This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
File: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json)
Hash identifier: qXBLU3io2R+VycyHx1OyiLQr7LMupGArzCeBp5uQ6bQ=
Subject key identifier: C1:C0:F3:A6:F8:ED:9D:42:98:36:70:C7:7D:7E:60:F7:7D:3F:63:7B
Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
Certificate issuer: /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Certificate serial: 0BD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
Manifest number: 0BCD
Signing time: Mon 22 Dec 2025 18:26:53 +0000
Manifest this update: Mon 22 Dec 2025 18:26:53 +0000
Manifest next update: Mon 29 Dec 2025 18:26:53 +0000
Files and hashes: 1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: 0R1JYf8Dxh5EY04tRmBcp63mp4dPBL1UMlMXgQVbDGk=)
2: A540A624378611EABE283384C4F9AE02.roa (hash: ANMKroNAd8SN9uIGuTzwVBbPP9a2iv11Jpq5VopofpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC42F, serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Validity
Not Before: Dec 22 18:26:53 2025 GMT
Not After : Dec 29 18:26:53 2025 GMT
Subject: CN=69498d6d-d235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:17:e2:c3:ed:3d:ce:3e:63:42:e1:44:86:
c9:f7:28:1a:9a:d7:84:fa:6a:72:1a:a6:58:70:ff:
ef:79:03:bc:0b:c0:38:c8:ad:43:a3:d1:76:3f:f7:
1f:d6:23:ed:3b:7d:b5:a6:54:f1:98:f1:0f:d3:f8:
2c:e1:9c:9e:d3:2f:e1:27:19:9b:51:f7:06:d7:e0:
29:86:77:97:d4:27:1b:3f:a1:6c:bc:d5:0d:df:05:
2d:b3:15:7d:c7:29:ae:87:d6:c0:3e:bb:70:a4:21:
b5:29:09:98:c4:08:ed:e6:85:ed:b8:da:38:de:e6:
bd:50:54:bc:c8:c3:66:3b:30:f1:a6:c9:ad:3a:b4:
44:41:25:81:73:8a:9c:49:02:c6:85:5f:50:2b:92:
0f:e1:07:7a:bc:29:1e:0a:d6:66:81:d1:e6:0a:93:
3b:9a:19:dd:63:5f:f1:a6:69:9b:db:35:14:39:8f:
8a:42:58:a7:6a:39:37:3b:5b:51:d7:59:ff:15:89:
a6:05:4e:89:a8:49:78:bc:14:66:82:17:7f:e1:a9:
05:e3:e2:33:fa:c1:1b:be:d6:00:6a:93:bb:8a:41:
87:9c:ef:ef:43:36:a5:43:d8:e1:dc:ce:41:04:04:
b7:46:31:f6:e9:cc:f6:b2:0b:c0:0e:a8:64:be:02:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C0:F3:A6:F8:ED:9D:42:98:36:70:C7:7D:7E:60:F7:7D:3F:63:7B
X509v3 Authority Key Identifier:
keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:73:ef:2b:ae:f5:32:fd:f1:1f:0c:c6:e9:68:18:9b:9f:84:
42:24:29:fb:b7:60:80:e0:0e:f6:5b:53:3b:71:cf:01:03:c8:
42:3a:51:d4:f7:88:21:cb:93:29:d6:68:57:53:d6:64:3c:1c:
d8:05:90:88:80:5c:c2:20:fa:e1:ff:49:53:b4:28:e9:47:22:
04:32:2b:ab:2c:6e:67:c1:ed:0c:6b:03:59:b8:fb:c6:53:24:
8c:02:a7:57:4b:e8:ba:25:3f:06:fe:28:31:e6:bf:d5:8e:85:
eb:62:87:24:fe:4c:05:8c:83:88:07:f3:4f:57:4e:5f:5f:5f:
65:f1:29:1f:11:c0:5c:37:a2:a0:7b:8a:09:20:a4:10:7c:c6:
65:28:4b:a9:32:2d:bc:3f:cb:64:0f:47:c1:2c:b7:e4:ef:9c:
76:3f:bf:f7:80:c3:1b:10:33:13:ed:f0:e3:39:f5:94:c5:a3:
6a:66:19:0f:25:f9:fb:a9:84:f4:bb:ed:4a:a9:cd:7f:b9:86:
bf:fb:7a:37:58:e8:aa:9c:88:81:41:ef:6f:73:af:e8:19:16:
9b:d7:a8:1a:a9:39:91:3a:25:5b:e5:8e:12:f7:46:f1:ce:27:
95:12:29:9f:5a:6f:48:9e:05:95:f4:1a:b9:11:97:24:44:aa:
94:48:a6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:26 2025 by rpki-client