This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
File: jqgV0DpRxRztXr5f2ZNStjdrVX0.mft (raw, json)
Hash identifier: sJdKbsNkPVdl4MziDRU8w8fWcujeuvO6Fr25KjKFKc8=
Subject key identifier: 28:90:C7:CC:93:5B:93:36:C4:E7:15:AB:5B:B3:35:4B:10:2F:E9:C6
Authority key identifier: 8E:A8:15:D0:3A:51:C5:1C:ED:5E:BE:5F:D9:93:52:B6:37:6B:55:7D
Certificate issuer: /CN=A9136067/serialNumber=8EA815D03A51C51CED5EBE5FD99352B6376B557D
Certificate serial: 06
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
Manifest number: 05
Signing time: Fri 19 Dec 2025 07:00:50 +0000
Manifest this update: Fri 19 Dec 2025 07:00:50 +0000
Manifest next update: Fri 26 Dec 2025 07:00:50 +0000
Files and hashes: 1: jqgV0DpRxRztXr5f2ZNStjdrVX0.crl (hash: PPObtFVIv3bHAxMOImolMvyTikqWybSwNDzuayO+H20=)
2: 902A638ED68011F0B036527A68D3641D.roa (hash: 2It0NfBqTerLdCUquomD/v4NX3dFAT9hIqZfvaAKNZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.crl
rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136067, serialNumber=8EA815D03A51C51CED5EBE5FD99352B6376B557D
Validity
Not Before: Dec 19 07:00:50 2025 GMT
Not After : Dec 26 07:00:50 2025 GMT
Subject: CN=6944f822-7f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:a6:c6:65:1b:88:bd:88:d0:1d:89:77:aa:
79:c0:5d:67:54:43:ac:82:4f:34:83:d8:e0:ec:81:
71:1f:4d:73:6f:d3:66:42:ff:3d:8b:11:ea:68:5e:
f7:72:a8:b4:5c:ff:58:c4:6a:5c:d6:88:b0:cb:6a:
77:c8:52:f8:b3:3f:5c:88:93:a5:55:e4:aa:d1:33:
4a:67:61:14:a5:12:73:0a:68:c7:b7:2e:be:fd:fa:
36:d9:6c:86:16:57:a2:7b:54:27:05:b5:e7:c7:94:
12:d9:79:f6:ac:f7:cb:14:26:2a:db:35:1e:7b:38:
14:4b:19:9b:97:af:41:1a:61:9c:ee:74:e9:9a:b5:
88:40:93:a5:c0:70:36:a3:a3:d6:49:11:3f:68:9c:
6e:14:5e:3c:a6:d4:30:9c:54:2b:a8:05:f3:9c:7f:
ff:c7:50:60:3c:dd:d7:1a:11:6d:5b:f8:15:fe:e7:
05:89:ab:bd:f9:12:c2:f9:29:f1:44:76:93:9b:3f:
7d:3a:1c:d3:ca:67:0b:8d:4a:27:86:69:75:cc:9e:
f1:ce:d9:96:2c:d0:47:e5:53:17:90:51:59:8f:2c:
46:36:5a:6b:63:69:9a:c1:b3:87:07:99:67:a9:0f:
52:be:5f:ce:5d:1f:65:03:42:93:0a:81:9b:40:15:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:90:C7:CC:93:5B:93:36:C4:E7:15:AB:5B:B3:35:4B:10:2F:E9:C6
X509v3 Authority Key Identifier:
keyid:8E:A8:15:D0:3A:51:C5:1C:ED:5E:BE:5F:D9:93:52:B6:37:6B:55:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:ae:bc:e3:8c:8c:8b:74:c6:b4:d4:2b:8f:ea:b8:70:ba:61:
