This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
File: jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json)
Hash identifier: U01pFMdaYlsL09mBrxtidJlzjnKwQJktmVwVnoFLkso=
Subject key identifier: 65:0D:7D:AA:E2:56:62:0D:DF:2F:0B:FE:76:68:9E:BF:87:9F:30:FC
Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB
Certificate issuer: /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB
Certificate serial: 02EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
Manifest number: 02E5
Signing time: Thu 25 Dec 2025 00:24:57 +0000
Manifest this update: Thu 25 Dec 2025 00:24:56 +0000
Manifest next update: Thu 01 Jan 2026 00:24:56 +0000
Files and hashes: 1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: Hba0Kz3wgd/6RYDLHim2iARrxpnDnEm9aLfPoPKyxco=)
2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: SkZtMkxJP09Yd2B5Onq8UT9Pvo6N0SWw7PtHEg8gn3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl
rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 00:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 747 (0x2eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB
Validity
Not Before: Dec 25 00:24:56 2025 GMT
Not After : Jan 1 00:24:56 2026 GMT
Subject: CN=694c8459-e268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:2d:d6:81:c6:81:33:f1:de:2c:22:6b:79:
5e:54:40:d5:ec:f8:42:03:79:d4:e8:be:e7:23:6b:
a3:28:84:7a:82:f4:17:6d:28:79:cc:25:e1:1d:e3:
d6:87:c8:e2:e9:33:7f:28:38:57:8b:db:83:4a:4a:
ef:f5:7c:fc:a9:96:f3:7b:a8:1a:0a:dd:93:0c:29:
8f:37:09:ac:07:eb:95:13:2f:7c:f8:78:8a:f0:7b:
9c:e4:ad:5a:63:94:77:1c:08:e3:8b:a3:97:ec:01:
8b:a5:02:5b:3f:a1:97:a6:5d:31:13:50:c6:00:af:
f5:16:d4:51:96:d4:5a:16:e8:89:37:80:90:ae:f5:
7f:4f:47:cd:5f:46:f4:06:9a:f0:40:c8:83:de:0f:
b4:f4:3d:30:54:7d:6d:34:09:02:b2:1d:21:4c:46:
42:74:b0:93:34:d7:0f:0e:a8:db:06:ed:bf:18:96:
13:70:48:1c:31:05:0c:61:96:61:e6:3f:38:83:e6:
c4:60:a4:1c:a7:91:57:c6:7c:da:ec:16:eb:e9:5d:
a9:83:a4:15:8f:82:a0:ce:e1:a5:d9:c8:21:4c:11:
bc:a9:9e:e8:ab:6d:17:f6:48:b4:e4:ca:d1:91:fa:
5f:d6:5e:7d:a5:29:21:16:b1:8d:19:db:38:d0:26:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0D:7D:AA:E2:56:62:0D:DF:2F:0B:FE:76:68:9E:BF:87:9F:30:FC
X509v3 Authority Key Identifier:
keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:74:9f:92:a3:9d:45:65:01:6a:64:c3:d8:b2:01:dc:b2:03:
17:4f:69:9e:45:31:7b:0c:5e:a2:b1:55:50:1c:2c:97:b0:32:
06:ea:2b:72:98:1f:ae:3d:ae:fe:0c:53:15:58:0b:94:83:fc:
f8:3f:0e:f1:36:72:1d:5c:06:6b:43:bf:b6:c7:67:fe:d3:17:
4e:11:bf:ee:b3:ac:ed:b8:e5:21:74:5f:9a:67:8e:ef:ef:4a:
a6:d8:f1:76:21:4f:70:66:62:41:4a:f9:b7:8e:ae:43:79:d9:
05:f5:6a:69:94:d9:6f:8c:39:b8:57:48:a2:d5:bf:a8:d1:79:
62:3a:2c:3d:bc:92:78:32:06:42:b5:da:0c:8c:82:88:42:0c:
ca:c2:20:ce:2b:4b:36:88:32:7f:b1:3b:7e:02:52:35:64:62:
b5:02:ef:22:69:b0:42:89:fd:ff:2f:6a:40:11:2a:60:bd:54:
e7:6a:a3:42:eb:66:0f:b4:ce:58:db:ec:7e:17:d5:9b:69:4e:
71:bc:24:26:d5:5a:dc:d8:9e:a7:10:70:5c:91:fe:1e:82:95:
68:a0:4d:89:66:21:9f:04:ce:7c:ea:fb:9b:02:f8:74:e6:ee:
8c:50:50:0b:51:76:5a:2c:6e:fe:69:c9:bd:86:f7:2d:ed:1d:
82:11:3f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 09:36:05 2025 by rpki-client