This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
File: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft (raw, json)
Hash identifier: Mg8WVQIU+0UAHb/shMypMn2Z4EzJXiYsKvvzBt+o30Q=
Subject key identifier: 48:D7:4D:81:C2:0E:6E:06:44:2C:A6:B2:79:D2:5A:45:30:BF:34:42
Authority key identifier: FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E
Certificate issuer: /CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
Certificate serial: 04C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
Manifest number: 04B0
Signing time: Sat 20 Dec 2025 23:16:29 +0000
Manifest this update: Sat 20 Dec 2025 23:16:29 +0000
Manifest next update: Sat 27 Dec 2025 23:16:29 +0000
Files and hashes: 1: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl (hash: MrKVYNtnKfsQQNCreNyzQhQOfniyxnP6FI0Y5yAOJ7c=)
2: A46DD938EF8D11EEAF47227BC4F9AE02.roa (hash: ySDLsUnA1Px9ZdN4Rj4bZJvdBUg6R7IdLHrHlc350Os=)
3: 3615B9806CB911EE91852F72C4F9AE02.roa (hash: oX7iVEw87PxrlXLRiZsATHbTumAb9Jcb4paecAnP08M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl
rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 23:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1216 (0x4c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FF2C, serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
Validity
Not Before: Dec 20 23:16:29 2025 GMT
Not After : Dec 27 23:16:29 2025 GMT
Subject: CN=69472e4d-4fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:1f:b2:f2:d4:44:77:68:ce:2b:6d:e7:38:
3e:9c:76:79:8b:b1:c5:2d:b7:a8:f3:5c:b3:f4:4d:
e0:30:24:f5:5c:34:77:31:66:a2:18:ad:d0:4b:17:
54:4d:b1:53:f8:85:a6:a5:68:fe:db:c7:75:71:86:
22:9e:e0:d1:f3:a9:95:75:18:81:0f:b8:30:3c:2a:
ed:b0:a8:91:61:e0:89:0d:fd:08:f0:9d:1e:f5:b2:
bf:85:b6:35:2c:ad:07:eb:38:a3:39:ec:65:68:c8:
97:c7:a7:5c:6d:33:20:22:e5:02:08:d5:70:65:2a:
79:16:83:11:69:69:40:0a:06:f4:dc:b0:13:dd:60:
53:88:55:c3:41:f1:eb:73:a1:6f:f3:fc:e0:b6:bb:
10:f6:22:56:7d:1f:d7:8c:4a:1f:25:37:f8:ef:64:
cd:73:06:8c:70:c4:0e:58:bf:6e:ef:99:76:ee:5c:
8a:c5:a2:c9:98:39:4e:fa:09:14:ef:ed:fb:09:07:
be:7b:10:4b:95:2f:51:10:6f:60:51:66:5f:1a:b5:
28:99:69:54:a1:fc:78:55:18:4d:c4:25:4e:c5:16:
b0:17:be:26:77:b7:90:bc:18:97:a0:d8:5d:a4:a6:
d7:e9:16:ce:38:6f:b8:06:20:37:48:fb:26:9b:d9:
9d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D7:4D:81:C2:0E:6E:06:44:2C:A6:B2:79:D2:5A:45:30:BF:34:42
X509v3 Authority Key Identifier:
keyid:FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:26:d8:b6:6b:f6:ae:4d:de:89:27:1c:b8:bd:fe:77:6b:5e:
f9:0f:0b:2f:9d:38:ce:74:a5:90:0a:75:30:3d:bc:55:31:59:
86:0d:8f:b0:d3:31:c1:f8:8f:36:7b:51:f3:21:81:ab:9e:bb:
be:b0:6f:0f:d6:0f:23:6e:e3:25:40:50:ef:2b:96:4c:e1:9e:
d3:cb:0c:7b:6d:b1:76:f7:52:05:b3:c4:6b:f1:3e:8c:c5:46:
0a:0b:87:73:c3:66:50:c6:0f:29:05:1e:06:a6:e5:d4:58:f1:
2b:2a:f5:e0:ea:0c:f5:46:e4:f7:0d:02:8e:44:f6:fa:30:1c:
b3:e9:3e:c9:91:39:d3:dc:c4:88:fb:e7:bb:d6:e9:f4:b2:d0:
60:2a:ba:df:99:c6:16:9f:3a:e5:d3:e6:ea:6d:43:e7:c3:71:
4c:52:17:d3:67:0c:cd:c3:25:3a:06:93:7b:13:40:fb:a2:ef:
c9:b7:dd:b3:ba:47:41:27:10:09:50:2f:14:3c:25:fe:76:a7:
18:00:12:a5:a7:98:d8:f6:50:7c:b9:e6:10:38:d5:d8:8f:83:
de:3e:20:f7:3c:30:62:37:ab:29:61:a0:4d:40:7d:3a:63:11:
1b:cc:36:0a:e0:db:85:0d:1c:42:15:37:da:72:ec:9f:72:9d:
a3:a3:55:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:41:38 2025 by rpki-client