This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json)
Hash identifier: iEjJJOY0UCkxAqIn8UJPq1BOJd5cDrsI0JkLmHwy2Sk=
Subject key identifier: CD:7A:2B:DE:B4:A1:71:C5:4E:E3:75:6A:53:86:0F:61:EC:5A:26:DF
Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Certificate serial: 0524
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
Manifest number: 0519
Signing time: Fri 26 Dec 2025 22:43:08 +0000
Manifest this update: Fri 26 Dec 2025 22:43:08 +0000
Manifest next update: Fri 02 Jan 2026 22:43:08 +0000
Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: lYfybeVcA/3vK6FGkQr4J4YgXzEQVfbr7Vdzb8egmzA=)
2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=)
3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 22:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1316 (0x524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Validity
Not Before: Dec 26 22:43:08 2025 GMT
Not After : Jan 2 22:43:08 2026 GMT
Subject: CN=694f0f7c-1d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d7:46:34:91:9f:b6:aa:74:60:82:21:78:91:
8e:3d:f7:ee:ca:a1:96:2b:7d:60:f4:d3:7c:3e:34:
76:b9:3c:f3:09:5b:77:92:72:02:cd:d2:04:3a:a3:
f5:01:d5:84:55:35:b7:c2:a4:0a:9e:41:e3:c1:8a:
63:4f:83:48:40:7a:0e:05:bc:7b:57:18:9a:9a:8d:
87:ba:e7:d9:e2:e6:5d:94:b4:b6:b0:54:db:74:74:
64:b5:92:42:33:9b:98:32:67:98:bf:75:6e:76:cc:
2e:da:00:6e:94:bb:81:7a:c9:4f:bb:3c:f3:a5:03:
2e:35:a9:1b:43:00:ac:33:50:ce:70:4e:75:25:f9:
30:99:d2:8f:ab:84:78:14:c8:9f:21:f8:df:42:2c:
c3:96:64:bc:b1:49:0b:ef:b2:ea:f0:de:b1:c6:48:
a3:d5:3f:69:dd:33:0b:7a:0c:8c:d8:ee:73:93:d7:
8a:0d:b8:ba:ca:98:6a:13:a2:12:40:42:7b:17:1b:
ea:e0:86:11:75:4f:c1:23:9b:14:2a:eb:f7:62:23:
c0:58:d0:03:87:41:63:68:f8:ec:67:0a:47:e7:40:
a5:97:f5:92:d3:23:c1:fc:3b:37:10:11:99:14:f1:
84:ff:61:c1:61:95:91:6f:49:9b:3d:6e:9f:e1:80:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7A:2B:DE:B4:A1:71:C5:4E:E3:75:6A:53:86:0F:61:EC:5A:26:DF
X509v3 Authority Key Identifier:
keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f4:57:83:80:c5:74:84:5e:a6:92:dc:3c:07:9e:b7:33:bc:
f6:f2:57:27:5f:a4:2f:40:21:65:e4:d1:89:67:27:9c:27:41:
df:05:92:bf:e3:36:4f:f4:21:76:bb:22:4c:71:2e:48:03:6f:
07:05:8e:88:8e:d1:c8:a2:1d:23:45:74:0c:e4:7c:d2:48:ea:
ff:97:36:4d:8b:e1:0e:ed:d3:53:f1:a4:e3:2a:1f:d5:55:b2:
15:c4:65:bd:33:6a:73:dd:09:69:d8:ac:6c:2e:c2:67:67:42:
e7:6d:bc:79:01:38:44:c3:f4:d0:64:aa:bb:25:39:e5:ee:50:
7b:ea:62:8c:98:05:a8:7f:e0:4c:29:15:c3:95:b2:9d:65:89:
3f:fb:da:f1:83:47:2d:82:52:d3:e9:f8:03:57:8e:12:ca:46:
25:2c:fb:c5:db:41:03:24:28:7a:b7:53:9a:e9:41:f7:b7:d6:
89:33:4f:1a:02:aa:d6:37:e2:b4:be:51:d5:e8:eb:57:4b:d1:
56:e9:c5:d1:e4:a0:98:de:5e:96:cc:b9:10:bd:8f:c7:11:25:
be:1a:39:c9:1d:5d:f2:ca:ee:e8:a3:6f:91:85:fd:c1:6f:34:
b5:b1:3b:f2:5c:49:f0:65:06:be:1b:71:82:39:58:6f:4e:97:
d7:f0:29:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 17:37:03 2025 by rpki-client