This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
File: Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json)
Hash identifier: kBKchJxg5UfVNA/xXCks/PnZHN5Da76uq98sUut6bCQ=
Subject key identifier: 29:CA:16:EF:41:D0:74:4C:A5:97:25:CB:33:97:D8:9A:42:64:3A:E4
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial: 0603
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
Manifest number: 05F9
Signing time: Wed 31 Dec 2025 22:25:52 +0000
Manifest this update: Wed 31 Dec 2025 22:25:52 +0000
Manifest next update: Wed 07 Jan 2026 22:25:52 +0000
Files and hashes: 1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: rb8nW+/vu4CDbeyfKtEGY998+/MjG02dWqOAl9XbGb4=)
2: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: GHWxrMyj8cTLBR3x3Zxqpb0ny9iM0klScYyqOL/kuUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 22:25:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1539 (0x603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Validity
Not Before: Dec 31 22:25:52 2025 GMT
Not After : Jan 7 22:25:52 2026 GMT
Subject: CN=6955a2f0-acd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:69:e5:5f:2d:4b:e5:df:c0:bb:30:c1:54:
ae:f6:74:e8:9e:02:67:d8:47:38:ec:3b:79:ae:06:
54:89:f8:e6:f3:68:ee:7c:9d:12:59:f5:14:94:8b:
4c:34:db:2e:02:33:c3:89:40:c7:00:6b:3e:d2:67:
0b:fb:3e:76:11:e4:74:d4:44:29:26:4f:13:a7:9e:
15:99:ca:f0:1f:e5:17:68:0f:81:cc:0a:37:e3:e5:
94:18:88:b7:c7:df:a5:ef:13:13:dc:78:9e:68:46:
29:25:84:77:17:70:5f:bb:07:d9:d4:bd:7e:6c:21:
99:54:4d:ff:54:2b:26:a1:e9:bf:af:b9:36:a8:fe:
97:eb:47:b8:10:98:13:b5:55:b3:31:ec:1b:b0:c1:
58:7b:7d:80:57:3f:7a:f2:a2:83:c6:da:f6:35:06:
f9:78:e2:20:3c:d9:e6:bc:17:01:6c:d3:4c:88:79:
96:e1:72:94:1b:b9:36:fd:1b:64:2b:79:da:18:25:
66:cc:79:19:b6:29:8e:62:d9:30:31:39:74:18:73:
14:56:a1:19:9b:14:4a:85:e4:af:a4:1f:c3:54:a4:
82:9b:0b:1d:dc:a2:1f:6c:96:6b:cd:38:d9:5a:4c:
d5:2c:ed:23:fb:94:56:cb:57:17:37:a6:68:6e:5d:
6e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CA:16:EF:41:D0:74:4C:A5:97:25:CB:33:97:D8:9A:42:64:3A:E4
X509v3 Authority Key Identifier:
keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:69:80:a1:17:5d:ad:96:84:9c:e0:dd:36:6e:65:ef:e5:2f:
6b:88:94:4d:bf:be:f1:8b:da:8f:81:b5:73:d6:a6:9b:c2:da:
9e:e4:7c:dd:ab:35:94:ce:3d:a0:a4:12:81:11:70:98:7c:a2:
b0:4c:2b:3c:03:1e:42:cc:49:65:af:12:54:45:f5:e0:c3:c9:
a2:01:6c:6b:f8:6b:3c:c2:d2:a5:e1:3b:67:42:b9:ce:03:86:
28:46:96:af:b6:d1:00:d4:3a:22:9c:96:c0:23:0e:b3:23:86:
22:a3:5a:46:f1:5e:c4:45:97:e3:3f:aa:25:d7:fc:3f:27:4e:
79:7f:fd:75:cf:4b:d4:48:89:f6:8f:55:d8:a1:b7:7b:88:df:
ae:a4:ca:47:b0:ef:52:d6:83:61:66:ff:3f:1e:70:45:af:f2:
fe:e1:fc:a5:b5:f0:34:47:a0:4f:20:9b:3a:1e:1a:2f:8d:2a:
b3:14:72:fa:88:13:61:6e:ac:7b:6e:da:43:ad:b7:93:8f:6e:
46:d1:3f:10:88:cd:4b:6d:b8:ae:84:8b:0c:07:df:e8:92:16:
bc:e0:d9:90:66:f6:11:bd:16:0f:a4:4b:98:6d:42:78:eb:e6:
8b:0c:6c:e4:9a:e9:6d:46:34:d8:f3:67:61:c3:b5:94:90:f0:
bc:10:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 12:33:27 2026 by rpki-client