This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
File: Jr1ToxmUC9VoemNFu1_hmIc453g.mft (raw, json)
Hash identifier: i/WwIwGcsErK4AqX1ZuFFnXPw6HCUKOsORD/EEzKM+o=
Subject key identifier: 45:A0:DD:D6:8C:BC:77:F7:A5:D3:B5:A2:D5:1B:2A:2C:56:40:43:05
Authority key identifier: 26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78
Certificate issuer: /CN=A91584B7/serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778
Certificate serial: 019A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
Manifest number: 0193
Signing time: Fri 19 Dec 2025 02:40:46 +0000
Manifest this update: Fri 19 Dec 2025 02:40:45 +0000
Manifest next update: Fri 26 Dec 2025 02:40:45 +0000
Files and hashes: 1: Jr1ToxmUC9VoemNFu1_hmIc453g.crl (hash: IvLil9M/9jP2fJ5FE2Sc3pPFME+VlaCzc7SkC8yu6Ok=)
2: 8CF33914747D11EE96578C20C4F9AE02.roa (hash: QQ1nvLzNS3HD5jlf0kpVNmen2iw89rXFQV6oEoTmCT0=)
3: 8D6378A0747D11EE96578C20C4F9AE02.roa (hash: CHOXnr1q1Ft+OfCJHHoV5TEgJwubnVFztuPcYTVOF9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl
rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91584B7, serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778
Validity
Not Before: Dec 19 02:40:45 2025 GMT
Not After : Dec 26 02:40:45 2025 GMT
Subject: CN=6944bb2e-a086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:20:86:74:d5:64:0a:29:53:d7:4e:e2:56:7a:
55:73:72:64:18:07:32:49:70:2d:b0:6f:d6:38:ba:
56:26:d6:bb:d0:17:87:52:9a:e5:e5:e8:d7:e9:94:
dc:74:44:d6:a0:0e:a1:9e:81:24:83:b3:ca:9c:02:
6a:0a:1f:79:d2:bd:7f:43:b6:bb:f1:cf:88:4e:e8:
6c:36:ed:79:4b:12:0b:d3:d1:38:78:0e:31:b3:6f:
d1:2c:79:dd:2b:ad:c2:05:a2:ca:87:58:4e:81:6a:
a0:34:d6:b9:24:52:9b:50:99:e5:2f:58:5d:22:81:
3c:c7:61:51:46:2c:cd:3c:0d:4b:c8:08:2f:1a:7d:
3b:d9:df:e4:43:28:25:1c:97:96:42:c9:f2:77:59:
49:1c:fb:96:15:2f:bd:d8:01:4e:c1:67:e1:3b:47:
79:80:14:75:61:9a:64:64:61:a9:52:86:8e:16:95:
f1:ae:8f:fe:c1:5e:45:ff:f5:09:30:04:cd:b9:6f:
10:e5:5a:44:0f:6f:8e:8a:22:49:2f:eb:88:c7:25:
f1:ca:b2:01:9d:ac:ae:f4:4a:15:86:14:64:cc:85:
c6:d4:fd:19:71:48:2d:1e:7f:f0:d5:47:49:3a:86:
25:4e:7b:69:56:ef:34:f9:03:90:ae:6d:7e:75:a7:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A0:DD:D6:8C:BC:77:F7:A5:D3:B5:A2:D5:1B:2A:2C:56:40:43:05
X509v3 Authority Key Identifier:
keyid:26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e1:ec:8d:55:47:34:d6:25:14:11:f7:45:b1:c0:5b:c2:2d:
