This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
File: JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft (raw, json)
Hash identifier: PIeWXvmlfeTGVV6V4DJ2taJ3JVFl67w5ncUFrmWmyro=
Subject key identifier: 9D:91:93:CC:5D:34:9A:B9:75:BD:AE:C4:C1:7B:DF:89:12:9F:3E:74
Authority key identifier: 26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8
Certificate issuer: /CN=A91DD5EC/serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
Certificate serial: 01EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
Manifest number: 01E3
Signing time: Sun 21 Dec 2025 01:56:32 +0000
Manifest this update: Sun 21 Dec 2025 01:56:31 +0000
Manifest next update: Sun 28 Dec 2025 01:56:31 +0000
Files and hashes: 1: JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl (hash: KEWrrtBX7X59oMQBBkYznOpKI4cgqZXhWrKVZJrypLM=)
2: EB75D8C4FDE111ED848B004CC4F9AE02.roa (hash: YpFErwZo1axpVyXEr0hM4pYq0y+I/yl/KVqfMICnISA=)
3: 2DDB3932FF4711EDA9459E3DC4F9AE02.roa (hash: znGYWacCwGwaRyaos7K6AvZznHx5iYA9Iw7SZxronyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl
rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 01:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5EC, serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
Validity
Not Before: Dec 21 01:56:31 2025 GMT
Not After : Dec 28 01:56:31 2025 GMT
Subject: CN=694753cf-86c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:50:64:99:33:52:08:89:8e:c5:62:ee:ae:73:
86:8a:26:a1:49:eb:6e:96:6b:ab:74:03:30:ca:b4:
f9:54:2c:e0:24:cf:f1:74:b6:e7:4f:7a:00:c4:12:
fa:bb:95:b7:37:72:a8:10:27:16:84:85:28:3c:47:
a4:7f:29:8c:2e:7a:de:77:3a:fb:86:55:4f:5a:ad:
e7:2e:7e:9a:8f:2e:39:19:ca:03:51:5b:81:bb:86:
0e:51:eb:44:a1:50:f4:17:e7:11:20:ee:ad:d7:be:
34:4e:5a:fd:ce:49:7c:b9:a3:b9:e4:48:c8:f0:0d:
3a:9d:fa:38:a6:8a:bb:a9:2a:aa:3a:a6:f5:24:f1:
d3:1e:12:b1:c8:5b:e6:1a:25:76:91:5d:31:a5:5f:
af:f5:aa:34:3c:84:ff:11:cb:33:a4:37:4c:46:93:
0f:ea:4e:f9:82:a6:07:48:f9:38:84:56:49:27:39:
67:4e:98:c8:12:ca:a2:bd:bb:ec:64:71:b4:be:b3:
bc:0d:e8:3d:c9:2c:20:25:a2:25:98:72:ec:57:9e:
b8:2f:27:ed:1c:79:85:37:40:fd:9e:73:6e:c2:c1:
dc:a1:45:e2:5c:03:ae:34:a2:11:39:f0:66:34:72:
3e:56:2c:1f:4f:85:fe:62:81:86:5e:be:4b:f7:5b:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:91:93:CC:5D:34:9A:B9:75:BD:AE:C4:C1:7B:DF:89:12:9F:3E:74
X509v3 Authority Key Identifier:
keyid:26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:90:9f:3a:2f:68:d4:d3:d3:c6:b3:08:fb:b9:9a:4e:7a:da:
6d:37:49:a5:2e:34:0c:20:d6:60:06:6c:a0:6b:bd:e4:c4:d4:
fd:e4:4b:1f:fd:13:cc:2f:84:42:56:af:1e:31:b9:9b:f0:62:
6a:c0:60:61:10:82:43:cc:04:be:73:f8:fa:2d:9a:24:70:27:
ae:0c:2d:56:c0:f3:28:60:be:ac:38:db:da:fa:98:98:21:5e:
3f:c1:f3:db:d5:5d:6f:dd:c0:e4:9f:54:4a:69:08:73:df:7f:
d8:60:ee:59:e4:06:61:d9:2c:b3:07:81:31:8a:3d:0e:67:12:
2a:ef:bc:9e:f2:4c:ce:88:37:d0:56:25:53:19:59:5d:4f:25:
7a:6f:25:81:4e:92:cd:60:2d:5a:25:a9:a8:30:d8:77:9e:17:
fe:31:c6:c1:46:d3:53:50:e8:f0:81:f3:23:24:ba:af:5e:62:
09:96:cf:aa:94:a9:cf:28:cd:bf:97:6e:71:0f:40:4a:8b:4c:
9b:90:61:32:32:57:4e:7e:f2:94:69:ab:71:4d:06:29:28:22:
24:6f:39:da:68:53:4a:79:a9:9f:ea:45:3a:50:e0:36:89:59:
f6:5b:23:a4:c8:1e:4e:b3:71:fb:9b:bd:e8:d2:99:19:32:8c:
5e:c5:7c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:04:43 2025 by rpki-client