This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
File: jZoijMUvgA7lpDIwezQyxj2KnYc.mft (raw, json)
Hash identifier: GChk81dUcabCQP928SWB+94IRTLRlffFTQi6y+WtygU=
Subject key identifier: 17:D0:E3:DC:A4:82:94:85:CE:82:EC:78:8B:34:7B:28:37:C8:A6:36
Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87
Certificate issuer: /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
Certificate serial: 1C41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
Manifest number: 1C36
Signing time: Sun 28 Dec 2025 16:00:13 +0000
Manifest this update: Sun 28 Dec 2025 16:00:12 +0000
Manifest next update: Sun 04 Jan 2026 16:00:12 +0000
Files and hashes: 1: jZoijMUvgA7lpDIwezQyxj2KnYc.crl (hash: 5Yh268dWmADY1F9K8hoPfGLwVBL+Lbxja0yyEGqPrx4=)
2: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (hash: kBZXfU8hYHbxkpL5pMVsBeQd1k5TVtind4j2n+kliDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl
rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 16:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7233 (0x1c41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FDBF, serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
Validity
Not Before: Dec 28 16:00:12 2025 GMT
Not After : Jan 4 16:00:12 2026 GMT
Subject: CN=6951540d-d914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:21:12:6f:52:c5:d5:2a:07:04:b6:cf:8b:
a7:61:40:38:7b:30:4d:26:60:94:a5:49:48:63:17:
93:4c:f8:7c:3b:d6:c4:f6:19:02:2b:4a:ec:aa:47:
90:c0:8c:9b:76:a5:66:f1:c2:52:f3:5b:56:cc:95:
99:00:fa:ea:09:11:f0:64:2a:e7:cf:8a:86:5b:62:
60:56:c8:73:02:e6:74:39:65:c5:7c:6a:df:30:76:
07:39:07:ff:1f:a2:49:76:be:08:8a:1b:a4:a8:58:
7d:9f:2c:22:b4:d0:50:e3:ac:6a:43:6c:37:b3:a7:
e3:59:cf:12:4b:e2:1d:3d:03:d9:2f:05:fe:2f:63:
4b:0c:81:65:12:18:f4:75:f4:36:d4:55:3e:7f:70:
f0:b0:ab:65:80:b5:ac:67:7a:bf:d2:15:83:9c:1c:
ea:2b:a7:e8:43:15:1e:c2:14:62:3c:07:6b:ad:82:
17:45:dc:de:70:a5:3b:95:1b:9c:35:f0:d1:b6:3d:
9b:33:31:66:bd:19:1b:f6:a4:26:28:19:25:45:a4:
95:e2:63:3f:b7:6b:30:33:6f:0d:82:3c:5d:b5:87:
23:9a:ae:8f:e5:a0:df:f7:c2:f4:27:ad:90:8f:82:
12:f4:27:ba:4d:79:e0:3c:ac:2f:98:90:a1:c8:af:
0d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D0:E3:DC:A4:82:94:85:CE:82:EC:78:8B:34:7B:28:37:C8:A6:36
X509v3 Authority Key Identifier:
keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:aa:67:ce:33:36:e8:96:a4:ac:96:1e:77:52:5b:44:43:3e:
fa:38:4d:88:4c:2a:82:78:30:1b:bb:36:6e:c9:aa:07:48:3e:
ac:9e:52:b4:1c:02:86:94:ab:35:b6:0c:f6:2b:37:c5:47:f6:
72:f9:45:10:d7:1d:83:37:85:ec:48:aa:42:95:f0:77:23:2b:
70:6e:cb:e1:a7:2b:8e:a6:5d:ef:0d:33:e9:d9:0c:87:95:ac:
ba:39:1f:34:40:a6:64:87:98:71:c7:0f:ca:75:21:3d:89:2f:
09:1e:ad:d3:91:ef:ff:49:37:9a:62:bb:00:2f:55:74:dc:d1:
ef:c3:61:92:5e:17:02:2c:c8:b3:bc:68:96:76:39:ed:c9:bc:
33:ea:25:c7:d0:0e:62:65:77:77:01:56:0a:49:f5:2b:16:36:
3f:37:6b:fc:bd:a5:8a:ab:e5:59:07:d3:8d:33:d2:05:8c:36:
f2:33:c7:5b:9f:d2:57:b5:aa:1f:f9:96:1d:02:5c:cb:23:54:
db:e5:03:6f:c8:a8:33:cb:68:71:83:19:88:75:6d:9e:0a:35:
a8:ef:e2:6a:7c:50:e0:83:f2:6b:93:86:a0:a2:66:03:fe:4f:
8b:6c:5d:dc:8a:ff:78:eb:e4:47:25:53:58:89:61:68:e5:56:
98:0e:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 22:12:35 2025 by rpki-client