This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
File: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json)
Hash identifier: 4ZzGN+Otdy0IpwLdWs4AEykUuN7IiXKpiwOu6oRjfHs=
Subject key identifier: 53:EE:E6:6A:C7:A4:04:00:14:C4:94:8A:7B:51:6D:CE:B3:BC:BB:73
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial: 16E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
Manifest number: 16AC
Signing time: Thu 18 Dec 2025 16:33:53 +0000
Manifest this update: Thu 18 Dec 2025 16:33:52 +0000
Manifest next update: Thu 25 Dec 2025 16:33:52 +0000
Files and hashes: 1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: lELaIXA9oEbxa2CEYPzex5dYZh2h6LXE3F1725Shpd8=)
2: 87D45318994C11EC82BA3978C4F9AE02.roa (hash: vU1HGyruT0rWn1hdwhJaA7GCZtlR47+81PGq+koUgEQ=)
3: A923DDA2BE0211F090AD9F13C4F9AE02.roa (hash: rJPMOVrpncAhvub4ptLK3aMWfe/wCmar13ef6P+IuQs=)
4: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (hash: 4whCD3BefA16gco8GRXsiAdGqv5E31DbZxV0ybOWul8=)
5: 1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (hash: wdVUeFPPp5Pt9fuTweBdrE45i6lKsYNin+xhFp9XCWU=)
6: 125EA39CBE0311F0BD65F062C4F9AE02.roa (hash: USmtuTTmRco0BEBl+7v5NzI0IPVnUkLZyU5TqgVNBVA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 16:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5857 (0x16e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Validity
Not Before: Dec 18 16:33:52 2025 GMT
Not After : Dec 25 16:33:52 2025 GMT
Subject: CN=69442cf0-c098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:99:9b:54:53:e8:1e:02:4f:ff:9a:df:96:cf:
ad:38:51:cd:61:6c:1f:b9:b3:5e:4f:27:ba:b5:ed:
0a:07:7f:0e:8f:81:cc:bc:62:57:56:6c:32:a1:81:
52:47:66:b4:f3:c6:68:98:53:e0:65:72:45:ba:f8:
48:fd:83:83:7b:db:eb:cd:50:10:c8:c3:c9:e6:b3:
ac:17:79:4a:59:cd:02:47:28:0f:aa:be:b5:cf:45:
2e:42:eb:a2:5e:a1:dd:45:2b:79:27:64:11:da:2d:
90:a4:1b:70:fa:89:79:1d:3a:09:2d:ec:fd:66:fa:
9e:c2:90:9c:e5:5a:2d:01:aa:73:70:e3:21:5b:72:
a7:29:f1:cf:8e:d1:d0:35:2b:08:ab:b4:8e:10:5b:
c9:e4:d4:dc:df:d0:26:8c:74:ab:bd:64:ab:5b:50:
44:5e:69:f5:a4:35:4b:57:30:41:c0:42:d3:13:29:
ba:07:a0:3b:74:30:3b:e4:34:7a:ac:6b:c1:51:2b:
e5:80:7e:8b:89:db:15:5d:39:10:90:94:4c:5c:f1:
e7:f3:1a:f0:38:20:b9:3c:5f:fe:38:de:76:cf:59:
38:04:c9:dd:73:32:43:ad:01:dd:5f:88:57:81:34:
65:d5:56:1b:21:c4:4e:bd:de:c4:03:f3:3a:c5:56:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EE:E6:6A:C7:A4:04:00:14:C4:94:8A:7B:51:6D:CE:B3:BC:BB:73
X509v3 Authority Key Identifier:
keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:5b:3a:7b:a6:15:c8:91:06:6b:0a:07:16:f9:f9:75:17:1c:
72:47:c1:87:2b:cb:ba:2f:bf:e7:ef:5a:bd:c4:c2:da:56:d1:
ec:3b:4c:7a:82:af:dd:17:1c:1e:b5:7c:49:1c:eb:98:89:f9:
73:8c:6a:18:45:47:8b:46:6d:4d:a5:ec:66:c0:29:f1:69:3a:
30:8d:2d:41:e3:90:f0:e8:8f:02:ad:05:85:00:b0:fc:0a:63:
23:ad:4e:58:e5:bc:11:1b:54:a2:12:7f:5c:a1:08:3d:67:f4:
bc:9f:78:42:18:26:76:88:4b:9e:0c:20:04:8c:b7:3d:c1:5d:
57:4c:80:41:a3:4a:99:60:cb:ba:1c:c7:3b:8e:7d:88:d8:6f:
6e:2a:fa:3c:03:6f:10:63:1e:dd:1f:42:e3:44:02:4e:19:9a:
da:92:cc:9e:c7:3a:c5:16:5a:9c:d2:42:45:54:79:2f:fb:2c:
3c:96:b6:fe:40:e6:f6:16:c6:d5:71:42:16:85:a2:35:35:33:
43:36:33:89:0f:3d:0b:a5:a9:35:ce:cb:24:0b:b9:c7:67:c8:
3d:12:bb:88:e2:50:3d:bb:7e:fe:60:4e:ab:8e:e9:f7:22:d9:
8a:98:7c:69:d9:37:f0:ae:9e:c4:b6:ae:f1:96:c0:46:d6:b7:
02:5e:ef:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:14:33 2025 by rpki-client