This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
File: j11eWHmnUVjyz_syrdlEcfl0GD8.mft (raw, json)
Hash identifier: eIRPe9sXMA8h4jkE9g2UumbuHjXNOnMrDvbaV3ZrVKg=
Subject key identifier: 05:40:41:3B:DD:BE:FD:A8:58:32:88:AD:7E:87:E7:E0:12:31:6D:8A
Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F
Certificate issuer: /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
Certificate serial: 030F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
Manifest number: 030A
Signing time: Fri 19 Dec 2025 00:23:13 +0000
Manifest this update: Fri 19 Dec 2025 00:23:13 +0000
Manifest next update: Fri 26 Dec 2025 00:23:13 +0000
Files and hashes: 1: j11eWHmnUVjyz_syrdlEcfl0GD8.crl (hash: Br0ybNjsC9KOdGwQZTVftHw+ui6F309lsDUvilO8GWY=)
2: 7F64C44645A511ED93E3C45BC4F9AE02.roa (hash: vsUIy1tbHWL8V/egiXCJ22jgmvrNd5Q4mwZ6W3OeA1A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl
rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 783 (0x30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABEAC, serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
Validity
Not Before: Dec 19 00:23:13 2025 GMT
Not After : Dec 26 00:23:13 2025 GMT
Subject: CN=69449af1-906a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:89:e5:47:ea:2d:36:b6:42:cd:1b:65:82:33:
4c:bb:13:f1:ad:6a:7f:1b:6b:c2:bc:86:d7:cf:c0:
f4:84:63:3f:de:a5:84:28:86:31:2e:17:2d:47:2b:
89:d9:cb:b1:67:7b:81:e9:f9:66:07:ef:a8:09:ca:
ee:ba:ce:5f:0f:83:02:93:51:d3:cd:17:0e:92:fa:
0d:f6:4b:27:7c:df:84:1b:45:f8:86:95:fa:aa:d5:
b0:af:3a:f6:b3:78:6e:f3:1d:7f:dc:6c:42:24:73:
45:70:18:0d:ce:e1:2d:11:0e:35:cb:58:f0:b7:7d:
af:3e:a4:69:af:7a:59:3b:e2:0f:a6:e8:c6:c7:bf:
e4:b5:a6:87:e5:c7:54:33:02:af:c6:c2:1f:a5:8f:
9a:25:60:eb:02:f9:60:45:ee:00:31:d9:6f:83:5d:
94:87:24:03:2f:c7:86:28:dc:3f:bd:e1:0e:f5:5e:
2b:72:1f:e1:0c:76:e6:11:d3:67:eb:83:d6:ba:46:
97:bf:10:ab:a3:e0:93:b3:34:40:7d:4e:67:46:68:
60:05:ad:c8:d7:58:7a:e8:05:96:5d:fa:39:f4:02:
df:9d:7c:cc:62:57:41:e4:3c:70:9b:89:b1:62:e6:
b9:b5:15:e1:a5:f7:1f:b5:0c:14:26:41:7b:3e:ac:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:40:41:3B:DD:BE:FD:A8:58:32:88:AD:7E:87:E7:E0:12:31:6D:8A
X509v3 Authority Key Identifier:
keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:fc:cd:fd:d2:bb:57:19:30:5d:86:e7:a6:c6:9b:a6:e0:8b:
44:0a:15:63:de:7e:10:ee:85:f6:6a:58:6d:a8:ed:56:25:1a:
51:32:e5:49:07:6d:83:2a:4d:43:be:b7:7a:28:32:36:27:b1:
d7:b2:2f:81:27:e9:d7:aa:a2:73:d9:5d:ab:4a:b7:bb:13:a2:
ad:35:dd:b5:b1:5c:31:19:92:8e:bf:d2:97:94:1a:6c:37:0e:
2e:ff:c1:86:8b:24:ed:70:08:72:ce:31:b5:5c:a7:b2:07:c6:
57:a2:12:a6:a3:0e:bf:ec:9b:68:8d:53:fb:2f:47:6c:26:21:
da:8a:fa:b9:c7:52:29:e3:65:39:7b:b0:a9:b4:0b:63:68:ad:
40:32:53:bf:6c:40:a0:6d:d5:7e:6f:24:f7:ac:e0:f2:ea:d0:
1a:ad:b4:71:fb:7a:8c:53:da:7e:d4:1b:e1:38:0f:0c:1f:d9:
dc:83:95:b6:91:7e:23:de:14:d1:1b:7e:6b:f5:fb:97:c9:6c:
5a:5b:85:c2:43:26:80:d6:69:86:5d:f3:67:d0:65:7c:c3:64:
eb:b8:80:76:c4:54:3e:12:27:46:cf:8e:d3:80:bf:35:2b:41:
0c:54:9f:f5:d9:94:2a:2c:70:5d:53:64:54:26:1d:da:48:cb:
05:c4:59:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:25:22 2025 by rpki-client