This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
File: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft (raw, json)
Hash identifier: 40O3RoI9XGCc5h86Ze0q2LnwZD0SqRyB4NyzLZutQpc=
Subject key identifier: C3:FD:43:C1:41:43:02:FD:66:F2:41:C8:71:52:A2:14:72:81:4A:8A
Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
Certificate issuer: /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Certificate serial: 187A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
Manifest number: 185B
Signing time: Sun 28 Dec 2025 16:17:38 +0000
Manifest this update: Sun 28 Dec 2025 16:17:38 +0000
Manifest next update: Sun 04 Jan 2026 16:17:38 +0000
Files and hashes: 1: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl (hash: YSexZ6yxvNFQipPA2KeomOVPUNHV/dMGmExXUIhH01A=)
2: FCD95792C21111E792F4785EC4F9AE02.roa (hash: BMiJfLefqeIikFuUPpDExSa3UsAxL9dNs6RKiD88uUQ=)
3: 1E76B980C4BA11E78E05EE70C4F9AE02.roa (hash: d7zKEGh0lk8izfNZY0knPSNCV7Y5mFUGLfE2IWUfUWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl
rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 16:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6266 (0x187a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FB, serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Validity
Not Before: Dec 28 16:17:38 2025 GMT
Not After : Jan 4 16:17:38 2026 GMT
Subject: CN=69515822-6110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:d5:50:56:8a:74:e1:cc:d3:02:90:d4:0d:
82:d1:57:69:de:79:f5:21:74:6d:6a:2a:31:ef:ae:
21:9d:ad:e4:1b:33:be:07:c5:69:93:b7:6e:52:d3:
07:08:0f:bd:83:3b:14:d4:c5:c8:56:6c:3a:27:9d:
ad:ac:d5:6f:5f:fd:32:92:f0:04:99:d0:03:db:de:
59:5f:6a:34:4c:d2:79:05:11:48:4b:b8:1a:70:0c:
94:9e:d4:72:a5:ab:10:9c:1e:8e:68:4c:d1:67:cd:
c6:70:c9:c0:0b:9a:a9:fc:37:b4:70:db:9f:ef:b1:
a2:97:19:28:c0:c1:27:b3:a3:98:3e:1e:e8:36:b7:
b4:8c:54:cd:81:ad:ba:77:2a:48:0f:5a:2c:d5:41:
92:85:af:e2:54:9d:ea:23:d4:3c:4b:ce:a6:f2:57:
f3:02:3a:70:9a:f3:b0:b7:ac:84:5c:66:6c:cf:a9:
a8:58:69:1e:41:88:35:a0:22:f3:16:de:3f:47:76:
19:d5:8f:14:b0:db:0c:1f:e7:9d:d9:70:f2:97:09:
40:6f:a0:4a:9b:38:f2:a2:a3:bf:55:90:d5:09:96:
c6:7f:c8:72:1f:dd:25:03:17:9f:71:f6:fb:55:d2:
e1:73:5a:c2:c5:f5:7e:9b:fc:6f:d9:4b:b0:5d:2c:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FD:43:C1:41:43:02:FD:66:F2:41:C8:71:52:A2:14:72:81:4A:8A
X509v3 Authority Key Identifier:
keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:94:f6:e7:66:31:6f:47:c4:17:65:f0:99:9e:12:d3:38:4a:
ff:2d:7a:98:d8:67:b1:99:71:0d:45:e8:0c:ae:dc:87:75:f1:
64:ba:b0:08:78:62:a2:c7:48:55:12:1d:dd:6d:17:44:5c:e2:
c7:b6:2c:f6:3d:7d:87:3d:8e:f5:61:35:3e:c1:43:95:52:cc:
dd:53:43:c2:b8:80:50:8d:0c:f3:61:46:f4:1e:13:8c:e1:a7:
68:25:e8:d5:af:13:ba:d9:9d:03:32:1c:6b:a8:50:46:1b:dc:
30:c6:37:23:8c:9b:68:51:0f:dc:66:c3:19:cf:78:5d:5d:54:
43:d9:41:8a:12:72:89:41:ef:7f:d3:5b:7d:57:a3:05:c3:00:
e1:9b:2d:77:3c:09:28:a3:d4:0d:9e:b6:d7:ae:ad:1f:2e:10:
e5:f3:1b:ff:d3:87:58:98:db:58:1e:46:d1:b6:ff:1d:a2:92:
84:9e:c5:98:3c:c7:1a:b7:a1:41:14:50:9a:aa:a4:83:74:20:
71:e4:40:5a:ad:dc:42:e1:6c:fb:64:65:f7:1b:eb:11:64:2a:
d8:36:be:28:6d:dd:df:5b:b4:a9:d3:55:fb:64:b6:6c:db:7b:
cc:55:37:58:5b:88:b8:2d:44:d9:00:7b:9d:d3:f6:9a:09:d6:
56:03:8f:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1RkIxMTAvBgNVBAUTKDI2MTk5QzVGNjE4OUUwMkVDNTE2ODUzOTE5RTE1QkE2
MDFEN0M4NUYwHhcNMjUxMjI4MTYxNzM4WhcNMjYwMTA0MTYxNzM4WjAYMRYwFAYD
VQQDDA02OTUxNTgyMi02MTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvErVUFaKdOHM0wKQ1A2C0Vdp3nn1IXRtaiox764hna3kGzO+B8Vpk7duUtMH
CA+9gzsU1MXIVmw6J52trNVvX/0ykvAEmdAD295ZX2o0TNJ5BRFIS7gacAyUntRy
pasQnB6OaEzRZ83GcMnAC5qp/De0cNuf77GilxkowMEns6OYPh7oNre0jFTNga26
dypID1os1UGSha/iVJ3qI9Q8S86m8lfzAjpwmvOwt6yEXGZsz6moWGkeQYg1oCLz
Ft4/R3YZ1Y8UsNsMH+ed2XDylwlAb6BKmzjyoqO/VZDVCZbGf8hyH90lAxefcfb7
VdLhc1rCxfV+m/xv2UuwXSx1RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMP9Q8FB
QwL9ZvJByHFSohRygUqKMB8GA1UdIwQYMBaAFCYZnF9hieAuxRaFORnhW6YB18hf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGQi9GRERCODhEQ0My
MTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRDN0ZGb1U1R2VGYnBnSFh5
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pobWNYMkdKNEM3RkZvVTVHZUZicGdIWHlGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzVGQi9GRERCODhEQ0MyMTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRD
N0ZGb1U1R2VGYnBnSFh5RjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCnlPbnZjFvR8QXZfCZnhLTOEr/LXqY2GexmXENRegMrtyHdfFkurAI
eGKix0hVEh3dbRdEXOLHtiz2PX2HPY71YTU+wUOVUszdU0PCuIBQjQzzYUb0HhOM
4adoJejVrxO62Z0DMhxrqFBGG9wwxjcjjJtoUQ/cZsMZz3hdXVRD2UGKEnKJQe9/
01t9V6MFwwDhmy13PAkoo9QNnrbXrq0fLhDl8xv/04dYmNtYHkbRtv8dopKEnsWY
PMcat6FBFFCaqqSDdCBx5EBardxC4Wz7ZGX3G+sRZCrYNr4obd3fW7Sp01X7ZLZs
23vMVTdYW4i4LUTZAHud0/aaCdZWA49X
-----END CERTIFICATE-----
Generated at Mon Dec 29 08:25:43 2025 by rpki-client