This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
File: JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft (raw, json)
Hash identifier: 3TEl5FCjZsNfryrOmMHxwES99hWaUGiMPmzJAYKpu6o=
Subject key identifier: F9:F3:6B:C3:9A:5D:55:50:B2:10:B0:A2:F3:B4:43:2D:C2:F7:9B:A9
Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
Certificate issuer: /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Certificate serial: 0E52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
Manifest number: 0E2A
Signing time: Thu 18 Dec 2025 17:11:07 +0000
Manifest this update: Thu 18 Dec 2025 17:11:06 +0000
Manifest next update: Thu 25 Dec 2025 17:11:06 +0000
Files and hashes: 1: JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl (hash: 3BwPiZbnbhX/z3d1VODdPR/4jw4hcY3UKYYZjaexw0M=)
2: 5CBAC63066DF11F0935CCC36C4F9AE02.roa (hash: MMhTJwyUJmHa7Fchm2S5tYiwrlXSG8WD1IWktZLzhpI=)
3: 525D3FA866D811F0A962E05FC4F9AE02.roa (hash: z09k51nzzFDblGF1ujAcm9UkE2oGVdDnqzxyRLL8JQk=)
4: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (hash: MeekIL6so4gjZtd7naeHv/pTHtXC6CO9tqXsAjmLWMY=)
5: 331C6A2C66DF11F0A3F38136C4F9AE02.roa (hash: kor8/NDnBK7P8dppMp/iyuN21sK3KmR3jpyTrgrDBxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3666 (0xe52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Validity
Not Before: Dec 18 17:11:06 2025 GMT
Not After : Dec 25 17:11:06 2025 GMT
Subject: CN=694435ab-0298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:b3:ba:04:11:33:f0:78:33:7e:dd:06:5c:
44:1a:46:a7:b4:be:61:4e:4d:5c:96:fa:f1:eb:27:
56:25:19:7c:be:0f:c6:3a:e5:4b:fb:67:bb:b8:43:
81:42:ba:3c:d8:ee:55:8d:f7:29:51:76:2e:11:26:
c2:92:44:8f:1b:f9:ea:d9:da:d7:8c:15:d7:ed:08:
d5:f2:f2:97:b8:f4:16:d9:a6:70:a3:9f:4c:f2:2f:
af:a1:e0:40:7d:d3:9b:11:3b:fc:7e:db:de:57:6b:
f3:85:be:c6:58:b9:6a:e4:ed:05:88:7b:20:3d:c3:
47:17:c2:ff:84:14:cc:9c:e2:2d:48:d0:a1:78:2f:
fe:10:ab:3b:a1:84:0c:56:c1:54:dc:f6:0b:de:f7:
e7:fa:8c:2c:bb:12:e1:2e:10:76:9e:05:bf:a6:66:
06:45:86:9e:ec:4c:29:4e:95:63:91:aa:23:d8:0a:
35:89:85:fd:d9:9e:8c:3f:75:ad:46:83:f2:69:17:
49:98:fd:31:ba:3a:cb:f6:24:92:bd:1d:98:b6:63:
d8:d7:b6:cf:a3:94:8c:25:40:a7:57:63:94:df:89:
fd:4c:a7:c9:33:2d:69:b5:02:c9:63:a9:0a:ea:6c:
9b:f8:a2:6a:0b:1b:d4:63:c6:4b:28:91:9b:d1:c8:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F3:6B:C3:9A:5D:55:50:B2:10:B0:A2:F3:B4:43:2D:C2:F7:9B:A9
X509v3 Authority Key Identifier:
keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:06:95:6c:69:15:a4:2d:50:dc:9d:0b:3c:66:dc:dc:d8:4e:
90:62:35:c3:42:07:91:22:b1:db:04:6b:24:03:14:51:c4:ae:
fd:d4:53:04:e3:03:f9:27:6a:fb:cc:24:c0:a4:7f:ec:84:cb:
e5:1e:ed:cd:fa:97:57:8f:63:4f:9d:74:ad:03:89:ff:fc:c0:
ca:02:8d:16:a9:cc:a0:28:33:f1:34:97:3a:ad:41:a8:b6:de:
8e:ed:68:59:d3:6e:83:ab:32:59:02:ae:ba:27:c5:e4:e7:e6:
dc:50:32:cd:80:ec:db:8b:29:6b:3e:f3:0e:a7:54:ef:28:25:
bc:b5:83:9e:c2:67:ea:8c:8b:32:9f:55:38:0c:69:fd:b4:84:
19:ca:8c:5d:b3:ff:52:26:b1:31:04:3f:b2:31:27:b4:3d:fd:
95:8a:7c:62:8f:5c:64:4e:cc:f2:74:d8:8f:3f:7d:9c:c7:bb:
52:71:ec:8b:42:e0:4d:0d:3d:aa:f6:68:4a:90:65:a4:e1:d0:
02:7f:7d:73:63:64:99:bb:88:4a:15:bc:34:e8:07:7d:23:d4:
b5:f0:3c:45:78:a1:90:6c:f1:1d:2d:7b:0b:29:0d:2d:66:f3:
ef:39:03:55:9f:99:57:a4:7a:27:1f:55:4b:49:63:15:36:2d:
76:21:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:30:37 2025 by rpki-client