This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
File: j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json)
Hash identifier: DpmsqrEt4629E5VqYadu2PjNBEmB+pi9irteh5IsLpA=
Subject key identifier: 6A:FF:55:3E:F0:75:88:74:F4:17:EA:9D:6E:4F:82:24:66:11:BF:10
Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D
Certificate serial: 08C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
Manifest number: 08BF
Signing time: Sun 28 Dec 2025 19:51:05 +0000
Manifest this update: Sun 28 Dec 2025 19:51:04 +0000
Manifest next update: Sun 04 Jan 2026 19:51:04 +0000
Files and hashes: 1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: YFUIJ3xWxTDv4+T3CoCbJi0E0J2tIAGlZLe4No6derI=)
2: BA33C4CC638A11F090002541C4F9AE02.roa (hash: SYp3+Qw2NUOxAP2PI8VyKC4eZrJ7XxwyTmQykIlzc3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl
rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 19:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2246 (0x8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D
Validity
Not Before: Dec 28 19:51:04 2025 GMT
Not After : Jan 4 19:51:04 2026 GMT
Subject: CN=69518a28-0827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:32:04:5d:a2:2e:cd:24:2f:5d:fd:df:73:
53:9b:b9:4c:a0:81:4b:f5:b8:f0:37:e7:60:45:b9:
77:7a:6a:50:b0:21:65:60:07:6c:31:9e:b4:ad:b0:
92:71:d5:0f:80:24:8e:b8:1b:b2:11:a8:51:87:a2:
b0:be:b5:7f:37:e8:14:99:16:ae:ce:4d:a3:e6:be:
26:35:a8:69:47:33:b8:d0:7d:46:c3:5a:a9:ff:6d:
1b:1c:7e:31:f9:ab:76:02:6d:32:cb:7b:7a:77:6a:
b1:51:ba:9b:94:83:4a:82:c0:8a:29:cb:8d:ab:0b:
f1:d0:79:a3:42:85:2a:84:42:d9:ac:89:8f:56:78:
9f:82:f0:94:52:0b:0c:61:c0:a2:48:83:96:74:50:
d2:f3:43:f2:8a:e5:15:23:7d:b6:1e:5c:10:18:d6:
93:d7:95:c0:58:bb:89:44:98:2c:ba:ec:fb:1d:ff:
9f:7c:f6:01:59:93:b7:c6:dc:72:3a:e7:3b:7b:c3:
3b:b9:58:5d:59:3c:1b:81:29:60:f7:d8:3a:78:09:
9b:44:2e:21:f8:39:8f:76:ba:dc:b7:d7:ce:91:80:
46:26:91:f2:78:88:b0:74:fc:8b:9c:e7:c4:af:4c:
e1:36:17:de:05:5c:ae:7f:80:08:46:97:0f:55:ad:
ba:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FF:55:3E:F0:75:88:74:F4:17:EA:9D:6E:4F:82:24:66:11:BF:10
X509v3 Authority Key Identifier:
keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:66:62:db:32:1d:9c:c3:e0:35:16:d9:48:0d:d4:76:e2:e5:
65:8b:81:0d:b8:e1:3a:06:ef:35:74:b4:28:f3:28:af:96:cc:
a6:2f:01:46:57:3b:15:41:16:f7:cc:24:44:46:71:a8:16:3c:
19:67:4b:bd:bb:69:95:03:9b:1f:07:0e:d3:52:ec:0b:82:fc:
58:e4:8e:8d:68:37:b7:a7:ed:00:fe:8d:e1:b8:82:5e:6b:28:
c7:51:c2:43:ad:18:f4:99:3e:71:bc:a6:46:0a:ee:0c:99:87:
1d:ce:a3:81:fd:14:7b:bd:5d:90:d3:8a:ef:91:b8:d6:9a:84:
88:7d:2b:e6:de:a2:4d:b6:8b:15:64:8b:11:d3:06:25:e1:4e:
d1:7e:08:07:90:29:9c:f7:b8:97:30:89:75:e9:8a:fa:04:a2:
55:42:f2:ae:40:f2:43:ad:68:33:7e:c6:6b:e7:a3:d8:58:64:
24:00:fe:b2:a5:78:eb:39:53:a8:b5:27:1e:64:9c:b7:a4:d0:
a7:7c:3b:70:70:37:40:f0:10:02:a6:90:8b:c3:ef:58:f0:fc:
0e:38:0b:7b:9d:0e:4e:20:64:6c:e3:b7:db:d5:63:66:bd:34:
fa:5e:9c:04:01:63:2b:91:c9:f2:1e:6a:40:49:fb:7e:87:f9:
b9:37:ea:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1QUM4RjlDMUEy
Qjk5QkQ5NkQwHhcNMjUxMjI4MTk1MTA0WhcNMjYwMTA0MTk1MTA0WjAYMRYwFAYD
VQQDDA02OTUxOGEyOC0wODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3/0yBF2iLs0kL13933NTm7lMoIFL9bjwN+dgRbl3empQsCFlYAdsMZ60rbCS
cdUPgCSOuBuyEahRh6KwvrV/N+gUmRauzk2j5r4mNahpRzO40H1Gw1qp/20bHH4x
+at2Am0yy3t6d2qxUbqblINKgsCKKcuNqwvx0HmjQoUqhELZrImPVnifgvCUUgsM
YcCiSIOWdFDS80PyiuUVI322HlwQGNaT15XAWLuJRJgsuuz7Hf+ffPYBWZO3xtxy
Ouc7e8M7uVhdWTwbgSlg99g6eAmbRC4h+DmPdrrct9fOkYBGJpHyeIiwdPyLnOfE
r0zhNhfeBVyuf4AIRpcPVa26fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGr/VT7w
dYh09BfqnW5PgiRmEb8QMB8GA1UdIwQYMBaAFI+EUOoY7WY912MTWsj5waK5m9lt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDlDQi8zRkQyRDlDNENB
MkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpqM1hZeE5heVBuQm9ybWIy
VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2o0UlE2aGp0WmozWFl4TmF5UG5Cb3JtYjJXMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDlDQi8zRkQyRDlDNENBMkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpq
M1hZeE5heVBuQm9ybWIyVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMZmLbMh2cw+A1FtlIDdR24uVli4ENuOE6Bu81dLQo8yivlsymLwFG
VzsVQRb3zCRERnGoFjwZZ0u9u2mVA5sfBw7TUuwLgvxY5I6NaDe3p+0A/o3huIJe
ayjHUcJDrRj0mT5xvKZGCu4MmYcdzqOB/RR7vV2Q04rvkbjWmoSIfSvm3qJNtosV
ZIsR0wYl4U7RfggHkCmc97iXMIl16Yr6BKJVQvKuQPJDrWgzfsZr56PYWGQkAP6y
pXjrOVOotSceZJy3pNCnfDtwcDdA8BACppCLw+9Y8PwOOAt7nQ5OIGRs47fb1WNm
vTT6XpwEAWMrkcnyHmpASft+h/m5N+rq
-----END CERTIFICATE-----
Generated at Mon Dec 29 04:16:31 2025 by rpki-client