This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
File: iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json)
Hash identifier: rVSPlN3qAsvJcuApU4JYGmNyQNqbFoC7m7XE3GyAKJ0=
Subject key identifier: CE:0E:EE:52:29:D1:52:44:E4:1E:60:7F:5B:EC:F5:DA:C3:AC:C1:AE
Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Certificate serial: 03A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
Manifest number: 039C
Signing time: Tue 30 Dec 2025 23:51:25 +0000
Manifest this update: Tue 30 Dec 2025 23:51:25 +0000
Manifest next update: Tue 06 Jan 2026 23:51:25 +0000
Files and hashes: 1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: YU3OkUqO550Qf9BRIuJTuJGjYM+sfVbivLwGw+b6Ba0=)
2: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: 4UMRc+U+QvsxtO1R2mqRXzqp5X2s02DN1FDAeR0/6VE=)
3: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: daMU3ImqJzsIleot5aS0XfHVIYpdh2rNrlvSYi4RSDw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Jan 2026 23:51:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933 (0x3a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Validity
Not Before: Dec 30 23:51:25 2025 GMT
Not After : Jan 6 23:51:25 2026 GMT
Subject: CN=6954657d-80d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:53:9f:98:0a:ae:b9:8d:ba:da:12:4c:05:
35:18:3b:9b:ce:74:68:18:8e:9d:57:c2:ae:52:b5:
ef:9e:46:b8:c8:19:36:cb:8f:22:36:39:dc:81:46:
55:9e:75:7b:a7:0a:4e:67:3e:2d:4f:d5:8d:6c:6d:
38:91:4f:a0:86:1e:ef:a7:2b:40:b9:79:44:0c:e4:
83:61:a2:85:a8:39:f9:6e:cb:fc:f9:cd:b0:14:c3:
9a:00:09:8f:a3:66:d0:d7:3e:47:71:e9:20:59:fa:
96:76:c9:2a:49:56:10:0c:6c:3c:58:cc:44:6c:f6:
33:c9:f5:09:4e:89:92:c6:d7:b7:b7:76:65:79:f3:
eb:2f:3d:23:2c:6a:83:67:49:47:34:db:fd:ee:f8:
6d:fe:41:0d:77:09:4d:64:bd:67:65:1b:e9:b0:e4:
e2:78:13:0e:73:b6:ae:61:6f:72:18:12:bd:f9:8e:
21:88:e4:01:0a:d1:f2:70:e7:18:d4:a6:73:98:38:
9f:63:7b:95:22:c6:be:34:ad:0f:3c:4f:4c:e7:2d:
4f:d3:6e:6a:14:b7:0f:d7:04:62:d2:ad:89:1e:2f:
12:19:ee:5e:6e:88:5a:f4:df:d3:17:89:85:65:f6:
c6:55:49:18:5e:e2:5e:39:b7:97:c9:2a:b9:ab:17:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0E:EE:52:29:D1:52:44:E4:1E:60:7F:5B:EC:F5:DA:C3:AC:C1:AE
X509v3 Authority Key Identifier:
keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:80:74:45:9d:47:56:a7:ce:9f:7a:6c:ca:48:1d:b6:5c:a2:
f6:7f:18:24:87:2b:66:85:3d:e5:47:18:2a:05:33:65:b0:2a:
ce:7c:59:57:0a:61:11:09:f1:ff:13:34:71:e8:b9:b3:8d:ef:
66:9f:77:30:21:5f:ab:78:08:bd:43:3a:b3:4f:26:40:59:da:
f0:72:31:40:17:06:45:d9:8e:d6:05:a7:cf:b9:13:24:37:b0:
f5:aa:10:d9:cc:22:c8:df:e9:f8:ec:70:97:54:6f:70:93:da:
f5:dd:ed:67:49:ea:1e:c0:98:40:8a:01:1a:33:f6:ed:ae:4d:
c5:c2:9b:c7:1f:b2:cb:8e:f0:fd:8a:02:57:0f:22:60:5d:fb:
4a:88:fc:a2:ff:f2:11:26:9d:08:7d:39:6d:27:3f:93:38:78:
c0:89:45:b0:0f:78:af:b2:16:78:59:60:08:9a:78:31:24:c1:
35:bf:7c:88:ff:ba:01:e5:d0:6f:c7:7e:dc:b8:31:01:41:1d:
04:33:b5:f2:0d:79:fb:74:1c:55:57:97:4d:0e:f0:91:65:c3:
49:9c:d0:b1:df:27:c1:5f:71:fb:e8:c3:c0:8d:f8:bc:05:ab:
38:3c:41:4d:b4:ed:ce:56:2e:b6:a2:0c:e8:ff:6a:63:52:ee:
b1:75:b8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 05:21:48 2025 by rpki-client