This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
File: lJax_GBjZENyOYzqM4uCJCWRdcs.mft (raw, json)
Hash identifier: b1U55b3jEiHy5L/qeuEqmbDLyWhXN2K15WqW86BXYOs=
Subject key identifier: 14:94:C2:DA:26:8D:C5:A6:AD:EF:90:CC:09:75:4E:3D:5F:77:03:BA
Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
Manifest number: 8D
Signing time: Fri 19 Dec 2025 05:42:16 +0000
Manifest this update: Fri 19 Dec 2025 05:42:15 +0000
Manifest next update: Fri 26 Dec 2025 05:42:15 +0000
Files and hashes: 1: lJax_GBjZENyOYzqM4uCJCWRdcs.crl (hash: myTg0KtpG3tmePnrdrjtGDkfR6+qzwumW2kvXrDS3/w=)
2: 0BD593E6136D11F09F542C81C4F9AE02.roa (hash: HrcPdg7AcdEC2smU/wutkGHmrLpDpotb0GCdlOs2xPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Validity
Not Before: Dec 19 05:42:15 2025 GMT
Not After : Dec 26 05:42:15 2025 GMT
Subject: CN=6944e5b7-c3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:d4:33:d2:46:ed:18:83:29:97:95:8b:1d:
a6:d8:15:34:0e:c7:0b:f2:06:ea:dd:77:97:45:dd:
87:aa:bf:94:25:0c:6e:6c:71:c0:1e:21:b9:f5:a3:
d2:de:12:95:85:ed:f8:25:c4:06:9e:bc:5c:09:84:
41:ae:30:b3:7c:3b:f2:2a:fb:fc:27:f8:7b:21:c4:
c2:47:c9:da:39:46:1b:88:8d:06:a9:e9:a7:a7:3b:
da:11:68:44:c7:dc:2b:5f:b8:65:df:71:25:09:58:
30:e1:72:f7:d6:90:d0:9f:e5:61:27:a0:bc:3a:16:
ff:d3:d0:79:85:3d:29:2e:9e:4d:d2:06:b3:bc:1e:
69:10:a6:b4:b7:71:01:7b:2e:dd:c4:75:50:b9:18:
cd:d1:5c:af:e9:54:c7:91:41:49:02:36:eb:21:e2:
20:4e:ab:2a:0a:bb:c1:17:e2:c2:9c:7c:2e:69:a9:
3d:2d:26:9a:2f:af:82:27:1c:a7:6d:c1:0f:9e:9f:
83:1e:f3:e7:02:de:9d:9b:72:e3:7e:e9:fa:65:cf:
66:2b:e5:f4:0e:42:83:22:75:50:e0:82:27:6b:ab:
cf:83:6c:9e:59:3b:72:96:e5:26:42:46:45:7f:c9:
d6:fa:f3:85:6c:a3:bf:7a:5a:ca:6e:fc:a8:77:f3:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:94:C2:DA:26:8D:C5:A6:AD:EF:90:CC:09:75:4E:3D:5F:77:03:BA
X509v3 Authority Key Identifier:
keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:23:20:c6:c8:68:6f:19:3e:f8:4d:10:86:d3:6b:3c:67:94:
31:9b:e9:59:ce:5a:77:c2:9c:85:bc:2e:e1:61:30:2f:65:1f:
72:e4:db:a0:a5:74:47:3b:ee:f1:fb:80:4b:35:d2:10:0f:0a:
41:9a:56:bf:56:38:7b:c3:b6:ef:e2:07:e3:48:bc:77:3c:2a:
86:32:7a:7a:71:c0:e7:e8:4e:58:ce:70:03:a8:22:be:0c:31:
d7:76:3c:8f:b7:25:b6:ca:7a:1c:85:52:85:bb:c3:92:7a:ee:
83:87:77:b1:52:bb:8b:4c:fd:7a:85:5a:99:e9:be:fc:dd:06:
a8:05:6f:43:79:5f:82:24:54:d1:16:6e:75:53:77:a6:49:b2:
7f:6f:ac:31:1b:ce:fb:36:b0:b7:00:49:1d:a3:7b:e3:9e:e6:
91:62:cd:42:1b:4a:87:53:47:c7:2a:52:c5:5d:82:dd:16:49:
a9:1f:72:2d:0d:9e:ce:33:7a:6b:48:eb:62:e5:0c:34:ed:24:
94:6b:d4:9d:9f:f8:c1:30:f1:7f:aa:4c:d5:06:68:79:a0:0e:
19:a4:ac:0f:3a:79:61:67:f2:02:2a:46:7f:86:c0:02:d5:de:
46:43:60:61:54:68:32:2f:a7:dd:71:14:8e:11:5e:bf:82:16:
3e:71:ad:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:48:05 2025 by rpki-client