This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
File: jBwU3BZ027aLSUMBWHs9L5jtcBs.mft (raw, json)
Hash identifier: 7V50xNBX84tDx35hTpnX593Hy0SIM6pYnwwA29YoIiA=
Subject key identifier: 2C:7B:01:BC:64:C3:6C:22:AE:0E:ED:8F:62:C1:73:99:03:11:C4:F1
Authority key identifier: 8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B
Certificate issuer: /CN=A912ECA4/serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
Manifest number: 0151
Signing time: Thu 25 Dec 2025 03:17:24 +0000
Manifest this update: Thu 25 Dec 2025 03:17:24 +0000
Manifest next update: Thu 01 Jan 2026 03:17:24 +0000
Files and hashes: 1: jBwU3BZ027aLSUMBWHs9L5jtcBs.crl (hash: MBCzxAB3V6+SYD7AynZEMgAl1f/At767/aI9WSNzAMI=)
2: 24241410E2A211EEBFC9412EC4F9AE02.roa (hash: /HUgZFHQdOKqVGsoyIo8SC7cdtj7Z66CHfzRpJ6gBOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl
rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 03:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912ECA4, serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B
Validity
Not Before: Dec 25 03:17:24 2025 GMT
Not After : Jan 1 03:17:24 2026 GMT
Subject: CN=694cacc4-fbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:b5:13:be:4b:e9:e8:2d:cd:d3:cf:8a:f3:
23:c3:e9:e4:54:4a:3b:f2:59:34:6a:29:3c:c7:17:
85:56:0b:ad:3a:c0:ac:04:0f:de:41:15:65:f7:8f:
b4:d2:24:9e:cb:28:ea:e8:69:ef:82:97:73:07:e7:
0d:57:0a:05:07:b3:10:06:c2:b0:b3:5b:86:ab:82:
e0:e0:5b:af:72:9c:c7:9d:a3:ad:2b:fe:eb:12:72:
17:da:06:6a:f8:9c:3c:35:e0:09:a8:e3:c5:16:e4:
26:d2:72:a3:ee:5c:0a:c2:7d:22:25:e0:57:72:8f:
09:d3:e2:20:2e:6b:8e:e7:d4:ad:ce:71:cb:d7:6b:
03:0f:bb:cd:32:54:e6:48:62:f3:70:87:74:a6:64:
f1:d1:83:cc:8c:43:a5:75:ff:6f:31:c2:b2:ae:cc:
80:f6:2b:cb:9c:1b:06:50:c0:52:66:bc:9b:08:9d:
50:72:b7:14:b2:20:a4:c9:d5:08:08:c3:77:fb:69:
66:27:c8:18:b9:fc:b9:55:06:79:72:cd:84:c3:bc:
0d:e8:7c:3a:80:ad:c8:9a:a7:de:10:b5:65:0f:6e:
3f:88:27:e8:e2:98:d0:7d:68:e4:c2:1b:c5:ea:8d:
5b:ef:fa:a7:e5:53:8a:c2:7d:1f:da:73:ae:23:d1:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7B:01:BC:64:C3:6C:22:AE:0E:ED:8F:62:C1:73:99:03:11:C4:F1
X509v3 Authority Key Identifier:
keyid:8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:62:fa:4f:5f:3b:65:ad:72:d4:3a:57:83:f3:69:ea:5e:ed:
99:76:56:73:6b:74:1e:d9:39:34:5c:7f:36:ac:dd:b8:76:88:
a0:79:3f:f2:ac:4a:25:ef:02:d1:02:22:3b:e6:3c:eb:2f:69:
52:21:c8:98:cb:59:04:47:84:46:eb:5c:ec:ce:50:82:53:95:
2c:f3:74:d0:75:63:a0:6f:b9:d5:9e:fb:9e:8d:bf:cf:ef:e5:
a2:7c:ea:af:63:88:57:f7:66:ae:b2:d4:41:54:29:84:b8:1e:
fe:61:1e:21:60:79:eb:d3:d6:c9:6d:08:16:71:90:80:55:b5:
19:db:70:e5:66:66:aa:c9:39:a4:5e:57:a7:e2:b2:31:aa:7f:
22:fc:4c:4a:e6:04:65:c7:7e:2c:d6:24:0a:e6:e2:6f:c5:d0:
0c:dd:cc:61:8f:3d:74:99:83:e2:e5:76:73:95:73:5c:6c:0a:
c2:1a:2b:96:c3:91:b9:cf:a8:b5:a8:a1:bf:21:27:ad:cf:3d:
04:3d:2e:1f:08:73:67:3c:02:25:d6:34:88:63:2d:07:35:11:
5e:19:e9:b1:b4:69:d0:84:04:3e:2a:9f:fd:2e:3d:fb:85:b3:
e9:e0:f6:ea:29:a0:b9:e5:43:36:0d:0c:de:a5:a8:9c:67:dd:
ef:c4:64:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:45:00 2025 by rpki-client