:a5:ce:23:8a:80:12:1c:61:bf:9a:9b:70:a9:79:
cb:12:76:43:3d:9a:56:99:ba:06:0d:f6:c9:5b:71:eb:8e:03:
c7:a9:53:67:b9:89:0c:d8:55:f9:37:00:44:95:0a:94:18:d2:
fc:94:6f:f8:bd:d3:eb:bb:3e:65:4c:8a:a1:3f:cb:2f:06:c5:
04:a2:a9:96:56:b0:e7:32:e3:3e:ed:ca:b9:eb:e0:38:32:9f:
5b:4a:af:2d:8d:9c:88:8a:33:4e:76:d2:a2:43:5e:83:68:fc:
82:d7:68:d1:44:a8:5d:4d:41:45:d3:c7:fd:ad:3c:f1:7e:f7:
e1:81:09:80:27:46:e3:80:7e:8d:67:d2:8d:ea:d6:44:77:6d:
ce:e2:e5:ec:0c:6d:64:42:26:82:ce:dd:47:1e:dc:c8:31:1f:
b7:8f:fe:28:22:0f:82:00:26:06:81:f6:1a:90:2d:b5:80:d4:
29:1f:3c:93:57:e3:9d:a7:ec:7a:ef:8d:2b:da:d0:c6:06:0b:
f2:a9:cc:71:6c:2a:26:b4:43:c9:0a:80:c7:de:d7:ca:e2:f8:
2f:7a:46:24:24:4a:35:a6:ee:0b:d7:f3:2f:d2:8a:a0:34:ac:
83:06:69:23:f8:42:18:1f:17:c2:91:2e:19:a2:81:92:76:a0:
0f:ed:c0:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQ2QjExMTAvBgNVBAUTKDhDN0Q2QkExRjE1NTA5QUNGMzEzMTU4MjU5N0Q1Q0FE
OUU0MTlCNEYwHhcNMjUxMjIwMTYzNjIzWhcNMjUxMjI3MTYzNjIzWjAYMRYwFAYD
VQQDDA02OTQ2ZDA4OC1kYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp9Tx/plucKbptHco9gWNoiLJDSfOk1t+CW/VcJuEz9ZyvP+0AlNjQ6SQQNb2
cUNRbVpUSl1ZXqa0RRNVqKqv16FHJuXWC7MaSiogy3JKhOLUCqbCSwjP93vy7l5d
6XPiX3MahkinAYv2yRdqrJtNdpX/e4ycpPFgbWpGc5wg8rNKFaIuAotpmahip5qr
XpB+V8RWhYO1OBMZCwOLaLqG58fFErwvLOoJlKwDnEFbb4jMwsvidVNtjp216ZBR
K07XU94EcJPjNRsc8L2S8GE6IP3tYlLm4UfIgYeazga4besNa/ePAGSP9BDK3jWl
qf2rwnGUW/xaO6l1mtVIDu/XsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8CgmgU
Tf3hipJ/CgH9mqa/zRI8MB8GA1UdIwQYMBaAFIx9a6HxVQms8xMVgll9XK2eQZtP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GOTBEOTQ3NjY3
OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9qSDFyb2ZGVkNhenpFeFdDV1gxY3JaNUJt
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pIMXJvZkZWQ2F6ekV4V0NXWDFjclo1Qm0wOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDZCMS9GOTBEOTQ3NjY3OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9qSDFyb2ZGVkNh
enpFeFdDV1gxY3JaNUJtMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCyY2I2pc4jioASHGG/mptwqXnLEnZDPZpWmboGDfbJW3HrjgPHqVNn
uYkM2FX5NwBElQqUGNL8lG/4vdPruz5lTIqhP8svBsUEoqmWVrDnMuM+7cq56+A4
Mp9bSq8tjZyIijNOdtKiQ16DaPyC12jRRKhdTUFF08f9rTzxfvfhgQmAJ0bjgH6N
Z9KN6tZEd23O4uXsDG1kQiaCzt1HHtzIMR+3j/4oIg+CACYGgfYakC21gNQpHzyT
V+Odp+x6740r2tDGBgvyqcxxbComtEPJCoDH3tfK4vgvekYkJEo1pu4L1/Mv0oqg
NKyDBmkj+EIYHxfCkS4ZooGSdqAP7cDO
-----END CERTIFICATE-----
Generated at Mon Dec 22 05:49:21 2025 by rpki-client