This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
File: JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json)
Hash identifier: egXUMpQMgnmIxlst4WU2v8NFms8gTqkdZcazH1RCBU4=
Subject key identifier: 65:DF:5B:F1:F4:47:5B:62:C5:5F:FA:55:0B:3D:B4:FC:C4:7A:B9:0E
Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Certificate issuer: /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
Manifest number: 011E
Signing time: Thu 01 Jan 2026 04:21:22 +0000
Manifest this update: Thu 01 Jan 2026 04:21:21 +0000
Manifest next update: Thu 08 Jan 2026 04:21:21 +0000
Files and hashes: 1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: 62sFLm/YIMAea/73J3G5m9d5LkbZW19oph9PbBFz6w4=)
2: AE82DA3CCA3711F09D02C15BC4F9AE02.roa (hash: dFNn3jO43SdP+6Z3qx4suVU/JHAZ4DSHsOgrTOhwaUU=)
3: 1381259CCA3811F0B890C35CC4F9AE02.roa (hash: 2AIbsNw95CGEUCI+hzWilcZK30P6hAcxR4zxP/RQzJ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Jan 2026 04:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Validity
Not Before: Jan 1 04:21:21 2026 GMT
Not After : Jan 8 04:21:21 2026 GMT
Subject: CN=6955f642-77db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:7b:fd:66:b1:b0:7e:24:c0:07:5f:54:b2:
fa:73:2a:f9:26:9c:c5:ff:c9:29:6d:7f:e8:6c:86:
a4:55:08:56:32:2e:44:bd:41:39:12:78:cf:af:08:
0a:c3:90:c9:bb:0f:1f:25:23:2e:f7:74:44:58:6d:
3d:c6:90:06:17:9e:94:6c:ef:49:61:1d:19:82:5e:
f9:0d:82:20:bb:e9:ed:50:18:1d:57:15:8e:6f:78:
3e:b4:61:a6:65:f7:ef:db:94:32:11:b2:39:7f:e3:
82:0a:74:06:47:ca:27:35:ac:61:b4:fc:35:0e:ae:
ab:50:ed:cd:4b:f9:1b:98:73:c6:a6:d6:c4:30:63:
a0:2f:fe:43:39:19:a0:23:1a:7e:fa:df:31:11:63:
64:ee:a8:7b:58:34:b9:6d:b3:5b:d0:bc:06:0f:ec:
fb:e4:ec:b0:b7:cb:c3:f2:32:43:5d:a3:0d:ed:8e:
d9:2e:11:4a:9f:8c:d9:83:e7:9b:81:2d:6c:47:09:
2a:59:8c:25:72:2d:1b:97:44:d9:5f:e0:2e:21:52:
6c:bf:10:6f:ef:d2:a8:56:69:0c:11:4e:68:42:f9:
06:c5:e2:7c:2e:dc:b9:19:87:d4:ec:e6:d8:ec:32:
a4:3d:3f:95:2b:e3:10:93:8a:c2:72:32:fd:ec:ab:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DF:5B:F1:F4:47:5B:62:C5:5F:FA:55:0B:3D:B4:FC:C4:7A:B9:0E
X509v3 Authority Key Identifier:
keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:ea:c6:82:4d:b4:30:c7:4c:7e:c3:95:da:3c:22:88:5b:35:
97:7e:12:db:43:91:ad:18:94:d5:0a:e7:45:7e:97:35:18:96:
74:21:f3:4b:3f:c5:37:0f:6e:b9:3f:6d:d6:38:96:c8:e5:2c:
b8:40:43:a0:2e:3e:84:99:fc:a1:89:ea:66:b3:b3:45:f5:14:
9c:23:07:5f:3d:8a:28:82:b4:e1:02:9c:9a:9b:c5:b8:59:f0:
31:cf:c8:f4:02:85:2a:be:26:f8:83:1b:7b:60:2e:18:8e:c1:
d5:4c:63:69:16:4e:26:fd:ed:e8:3a:5f:19:f8:fa:24:89:1f:
54:0f:25:93:b7:16:0f:67:59:38:74:1b:38:c8:fe:72:c0:ce:
17:d2:c8:38:36:c0:20:fd:02:c1:69:ae:2b:fc:84:54:c1:db:
fe:f3:a8:b0:54:12:ae:2b:53:48:9f:b0:7b:4c:7f:fa:5b:f0:
1f:e5:69:6c:d6:34:e6:d6:d4:94:bf:23:62:41:56:15:45:97:
70:52:d4:8d:37:f3:f3:10:63:39:0b:d5:6e:9d:18:d1:54:60:
fa:1f:7e:32:5c:bc:c6:1f:3e:59:70:db:0c:97:bb:7e:e9:f5:
94:94:5d:16:3f:16:2e:4d:50:a4:e5:25:9e:63:3c:b0:84:79:
03:a6:6d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 12:33:01 2026 by rpki-client