This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
File: JijmqJTN_JNz89uc_PvFFD_6Kj4.mft (raw, json)
Hash identifier: 5UCuXCjG0/W10Mmiuc71cRi3aTi3NcPCC3KyhjyhcUY=
Subject key identifier: FD:8C:02:BB:8F:92:7F:94:3B:7A:55:CD:E7:4F:C6:A1:F4:62:01:D5
Authority key identifier: 26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E
Certificate issuer: /CN=A91F98D7/serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
Manifest number: D0
Signing time: Sun 21 Dec 2025 04:55:49 +0000
Manifest this update: Sun 21 Dec 2025 04:55:48 +0000
Manifest next update: Sun 28 Dec 2025 04:55:48 +0000
Files and hashes: 1: JijmqJTN_JNz89uc_PvFFD_6Kj4.crl (hash: QynUjW75C8fCysbuBwVzBPeboTzUNdejErRrhigORYo=)
2: D1E8FCF6A87111EF96B74932C4F9AE02.roa (hash: enXEkpBa0eGlKzSX90hnhUrWxqZsAsvyTyWFjRwdRIY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl
rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F98D7, serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E
Validity
Not Before: Dec 21 04:55:48 2025 GMT
Not After : Dec 28 04:55:48 2025 GMT
Subject: CN=69477dd5-fa11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:be:e6:78:6b:e2:3d:5c:48:bc:0a:e0:65:
37:72:ff:e5:0a:61:e2:33:d4:5b:fe:63:e4:41:b3:
b7:82:43:0d:28:bb:d5:d9:ba:38:c3:07:05:31:16:
0f:6c:83:90:19:6f:a4:41:30:d1:0b:f8:cd:2c:9c:
61:c6:72:27:75:94:e5:b3:e8:48:60:4c:0d:a9:fd:
4b:5c:de:e8:6b:2a:20:6a:ae:eb:ae:21:e1:8c:f9:
72:12:c1:9e:50:6f:ac:e7:7a:63:85:d2:e4:7a:8e:
08:8f:93:37:42:8a:1b:92:71:e3:b5:cb:0a:0a:e7:
94:8f:75:21:ed:6d:6e:64:65:8b:cc:30:41:bd:3c:
dc:6e:b0:f5:27:64:33:af:19:d9:b4:ca:4d:69:c9:
e8:7f:69:b5:19:1f:cb:e1:4d:bd:69:59:5a:26:45:
24:a5:ff:7c:09:a6:a8:f1:db:07:ec:67:36:63:bc:
44:a8:e2:75:18:fe:5d:4f:b9:3f:47:ac:bb:32:5c:
f3:f1:a5:74:28:66:a1:d7:67:06:80:3a:b4:5f:82:
a2:f8:f6:65:74:3d:ac:b5:c9:19:a3:cd:80:68:65:
25:00:21:70:70:22:2a:92:24:d9:23:a6:8f:0e:b9:
a2:e5:ca:e7:05:5e:ae:57:df:2f:c9:a2:06:f0:c4:
02:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8C:02:BB:8F:92:7F:94:3B:7A:55:CD:E7:4F:C6:A1:F4:62:01:D5
X509v3 Authority Key Identifier:
keyid:26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b9:76:5b:37:5a:6c:c1:4c:53:fa:f0:1e:5d:bc:31:d4:d2:
3a:ee:aa:b2:59:1b:9e:dc:5d:28:87:a9:19:c6:eb:44:26:b8:
cd:71:d3:9b:80:60:b0:e5:10:bc:02:37:62:55:a7:e4:23:38:
08:81:da:17:05:fc:66:a4:33:87:2a:d0:65:fb:7f:9e:84:39:
63:4e:83:83:d0:99:fa:48:0d:32:eb:57:dc:9a:21:ff:c3:13:
34:19:67:a6:e1:ee:48:e3:35:75:44:a0:7d:66:d1:26:9d:25:
9a:50:94:d9:49:4c:fb:fa:e9:74:e4:a6:4e:33:66:20:12:27:
d5:3f:70:64:64:4e:87:68:13:85:cf:e5:e0:24:99:ef:40:6b:
9a:8c:fa:f4:78:c5:d1:23:b7:c7:e3:35:96:71:3a:93:c2:71:
3c:43:10:12:90:b6:cb:ee:27:54:1c:10:97:a2:a4:40:b3:40:
00:29:15:a8:2d:1e:bc:6d:de:f5:17:05:f8:f4:a7:f7:1b:61:
e8:c0:93:7c:a8:1e:11:62:4a:8f:cf:54:08:7a:31:78:99:85:
a8:a3:37:49:d5:b0:4a:84:73:ed:10:d2:ed:af:c9:b1:ac:40:
4d:9c:fc:84:d7:f6:ad:36:bf:be:28:f2:eb:4d:e1:6b:be:ce:
23:51:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:18:19 2025 by rpki-client