This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
File: JLEMMdaR-EX86uP-MjG-VgArrGo.mft (raw, json)
Hash identifier: +6kNvwVC9uN9yxVIGrDmo1GxZjyrKuaWLlLcVCLY1fg=
Subject key identifier: D0:DB:F3:86:B0:BB:EA:7D:9D:D8:44:68:A4:11:E7:EB:CE:9B:F8:A3
Authority key identifier: 24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A
Certificate issuer: /CN=A919C7B4/serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
Manifest number: 0104
Signing time: Fri 19 Dec 2025 04:12:44 +0000
Manifest this update: Fri 19 Dec 2025 04:12:44 +0000
Manifest next update: Fri 26 Dec 2025 04:12:44 +0000
Files and hashes: 1: JLEMMdaR-EX86uP-MjG-VgArrGo.crl (hash: Q7imxH4o2x/joxYoWWDanMX11ce4jLA05xw5E0RS/r0=)
2: 8955AA3A55F511EF986BFA6AC4F9AE02.roa (hash: 5sDQjXbl18fKKFVRqOqglNb9vyijRd3VDxj0IGPTpDE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl
rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C7B4, serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A
Validity
Not Before: Dec 19 04:12:44 2025 GMT
Not After : Dec 26 04:12:44 2025 GMT
Subject: CN=6944d0bc-8813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:d3:11:20:b8:32:7a:c5:c7:69:92:16:f6:
05:5c:7b:d0:45:72:94:c0:bd:ea:2d:0b:31:33:bf:
60:db:23:17:5d:5b:fb:48:a4:fb:f7:9c:b7:27:34:
d1:f0:18:89:3b:f3:ff:67:f8:c7:1f:9e:06:6c:37:
46:9d:be:b7:2d:f3:35:4e:1f:dd:98:98:d8:fa:b5:
de:84:1b:8a:e5:2e:3a:f2:bb:01:05:01:98:7c:ea:
b4:c6:bb:ca:c7:c3:19:22:34:f9:b9:f3:59:ea:68:
49:2e:2f:70:ee:e5:b8:ef:5b:da:fb:79:cf:e7:7b:
05:03:fb:e1:24:62:10:50:f9:61:26:cc:ed:4f:86:
08:04:31:08:01:92:1d:13:7e:d3:46:15:ff:f1:68:
1d:b1:ed:62:e6:dd:48:ef:91:14:4b:a3:24:60:41:
f6:a3:e0:3e:38:d6:b3:f8:a3:a0:ce:0a:f6:6b:dc:
e6:db:98:b8:55:0d:7e:e5:af:28:a3:b2:f6:d8:17:
09:9e:e5:b9:3a:de:bf:a3:4a:d2:ba:70:47:7b:a3:
bc:73:5f:19:39:e8:1d:38:bc:c7:c8:95:95:38:19:
86:51:33:92:db:b3:2c:20:a6:d1:b6:62:32:d6:ba:
75:7e:8d:6e:c2:4e:18:c8:71:bc:fd:fa:b1:43:68:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DB:F3:86:B0:BB:EA:7D:9D:D8:44:68:A4:11:E7:EB:CE:9B:F8:A3
X509v3 Authority Key Identifier:
keyid:24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:c5:98:89:93:cd:84:7f:86:57:2f:bd:e9:83:a2:c0:39:3b:
ce:c1:0b:db:2b:84:13:b0:83:53:9b:ab:8d:86:09:5d:d2:44:
0d:b6:8c:cd:af:a3:d8:8e:a1:68:92:f8:a4:dc:c3:3d:aa:8d:
ba:f6:a2:10:d9:1f:c7:34:6c:a3:ee:87:ee:56:a4:b4:07:8b:
6b:83:23:37:b3:b6:3e:a1:5b:16:28:c6:4a:22:21:30:ef:fc:
88:45:02:15:c4:16:8e:e3:f3:21:1b:e9:72:7e:71:81:25:63:
b9:a8:34:e4:48:35:50:5e:95:79:57:98:d4:a1:b1:36:b4:23:
01:72:ae:43:b1:79:1f:0d:80:c7:c3:26:ac:9e:5f:02:c1:25:
ee:a3:06:45:95:8f:24:01:c2:84:f5:b3:96:68:54:85:b6:75:
9a:00:d7:cb:25:4f:64:f9:f9:7b:f8:10:82:71:81:77:84:a9:
df:f8:b2:a6:fc:7b:38:55:ff:86:5a:e3:05:25:1b:04:75:87:
ff:69:7e:f1:0c:0c:4b:43:84:e4:c1:82:3a:c4:bb:df:8c:59:
2b:98:30:0f:d4:65:57:f3:44:c3:de:b1:60:08:f0:04:51:89:
7c:cf:71:aa:3e:b7:91:4e:f3:94:51:f8:c0:7f:bf:71:07:88:
77:5a:c2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:59:28 2025 by rpki-client