c5:59:7a:19:90:96:bc:e3:c5:52:48:fb:8c:f8:c0:40:58:6e:
15:61:b3:8d:0d:99:f6:41:61:2f:18:0a:dd:47:84:41:1b:96:
6f:26:92:03:15:76:8b:3a:fe:a4:1c:ee:47:ea:f0:88:40:e6:
dd:c3:98:de:66:3e:a8:f0:a9:69:37:03:0f:dd:31:66:ee:b8:
e7:98:aa:d9:ce:cb:8f:2d:f3:71:7f:d0:02:02:53:89:e1:9b:
95:4d:35:95:9b:6d:63:60:c9:8f:85:54:d9:2e:c3:cb:ef:29:
ea:ca:92:26:be:92:a4:2c:84:6c:0d:af:dd:e7:90:2d:fe:a3:
9e:0f:76:3f:42:17:b8:ed:ec:62:9b:47:58:09:75:39:2b:cf:
1d:c2:22:20:06:e5:73:9c:ea:99:a8:fe:15:05:cb:93:74:e3:
68:0a:69:91:2a:a4:dc:7d:c2:15:14:39:aa:d2:8c:a5:10:0f:
95:7f:13:81:75:a7:51:97:79:ec:0f:5a:9b:ff:8e:88:05:f3:
9e:79:c5:7f:06:f8:34:bb:ec:6b:05:6d:07:18:f6:01:66:93:
b5:87:c2:25:3e:76:95:aa:a9:2c:43:8c:15:f3:7c:b5:08:ff:
20:0c:dc:e2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NjA2NzExMC8GA1UEBRMoOEVBODE1RDAzQTUxQzUxQ0VENUVCRTVGRDk5MzUyQjYz
NzZCNTU3RDAeFw0yNTEyMTkwNzAwNTBaFw0yNTEyMjYwNzAwNTBaMBgxFjAUBgNV
BAMMDTY5NDRmODIyLTdmOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCdZqbGZRuIvYjQHYl3qnnAXWdUQ6yCTzSD2ODsgXEfTXNv02ZC/z2LEepoXvdy
qLRc/1jEalzWiLDLanfIUvizP1yIk6VV5KrRM0pnYRSlEnMKaMe3Lr79+jbZbIYW
V6J7VCcFtefHlBLZefas98sUJirbNR57OBRLGZuXr0EaYZzudOmatYhAk6XAcDaj
o9ZJET9onG4UXjym1DCcVCuoBfOcf//HUGA83dcaEW1b+BX+5wWJq735EsL5KfFE
dpObP306HNPKZwuNSieGaXXMnvHO2ZYs0EflUxeQUVmPLEY2WmtjaZrBs4cHmWep
D1K+X85dH2UDQpMKgZtAFaKvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKJDHzJNb
kzbE5xWrW7M1SxAv6cYwHwYDVR0jBBgwFoAUjqgV0DpRxRztXr5f2ZNStjdrVX0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MDY3LzJGMjZGOTYyRDY4
MDExRjBCMUI0QzdBMDY3RDM2NDFEL2pxZ1YwRHBSeFJ6dFhyNWYyWk5TdGpkclZY
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvanFnVjBEcFJ4Unp0WHI1ZjJaTlN0amRyVlgwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2
MDY3LzJGMjZGOTYyRDY4MDExRjBCMUI0QzdBMDY3RDM2NDFEL2pxZ1YwRHBSeFJ6
dFhyNWYyWk5TdGpkclZYMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMmuvOOMjIt0xrTUK4/quHC6YcVZehmQlrzjxVJI+4z4wEBYbhVhs40N
mfZBYS8YCt1HhEEblm8mkgMVdos6/qQc7kfq8IhA5t3DmN5mPqjwqWk3Aw/dMWbu
uOeYqtnOy48t83F/0AICU4nhm5VNNZWbbWNgyY+FVNkuw8vvKerKkia+kqQshGwN
r93nkC3+o54Pdj9CF7jt7GKbR1gJdTkrzx3CIiAG5XOc6pmo/hUFy5N042gKaZEq
pNx9whUUOarSjKUQD5V/E4F1p1GXeewPWpv/jogF8555xX8G+DS77GsFbQcY9gFm
k7WHwiU+dpWqqSxDjBXzfLUI/yAM3OI=
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:38:49 2025 by rpki-client