This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
File: j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft (raw, json)
Hash identifier: G8gS1YQcbFqOJtriK1YwJzz3vR/IM7bK1eJRw/S8/DM=
Subject key identifier: 27:FD:EB:F6:B9:8B:AC:08:87:20:CF:B6:D7:58:33:93:19:99:37:81
Authority key identifier: 8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9
Certificate issuer: /CN=A91644A4/serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9
Certificate serial: 0307
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
Manifest number: 0300
Signing time: Fri 19 Dec 2025 00:25:46 +0000
Manifest this update: Fri 19 Dec 2025 00:25:46 +0000
Manifest next update: Fri 26 Dec 2025 00:25:46 +0000
Files and hashes: 1: j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl (hash: ZMVpIJnul+ytjlpYxeaib+q3wqoV5ogMbVXq+zukPds=)
2: 3B501252140811EDBF3D2F27C4F9AE02.roa (hash: UP0rzzGm1RNNAwSNVW6RQ9A/3hrn3jElJIPxPVvX0ks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl
rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 775 (0x307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91644A4, serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9
Validity
Not Before: Dec 19 00:25:46 2025 GMT
Not After : Dec 26 00:25:46 2025 GMT
Subject: CN=69449b8a-4c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:b8:df:f2:2f:91:a7:50:32:42:31:34:38:
a4:d2:9f:72:2b:7b:18:cc:53:93:18:f6:b9:cd:c3:
65:ff:ab:59:4a:d0:b2:db:2f:5c:e1:2b:35:c5:42:
43:eb:66:e2:4b:75:4a:c3:df:27:d7:9a:ae:28:9d:
ce:0b:bb:e8:c0:ac:2b:eb:9d:d0:f8:2c:ef:2a:1e:
10:20:20:c6:fe:a1:1e:33:dd:85:c7:e3:c1:9c:e8:
6e:a3:d2:16:9e:2b:9e:57:bb:e3:58:c0:32:66:c4:
6a:84:81:51:d0:3f:5b:92:b0:46:9b:dd:cb:1c:bd:
44:d8:64:e0:d1:72:fa:84:45:10:b6:6c:c6:77:45:
b9:a5:c6:3f:b8:d6:b3:f9:b6:04:7e:37:d9:81:ec:
19:bd:5e:ce:ee:09:4a:a2:0c:59:de:c2:b1:09:0a:
97:cf:a4:96:fe:55:75:be:c8:cb:ec:79:67:e7:b8:
7f:72:7f:21:d2:67:61:00:af:88:13:82:0a:0a:72:
4a:d4:47:fb:0d:2c:ad:15:d9:ae:c1:11:31:d1:e3:
86:fc:96:f3:c2:6e:df:31:cf:4a:a9:60:32:28:95:
00:11:a7:48:76:86:8e:58:99:be:c0:5b:66:59:9c:
e7:f0:c0:1c:27:5b:3d:4a:29:b1:a8:0a:1d:d1:23:
e3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FD:EB:F6:B9:8B:AC:08:87:20:CF:B6:D7:58:33:93:19:99:37:81
X509v3 Authority Key Identifier:
keyid:8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:82:83:0e:23:34:b9:f7:6f:59:d4:6b:6f:a8:2e:3b:ae:07:
4a:0b:7d:ff:24:38:24:ad:f9:65:a0:f8:66:d2:95:7e:58:ff:
a4:4a:03:44:7b:3c:f7:65:22:a5:8e:0f:a1:f7:3f:24:61:22:
51:64:57:39:5a:c9:52:b0:11:32:94:6d:f1:85:ac:3f:d2:21:
07:61:00:bf:38:ff:73:54:e0:56:5c:62:a0:82:68:7a:65:b8:
9c:36:05:32:12:a2:b7:a9:52:34:f1:a9:e1:62:a1:97:cb:4b:
67:cf:9c:ee:e6:96:c2:7b:a4:a3:39:6c:a9:b2:f7:d3:b8:5e:
0b:eb:3c:9f:e4:e8:da:49:0e:0b:8f:07:75:4c:cd:f7:41:b6:
a9:ca:69:9f:12:5b:27:99:92:bf:67:53:fa:5e:f1:0e:c3:a0:
ef:47:b5:8a:96:29:aa:e4:81:82:62:84:5d:cc:36:5a:f8:f3:
3b:4c:19:79:94:4a:09:b3:c7:eb:71:72:7b:c2:50:79:ba:77:
ce:a8:04:e0:b7:38:0b:8a:17:62:69:cb:d4:b2:93:70:59:f4:
0c:51:77:81:3e:e2:dd:1e:1e:0f:f2:01:cf:72:28:06:54:0f:
63:e4:26:8c:54:b0:34:95:5b:86:35:72:38:95:49:0a:da:9f:
45:21:24:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:24 2025 by rpki-client