This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
File: JZaec6mNmfQurIlCbGuUk8hdMxo.mft (raw, json)
Hash identifier: umJYscqifyRpU6f932P/HIWD6V2Fm7UsCudh7QSsf4Y=
Subject key identifier: 04:6B:98:15:78:7C:BF:5C:E7:E8:62:08:64:8F:15:91:E6:BA:27:5E
Authority key identifier: 25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A
Certificate issuer: /CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
Manifest number: 01A3
Signing time: Sun 21 Dec 2025 02:31:28 +0000
Manifest this update: Sun 21 Dec 2025 02:31:28 +0000
Manifest next update: Sun 28 Dec 2025 02:31:28 +0000
Files and hashes: 1: JZaec6mNmfQurIlCbGuUk8hdMxo.crl (hash: 2O6huK4XRGn54uM729lfRlUuHuDtptv6wdNrkA9/vww=)
2: 06BD1FD4D76F11F0A9A4AAFE78D3641D.roa (hash: ewWeev4YUI3dE6otxnE32uUrvsrjdS3y026oghavMGU=)
3: 07C2DDD0597011EE9C188A29C4F9AE02.roa (hash: gKjXag0sfARiLyE6YNWzcV2bYu/wNp5XI3N1jUN8tAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl
rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175911, serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
Validity
Not Before: Dec 21 02:31:28 2025 GMT
Not After : Dec 28 02:31:28 2025 GMT
Subject: CN=69475c00-00bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:85:fe:3d:79:bf:fc:7f:14:6b:40:cb:9c:
cf:65:f8:f8:91:cc:ce:cd:ae:53:bf:a7:28:cf:74:
72:7f:08:56:3c:84:a5:a9:c0:44:4d:94:d6:c7:a4:
07:98:f8:07:ea:bb:f1:2b:b3:5a:c9:a9:10:75:00:
36:b7:41:4b:b1:9a:67:bd:40:46:70:1f:c3:b3:0b:
0f:0f:3e:6c:ea:db:e3:61:ef:58:5a:71:f3:05:21:
97:58:d9:13:3a:7e:87:6d:9d:28:31:6d:d8:38:d9:
b9:be:32:8c:93:36:7a:80:1f:48:5b:0c:e1:93:7b:
e9:dc:19:63:ee:9f:d9:ae:77:62:0f:66:b1:10:12:
9d:7b:f5:f1:22:00:9b:8c:27:d6:34:e3:5f:aa:da:
38:ef:4e:37:0e:77:66:0f:d2:22:ed:de:7c:98:bf:
87:b9:52:66:9f:6d:00:76:ab:29:5e:4b:6e:fb:f3:
60:6b:87:4c:b1:d2:f4:6e:44:de:c7:c2:ea:8d:80:
d5:d4:d1:2c:c5:cd:7e:a1:53:06:26:8a:4d:20:6a:
d0:fb:5d:ca:ce:60:e3:c7:18:4f:10:50:bd:d3:94:
69:c8:ae:ce:62:2b:11:57:af:59:78:39:97:6b:de:
34:cd:ba:f2:db:f8:43:e9:dd:7a:c3:6d:cb:5c:e8:
16:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6B:98:15:78:7C:BF:5C:E7:E8:62:08:64:8F:15:91:E6:BA:27:5E
X509v3 Authority Key Identifier:
keyid:25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:5a:92:f7:59:31:1a:95:26:97:f8:d0:98:ae:44:a2:ad:b0:
a2:b8:ac:80:d0:d5:da:79:6c:39:fd:35:c8:87:b6:5c:b0:06:
75:5a:88:a6:cd:86:d3:c6:a3:b9:0e:e3:34:d0:a3:50:ef:92:
7a:de:7f:cb:d3:64:e0:80:a7:e4:de:fc:46:d6:23:bb:f8:35:
f9:02:e2:a2:31:d9:4b:a7:b5:8b:1c:ae:9c:fd:1b:40:64:54:
7b:f3:87:d7:1a:92:5f:48:ee:17:ce:b3:7f:ef:02:e5:05:45:
79:90:0b:37:61:da:9d:76:c5:a8:cb:cf:ed:4d:5c:68:3e:cb:
98:f0:72:07:10:20:04:4c:63:a8:fb:21:a8:0b:1b:64:18:56:
c5:41:14:d9:88:1f:58:db:f4:d7:3b:76:be:fb:f6:b6:4a:48:
0a:a7:b0:b6:88:6c:5b:94:3f:c2:47:a9:73:8f:56:3c:af:0c:
c3:33:4d:32:f0:08:31:21:9d:22:61:00:f3:53:a3:ae:97:4e:
3a:73:1b:54:09:b9:36:db:8e:cd:54:8e:b5:df:b0:88:70:f0:
fa:50:65:74:4d:5f:fd:4b:9e:7a:d2:22:b2:8c:14:bd:df:8d:
b1:b7:e6:18:51:03:73:62:b5:40:22:ca:c8:c1:c1:de:a9:d8:
3a:c2:d2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:01:33 2025 by rpki-client