This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
File: JTgA7RbtD_M39wQNDj3xFBwWFhw.mft (raw, json)
Hash identifier: rt+KO3pIkkWxqVRI+GD2zU798M7fi0LtdvCu1MAcqTA=
Subject key identifier: 34:3F:56:2B:6A:3D:A5:25:90:28:EA:09:24:6A:B6:F5:99:52:A9:A6
Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C
Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
Manifest number: 0259
Signing time: Sun 21 Dec 2025 00:59:24 +0000
Manifest this update: Sun 21 Dec 2025 00:59:24 +0000
Manifest next update: Sun 28 Dec 2025 00:59:24 +0000
Files and hashes: 1: JTgA7RbtD_M39wQNDj3xFBwWFhw.crl (hash: NXfuybyJmGe8M4UuLUnbJAzP8HVxJmAdec8EtXWyWyg=)
2: 2D215B32584111EDBE50107CC4F9AE02.roa (hash: L2qGwoUMYn6rd/ufU42ohM+hjJVs2JbRIKZiZfIpRkg=)
3: D45117DEEBF311EEAECC405FC4F9AE02.roa (hash: zbF8hS1Y+qpQjbINRhWnXcqAqRtMIJLJkeIfLjgdh4M=)
4: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (hash: tncX3ObBof6VoDSeaB8Fjk49Rp9ygYf48FJTO12hWKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl
rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 00:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
Validity
Not Before: Dec 21 00:59:24 2025 GMT
Not After : Dec 28 00:59:24 2025 GMT
Subject: CN=6947466c-0eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:df:80:99:df:81:e1:ef:1f:d1:a0:2f:7e:
48:f5:22:d0:09:1b:a7:8a:01:07:6b:ee:f7:ab:2c:
02:17:9f:3d:af:ae:23:32:8d:1c:d8:d7:e2:a0:3e:
c3:05:27:ef:bf:eb:7d:98:5d:ef:04:55:66:67:02:
50:d2:ba:7c:f5:99:9d:87:9d:53:20:79:06:2d:7f:
21:38:d9:fd:3b:01:94:97:fa:37:52:18:20:dc:0d:
3c:2e:f1:c6:8b:6e:b9:bc:fe:39:9f:9f:44:dd:1d:
c1:89:7f:e6:9d:4f:29:03:35:0b:a4:53:80:44:ed:
f1:ae:cb:ee:4d:dd:7a:a5:0c:60:aa:bf:9e:d7:90:
66:f3:5e:58:c6:ba:d3:22:37:e6:0c:88:c4:79:55:
02:45:d1:24:3a:53:99:a9:a3:c3:ca:2c:6f:45:db:
0d:2f:1c:c5:0e:95:31:f8:f7:40:9f:37:ca:6e:0b:
cd:38:85:b2:41:41:83:ba:ea:de:65:ce:c9:d0:92:
7b:55:36:1f:32:4c:a8:20:f0:db:6d:ed:31:68:0b:
9e:97:0c:5a:45:90:1e:e1:de:58:b2:af:2d:d1:2e:
56:92:19:b4:56:50:18:9c:08:47:b3:36:e0:4d:53:
e1:b3:96:22:73:a8:66:14:c2:87:b6:f6:13:1d:df:
cf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3F:56:2B:6A:3D:A5:25:90:28:EA:09:24:6A:B6:F5:99:52:A9:A6
X509v3 Authority Key Identifier:
keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dc:6f:0a:15:5c:f5:5f:4a:22:4d:c1:8d:43:c6:1b:59:ef:06:
37:b0:17:9d:fd:e9:5b:74:b8:54:36:e7:87:b4:23:de:ec:ab:
3b:4d:12:95:23:ba:6d:91:fe:b6:f0:fe:46:32:ff:e7:2f:56:
1c:6d:f0:28:22:b4:47:55:de:f5:83:a6:79:67:2c:61:8c:8d:
9b:44:dc:a2:d7:bf:b2:61:16:c8:ff:0a:c8:fc:ca:3a:65:34:
1d:b3:48:1d:9a:5d:64:f7:8d:bf:b0:7c:5f:c5:00:b0:6e:3f:
62:23:84:1f:9e:50:ff:3a:00:91:56:da:e1:49:ad:c7:64:26:
e2:57:93:e0:84:f2:cc:38:5a:c6:46:03:13:17:1f:9b:83:68:
6a:ce:51:ae:c4:fc:13:a7:09:76:b7:cd:32:ed:75:0f:75:1e:
89:70:7e:57:ca:65:fb:d0:c5:43:50:fb:30:72:9d:0e:7b:d7:
fb:87:8b:ae:04:da:ac:30:cb:89:b2:72:4b:c0:09:38:d2:93:
fe:31:65:5d:cc:d8:6b:59:9a:f8:e6:86:2e:a5:9b:80:8e:94:
ae:e1:6e:28:a9:4b:09:0d:21:94:3c:b8:13:5f:58:4b:c4:d8:
9d:c0:7a:bc:17:27:45:45:7f:26:18:8c:7c:3b:37:fc:b1:38:
0e:33:47:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:00:51 2025 by rpki-client