This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
File: XJzBFCqQdWDNmfBuXdAt5OIulEU.mft (raw, json)
Hash identifier: jP2RJSdAr+rtcsmKK/24ZPBF00Q82c7TxaeufIu2b8E=
Subject key identifier: E6:C4:06:F3:55:A1:38:AD:F6:38:E6:30:80:DC:4B:5D:9F:DC:27:AE
Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Certificate serial: 0261
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
Manifest number: 0254
Signing time: Fri 19 Dec 2025 01:03:51 +0000
Manifest this update: Fri 19 Dec 2025 01:03:50 +0000
Manifest next update: Fri 26 Dec 2025 01:03:50 +0000
Files and hashes: 1: XJzBFCqQdWDNmfBuXdAt5OIulEU.crl (hash: U4e0l4+IwqkhSgJ+HaOCX78opCLzYzLcEIArJ4RdrJU=)
2: D98071A44F4411F0AF01D40FC4F9AE02.roa (hash: jPpBuj/csuD+KDzy/QfN9S3fduIPNOyEYRQiDC1LErw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl
rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911636A, serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Validity
Not Before: Dec 19 01:03:50 2025 GMT
Not After : Dec 26 01:03:50 2025 GMT
Subject: CN=6944a476-354e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:ad:cb:20:70:97:14:79:d6:66:b0:e7:c9:
e7:bd:0c:ae:40:9e:e9:d7:9a:78:87:71:e6:75:05:
2b:3f:12:27:75:be:83:22:6d:d5:83:c9:87:e7:07:
e1:18:07:a6:13:4c:bf:c1:3e:56:d8:5a:51:fa:7e:
61:6b:f8:a8:a3:22:3b:d7:d3:c3:2d:aa:82:97:fa:
9d:ae:7a:2a:ef:0d:8e:a1:0f:d0:89:d0:c1:36:33:
3e:a3:32:d4:d0:a0:7f:d6:8c:9a:cb:cb:47:14:36:
23:6c:96:06:31:a5:14:ce:d2:d0:3b:43:c5:70:2d:
75:07:d0:2d:59:41:e6:46:26:b5:3c:a4:89:60:08:
41:f6:a7:1a:a0:61:85:ef:60:39:82:f0:3e:8c:7e:
ba:b8:7a:19:b3:6a:42:54:96:12:fe:e8:52:aa:2e:
8d:73:a6:6a:f1:8b:d6:14:c0:90:62:94:75:53:47:
25:eb:80:ba:17:a3:99:09:e7:50:2d:a8:5a:42:19:
a8:a6:af:7a:0f:94:cd:3a:db:4c:27:e7:a9:0b:6b:
2c:aa:4d:55:17:c6:76:c8:b5:b5:00:0f:ca:fc:d3:
42:6b:f2:44:97:6b:e1:be:1f:30:51:3e:f2:61:6c:
76:ab:23:ff:e7:03:e3:a4:e5:4f:8f:79:1d:c3:f8:
06:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C4:06:F3:55:A1:38:AD:F6:38:E6:30:80:DC:4B:5D:9F:DC:27:AE
X509v3 Authority Key Identifier:
keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:21:75:8e:19:95:8a:30:f5:a6:81:ca:5a:cf:91:36:be:e3:
81:3d:fb:5a:53:ca:22:a9:63:68:56:c1:43:42:63:83:a8:04:
ea:39:bd:95:78:57:55:c6:7a:d0:cf:88:ce:28:b0:79:b6:ea:
97:df:e0:71:29:d2:a5:f4:13:5f:c6:83:ee:b8:9d:0a:9f:6b:
39:80:09:1c:97:1a:2c:65:d1:64:99:9f:44:fc:e1:41:02:0e:
0a:b2:68:df:77:c9:5f:e6:da:40:af:12:5b:44:f5:66:a3:6a:
d8:6a:a2:1b:6a:3c:61:f0:e7:41:97:5c:fa:aa:ac:a1:d6:a6:
76:23:f9:fe:1f:69:48:5d:c6:03:fb:f8:97:7f:dc:22:53:be:
d7:b7:10:cc:44:1e:5c:a6:d9:6b:19:80:72:3e:1a:00:89:f2:
ea:b1:9c:8f:ec:0a:70:5d:f1:0d:b9:28:bd:6e:3e:e6:9d:6e:
ae:a7:73:ba:c0:fb:53:64:af:ec:4d:9d:db:99:20:ed:c9:1a:
cb:a3:0e:53:a5:a5:4d:75:57:84:50:36:83:9e:bd:ca:c0:ad:
d5:fd:4f:8d:a4:bf:02:23:e9:f0:65:d5:c6:a3:36:22:76:f3:
eb:1f:f1:48:74:f2:e7:74:5e:cc:f9:cd:34:2b:6d:ca:38:a1:
03:c6:99:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:59:18 2025 by rpki-client