This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
File: J8OQD7137iLLcempDoFXTN5GRK0.mft (raw, json)
Hash identifier: gcRlyft47fGjCG9LegWEX/5JXuPMFb3WX9J7j7Jq2Js=
Subject key identifier: E0:05:6D:F6:C5:CB:4C:AD:B7:02:DE:75:56:F8:BB:35:C3:9D:F7:87
Authority key identifier: 27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD
Certificate issuer: /CN=A91B1A23/serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD
Certificate serial: 07B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
Manifest number: 07AF
Signing time: Thu 18 Dec 2025 20:51:02 +0000
Manifest this update: Thu 18 Dec 2025 20:51:02 +0000
Manifest next update: Thu 25 Dec 2025 20:51:02 +0000
Files and hashes: 1: J8OQD7137iLLcempDoFXTN5GRK0.crl (hash: I0+OnVJi7sNpXrvkzMR7R6MZBGiABVCoandCnF2w2+o=)
2: 594EEA2CAEA711EE961B0558C4F9AE02.roa (hash: USU8pNkMAdz6WSNLBXiulBGQVhWKRWb5vA71xaDbimA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl
rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1974 (0x7b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1A23, serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD
Validity
Not Before: Dec 18 20:51:02 2025 GMT
Not After : Dec 25 20:51:02 2025 GMT
Subject: CN=69446936-3cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:1a:16:64:bc:85:93:52:3c:36:87:f0:fd:
c7:97:64:91:ac:13:a9:a3:79:4d:24:45:f4:69:3b:
a0:5e:6b:e7:1d:70:1b:c3:c1:53:b1:f0:b5:39:ce:
74:4d:93:06:99:86:8d:e2:81:10:38:9a:33:a1:31:
2c:30:b9:20:7d:b1:3e:0e:68:1b:af:e7:c4:c2:b1:
c8:8c:82:40:40:04:4c:2a:5b:c3:44:e6:8b:02:c9:
d3:eb:03:9f:e2:5b:64:d6:7b:0d:7d:08:21:be:d5:
30:4c:32:46:a8:68:31:a8:75:d2:f4:ff:7f:f8:8c:
8d:ee:c3:e8:56:5e:ff:2a:7f:20:ae:cc:63:38:c3:
6e:18:92:aa:39:41:66:3e:86:03:60:71:89:c5:ce:
0d:5e:9b:6b:70:78:5b:c2:99:86:4f:fb:b6:5f:12:
bf:f5:16:b3:b6:68:47:64:9b:67:4e:1d:65:a4:04:
5d:7d:29:44:8e:0a:7e:74:16:52:76:83:40:ca:16:
1b:d1:94:2e:4c:ac:30:b5:8c:60:ff:1e:ac:64:4d:
9a:55:f3:34:d2:27:37:b9:e6:ae:d8:45:6b:4b:fd:
6b:61:7c:1e:b1:13:fa:67:e4:22:4e:0a:78:cb:c5:
83:59:75:cb:b7:33:b9:1b:77:48:85:b0:72:92:56:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:05:6D:F6:C5:CB:4C:AD:B7:02:DE:75:56:F8:BB:35:C3:9D:F7:87
X509v3 Authority Key Identifier:
keyid:27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:38:3f:ce:96:3b:65:c2:a7:2c:a7:36:bb:07:9c:c2:87:db:
22:21:51:c4:c1:37:b9:2c:2e:2e:42:20:ef:23:09:02:f1:dd:
1f:c0:54:d8:2c:97:d3:3f:d5:24:00:23:d2:f7:5b:59:7b:6c:
42:ce:9d:b9:20:80:a3:11:e9:88:d1:d7:97:03:41:d5:fd:bb:
ab:32:2a:1a:0d:e0:b2:00:29:4c:40:71:0b:50:ae:a9:cd:6b:
08:67:03:18:bf:bb:22:61:9d:a8:65:9a:58:2b:09:63:e1:f6:
00:4a:e3:fa:54:c3:8a:08:e5:d4:ab:01:4a:01:5e:19:76:a9:
72:6d:eb:a8:27:1a:a9:3b:65:b5:6c:cb:bf:b0:1d:ce:00:f8:
03:93:f8:b4:69:1b:c9:68:7c:ee:29:99:c2:13:48:62:67:2b:
60:f6:c2:af:e0:c3:a7:35:70:e6:b8:0c:24:d0:d0:eb:16:21:
c9:a6:83:e5:71:4c:0a:91:f8:a6:17:75:f0:fe:0b:0c:f8:75:
d1:13:e5:ce:e4:98:1e:d5:3b:60:38:43:b3:4e:a9:1d:45:fd:
dd:b4:37:8b:94:aa:f9:02:ec:2f:d3:c3:73:7a:ee:6a:dc:c0:
eb:e2:a5:0c:4e:fc:ab:3f:99:60:2a:22:a0:2f:ba:e8:a8:3b:
47:7f:12:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFBMjMxMTAvBgNVBAUTKDI3QzM5MDBGQkQ3N0VFMjJDQjcxRTlBOTBFODE1NzRD
REU0NjQ0QUQwHhcNMjUxMjE4MjA1MTAyWhcNMjUxMjI1MjA1MTAyWjAYMRYwFAYD
VQQDDA02OTQ0NjkzNi0zY2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApxwaFmS8hZNSPDaH8P3Hl2SRrBOpo3lNJEX0aTugXmvnHXAbw8FTsfC1Oc50
TZMGmYaN4oEQOJozoTEsMLkgfbE+Dmgbr+fEwrHIjIJAQARMKlvDROaLAsnT6wOf
4ltk1nsNfQghvtUwTDJGqGgxqHXS9P9/+IyN7sPoVl7/Kn8grsxjOMNuGJKqOUFm
PoYDYHGJxc4NXptrcHhbwpmGT/u2XxK/9RaztmhHZJtnTh1lpARdfSlEjgp+dBZS
doNAyhYb0ZQuTKwwtYxg/x6sZE2aVfM00ic3ueau2EVrS/1rYXwesRP6Z+QiTgp4
y8WDWXXLtzO5G3dIhbByklawBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAFbfbF
y0yttwLedVb4uzXDnfeHMB8GA1UdIwQYMBaAFCfDkA+9d+4iy3HpqQ6BV0zeRkSt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUEyMy9BQzUzM0RFRTI4
OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdpTExjZW1wRG9GWFRONUdS
SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0o4T1FENzEzN2lMTGNlbXBEb0ZYVE41R1JLMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUEyMy9BQzUzM0RFRTI4OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdp
TExjZW1wRG9GWFRONUdSSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQByOD/Oljtlwqcspza7B5zCh9siIVHEwTe5LC4uQiDvIwkC8d0fwFTY
LJfTP9UkACPS91tZe2xCzp25IICjEemI0deXA0HV/burMioaDeCyAClMQHELUK6p
zWsIZwMYv7siYZ2oZZpYKwlj4fYASuP6VMOKCOXUqwFKAV4ZdqlybeuoJxqpO2W1
bMu/sB3OAPgDk/i0aRvJaHzuKZnCE0hiZytg9sKv4MOnNXDmuAwk0NDrFiHJpoPl
cUwKkfimF3Xw/gsM+HXRE+XO5Jge1TtgOEOzTqkdRf3dtDeLlKr5Auwv08Nzeu5q
3MDr4qUMTvyrP5lgKiKgL7roqDtHfxId
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:30 2025 by rpki-client