This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json)
Hash identifier: 6lOuEYtC/mMIUfCwzHeiX9o3U1Esy02E2A9TQwwt8Uc=
Subject key identifier: B7:FE:EC:55:21:C7:DD:85:81:52:97:91:37:4A:BF:83:CF:58:6B:19
Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
Manifest number: 0116
Signing time: Fri 09 Jan 2026 04:11:07 +0000
Manifest this update: Fri 09 Jan 2026 04:11:06 +0000
Manifest next update: Fri 16 Jan 2026 04:11:06 +0000
Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: yLD6v+rZ+6P0zKO47VIXAJNG/DKSaf5FVb99e30drWA=)
2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: Q8jUoDfTBKkYt+wlmI66aJ+35Q4MifbD8LinqGUg/KY=)
3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: KoaV0URvtmzdHrqA1z33gHV+eShaD03rJhOUSMjsP9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Jan 2026 04:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Validity
Not Before: Jan 9 04:11:06 2026 GMT
Not After : Jan 16 04:11:06 2026 GMT
Subject: CN=69607fdb-ddb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:6c:0b:6a:22:01:fc:46:03:33:0a:82:8a:
24:93:cc:af:31:eb:a8:8a:a9:fb:a9:86:49:ef:7f:
9c:ee:0f:82:ff:92:13:b3:69:b6:4e:e5:56:df:4d:
51:92:4b:30:32:f1:f8:93:5f:f6:c3:a9:c5:19:32:
94:c6:76:ea:44:4d:a2:b4:79:46:3d:7a:a6:3c:60:
cd:bf:63:19:13:f5:e7:15:31:15:18:8c:20:0e:01:
56:ee:79:9c:66:c4:6b:8a:f7:a5:e6:4d:10:9e:67:
c2:1e:da:ac:32:2f:5d:c9:57:4c:ee:d9:14:8c:58:
c7:60:ea:cc:0c:bf:37:0a:0b:d9:93:6a:57:7f:f6:
41:51:f3:c6:87:65:9e:a4:c9:2a:ef:5b:53:59:fb:
19:21:01:83:b9:3f:d3:d9:24:d6:fc:fc:b4:a0:6d:
5c:68:17:c8:52:fa:d4:29:65:b8:1e:48:ff:ea:1b:
60:a7:8a:9e:66:bb:c7:4f:f2:58:4b:93:d9:9e:06:
8a:48:5f:00:b0:83:a9:18:ee:1d:b6:5b:7f:c6:41:
aa:d5:c4:ff:31:ba:e4:6d:37:b1:17:66:50:48:70:
7b:85:7f:d7:a9:38:09:06:49:e8:ad:7f:29:6a:8e:
c1:b9:45:17:29:37:58:7f:b4:9b:d4:99:46:c0:03:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FE:EC:55:21:C7:DD:85:81:52:97:91:37:4A:BF:83:CF:58:6B:19
X509v3 Authority Key Identifier:
keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:67:a4:9b:14:a2:94:87:57:98:99:c1:c9:1a:cb:ce:85:7a:
b2:1f:2b:b9:ee:4f:e6:3d:3e:ec:05:d1:04:1d:23:a7:ea:1e:
3b:84:d0:d9:64:16:d4:7d:4c:4b:29:8a:4d:51:3a:35:6f:b9:
25:d1:61:c5:8e:f6:d6:62:32:ba:bd:9a:8d:f2:c3:45:38:b6:
d0:07:59:c9:96:59:31:5d:33:8a:ea:84:30:7a:8b:5d:b2:d2:
c0:22:23:ac:d5:ba:77:6f:1d:77:b8:52:1c:d2:40:50:3d:b9:
aa:b2:2d:f2:7a:17:d4:4d:68:63:0e:13:75:e9:a8:2c:37:ef:
91:ae:03:15:b8:b8:43:fe:db:0b:f9:e4:61:36:dd:23:a3:38:
05:4d:dd:c0:94:0d:fe:38:c7:f4:91:8b:f9:86:85:7a:cf:bf:
8c:4f:3d:50:6e:30:60:e3:58:23:93:8e:49:74:88:76:6e:37:
10:ae:20:bf:1a:c4:0c:17:5e:39:a8:f3:f9:47:f9:04:07:74:
95:50:21:b5:56:09:59:19:58:5b:4b:61:7a:6f:94:ce:58:1f:
5b:bc:ac:8f:56:12:eb:a1:b7:41:65:44:4b:cf:1d:05:02:da:
8c:0b:de:84:68:e6:15:ae:7b:c0:34:f0:20:3a:3b:a8:17:c2:
c5:3f:01:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 10:06:01 2026 by rpki-client