This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
File: JaQw8WuofbvVFVMhuA-CAeVt6v0.mft (raw, json)
Hash identifier: E2EzLxfjywxyfGHPSEqj9vMW/ZQkpp2TwW40iBpxv60=
Subject key identifier: AD:34:AB:BD:1F:F5:42:A0:51:54:A8:40:23:C1:07:6B:77:7A:F8:8A
Authority key identifier: 25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD
Certificate issuer: /CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD
Certificate serial: 0B74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
Manifest number: 0B6D
Signing time: Wed 24 Dec 2025 18:42:01 +0000
Manifest this update: Wed 24 Dec 2025 18:42:00 +0000
Manifest next update: Wed 31 Dec 2025 18:42:00 +0000
Files and hashes: 1: JaQw8WuofbvVFVMhuA-CAeVt6v0.crl (hash: GboCBsFkCvGvx3x9MX7GCwho1R8ymnaLE+2Aad64CcM=)
2: 49CE816E430A11EAA674EA74C4F9AE02.roa (hash: IB+34xalro/jHkO5e293QU71HFEZbQKkc7BC3RGNr7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl
rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 18:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2932 (0xb74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175F5F, serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD
Validity
Not Before: Dec 24 18:42:00 2025 GMT
Not After : Dec 31 18:42:00 2025 GMT
Subject: CN=694c33f9-0e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:09:26:f6:31:5a:8c:09:bb:67:9f:53:4f:
e7:49:66:f6:7a:4f:08:f5:51:f7:16:19:b2:1e:f2:
14:c6:38:2c:1f:dc:e2:f2:e3:98:08:38:6e:ee:77:
2c:28:d8:2f:45:79:61:ec:67:37:37:56:94:95:08:
07:99:f4:17:aa:de:be:77:95:27:8b:e7:bb:03:fc:
0e:31:b0:e1:62:42:bd:b4:ca:9a:b4:da:65:34:26:
f4:96:22:ce:de:6c:c6:ec:78:a1:50:a4:3c:e6:59:
da:7f:63:4e:c4:c0:70:e1:7a:4b:ff:66:0f:c3:0d:
80:56:a4:fa:d7:89:01:25:66:fc:d8:28:0d:fd:fc:
92:12:80:05:ed:5e:e1:62:f2:9a:5b:e6:1f:a7:31:
64:8e:b3:38:98:3b:d3:df:3a:0f:4f:07:f7:66:cd:
31:72:91:0d:79:a7:6f:b0:7e:e7:67:59:5a:d8:fe:
0f:99:c0:75:9a:d3:b1:93:1d:80:71:9a:f0:02:3e:
33:48:57:60:e3:b4:c1:bd:b6:6e:da:a0:e0:ee:48:
7d:b6:88:57:99:b5:70:92:20:c9:c6:4d:5e:9d:54:
48:86:34:aa:9e:f9:25:62:8c:39:a9:12:84:55:f7:
e5:e3:3a:26:29:aa:28:e9:2c:9e:7a:91:78:8a:fe:
4c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:34:AB:BD:1F:F5:42:A0:51:54:A8:40:23:C1:07:6B:77:7A:F8:8A
X509v3 Authority Key Identifier:
keyid:25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:86:47:cf:d2:28:56:4e:d3:97:00:14:ac:62:9d:00:d0:7e:
b7:a4:fa:67:04:b4:89:2d:ac:e7:4c:e5:97:69:90:9b:33:19:
0e:6f:0b:72:67:1c:87:f1:e3:2c:35:11:3e:8d:b9:70:11:95:
e2:63:fe:79:0f:52:fa:6c:f0:90:76:da:42:93:e4:b3:04:ff:
71:2d:cb:85:e3:74:76:96:ab:51:08:93:52:0d:4c:85:db:37:
a9:de:7a:f5:51:12:e1:61:28:df:8f:1e:85:52:fa:02:fb:be:
6b:f9:a5:25:52:6b:eb:a5:69:22:64:31:58:d4:b8:81:2e:44:
a3:72:2d:01:0c:88:e7:e0:2e:fe:58:69:54:50:4e:76:24:49:
99:be:5f:df:ae:a5:df:7f:06:0b:37:ba:6e:f5:12:c7:67:bd:
5c:97:83:be:93:99:0a:67:4d:e6:c9:e6:f6:3f:f4:28:3b:59:
da:75:ff:32:66:a6:24:d2:0d:45:e6:43:a6:59:d8:6b:55:0d:
11:1e:5f:7d:9a:dd:96:f0:98:3a:a1:4a:dc:c5:ce:1a:02:41:
3e:02:cd:49:1c:4e:95:82:44:04:4c:0d:c6:45:66:4c:57:6c:
7e:e5:af:ce:9e:55:ee:9d:2f:a5:ee:4b:fa:18:a8:4c:9a:22:
50:29:1f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 09:16:24 2025 by rpki-client