42:e0:47:68:d1:c4:e1:07:da:85:c9:8a:84:38:e2:e1:bd:47:
0f:ff:1f:a9:9f:fe:93:93:65:6e:c4:7c:bf:f7:9b:34:9c:d9:
a2:d3:08:50:5b:dc:b5:20:5a:06:e3:cc:36:3e:7e:24:9a:94:
a0:4a:c6:c1:a2:1e:c8:49:3f:90:ac:c0:d5:09:c0:0c:36:24:
40:45:dc:63:15:ed:36:fb:3d:58:33:0a:a2:68:27:f2:86:65:
eb:14:e8:d4:ec:47:7e:7b:85:1e:b1:08:cc:5b:f7:0d:59:ea:
b7:33:c8:0a:b7:62:6a:3c:28:38:f9:8a:96:3a:76:1f:6c:55:
f9:2e:92:a8:60:64:7c:1d:d3:a8:96:cd:54:68:fc:19:83:2f:
51:ec:ea:9c:30:97:ee:69:67:a9:73:66:8f:a9:92:9e:99:8a:
f4:3a:5f:c7:b1:f2:de:fb:ed:a8:cb:e7:09:65:51:b1:f6:e3:
6f:5a:eb:cd:a4:34:f7:66:2f:7d:41:27:d1:a0:31:df:33:56:
2e:90:88:10:ff:23:0e:0e:18:7e:14:c2:4d:9d:aa:3d:99:b6:
65:29:ae:6c:4a:a1:08:a5:cf:85:c2:49:25:a6:91:e9:d2:b0:
08:ba:40:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg0QjcxMTAvBgNVBAUTKDI2QkQ1M0EzMTk5NDBCRDU2ODdBNjM0NUJCNUZFMTk4
ODczOEU3NzgwHhcNMjUxMjE5MDI0MDQ1WhcNMjUxMjI2MDI0MDQ1WjAYMRYwFAYD
VQQDDA02OTQ0YmIyZS1hMDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2yCGdNVkCilT107iVnpVc3JkGAcySXAtsG/WOLpWJta70BeHUprl5ejX6ZTc
dETWoA6hnoEkg7PKnAJqCh950r1/Q7a78c+ITuhsNu15SxIL09E4eA4xs2/RLHnd
K63CBaLKh1hOgWqgNNa5JFKbUJnlL1hdIoE8x2FRRizNPA1LyAgvGn072d/kQygl
HJeWQsnyd1lJHPuWFS+92AFOwWfhO0d5gBR1YZpkZGGpUoaOFpXxro/+wV5F//UJ
MATNuW8Q5VpED2+OiiJJL+uIxyXxyrIBnayu9EoVhhRkzIXG1P0ZcUgtHn/w1UdJ
OoYlTntpVu80+QOQrm1+dacDjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWg3daM
vHf3pdO1otUbKixWQEMFMB8GA1UdIwQYMBaAFCa9U6MZlAvVaHpjRbtf4ZiHOOd4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODRCNy9FQ0JBRUJBMDc0
N0IxMUVFOUE5MDA5NTNDNEY5QUUwMi9KcjFUb3htVUM5Vm9lbU5GdTFfaG1JYzQ1
M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pyMVRveG1VQzlWb2VtTkZ1MV9obUljNDUzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODRCNy9FQ0JBRUJBMDc0N0IxMUVFOUE5MDA5NTNDNEY5QUUwMi9KcjFUb3htVUM5
Vm9lbU5GdTFfaG1JYzQ1M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAM4eyNVUc01iUUEfdFscBbwi1C4Edo0cThB9qFyYqEOOLhvUcP/x+p
n/6Tk2VuxHy/95s0nNmi0whQW9y1IFoG48w2Pn4kmpSgSsbBoh7IST+QrMDVCcAM
NiRARdxjFe02+z1YMwqiaCfyhmXrFOjU7Ed+e4UesQjMW/cNWeq3M8gKt2JqPCg4
+YqWOnYfbFX5LpKoYGR8HdOols1UaPwZgy9R7OqcMJfuaWepc2aPqZKemYr0Ol/H
sfLe++2oy+cJZVGx9uNvWuvNpDT3Zi99QSfRoDHfM1YukIgQ/yMODhh+FMJNnao9
mbZlKa5sSqEIpc+FwkklppHp0rAIukDJ
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:43:56 2025 by rpki-client