This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
File: EQTOLG2R752aM5VvBzHZ4j8Tr74.mft (raw, json)
Hash identifier: 2UTvILO354x6DyHod2zaEWfIHv2pBBjojzAS+OsxITU=
Subject key identifier: 63:70:EC:9E:C4:20:36:0C:14:56:2C:B8:29:EA:48:73:B3:9D:4A:E6
Authority key identifier: 11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE
Certificate issuer: /CN=A916EC8B/serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE
Certificate serial: 024F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
Manifest number: 0246
Signing time: Tue 23 Dec 2025 00:54:34 +0000
Manifest this update: Tue 23 Dec 2025 00:54:34 +0000
Manifest next update: Tue 30 Dec 2025 00:54:34 +0000
Files and hashes: 1: EQTOLG2R752aM5VvBzHZ4j8Tr74.crl (hash: cfH2bLo1YhiiQ60vkhfHbY7ldedDEV7VwV7X5a532fQ=)
2: 4B9461EE360211F0B340176EC4F9AE02.roa (hash: bOe8nr2E8t1ATROZ4KuuEHTILvcglG1TUoH86rOv6Xs=)
3: 9F13CA9AC60C11F0BE755750C4F9AE02.roa (hash: PyeUHh2Ng6SJ5El0I6XUEocd+w1I2M5sfj3R1NBqgdo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl
rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EC8B, serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE
Validity
Not Before: Dec 23 00:54:34 2025 GMT
Not After : Dec 30 00:54:34 2025 GMT
Subject: CN=6949e84a-459a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:06:9f:86:a3:3b:3f:ad:66:e3:3d:23:9f:
ec:77:38:c8:34:56:d2:a9:48:2f:cd:ca:1e:d1:9f:
f5:b3:89:29:a4:a9:6a:e4:c7:52:3d:fa:ff:b5:b7:
ff:1d:ab:3d:e3:38:7c:59:49:3a:e8:6c:82:9d:a5:
d9:76:65:e8:17:53:e9:d5:5f:1b:9d:cd:84:b7:12:
68:cb:35:35:4d:0d:4a:21:65:35:41:1c:87:e2:e0:
61:b2:5e:a8:f6:d1:97:19:55:7b:da:1c:35:d1:24:
fa:c4:b4:84:f9:cb:e4:6a:db:bc:2f:3a:f5:1e:bc:
58:02:ae:bd:1f:ec:7b:a7:b5:7e:2b:32:ef:fc:b4:
41:fe:b3:44:ca:ea:7b:6c:91:65:0b:e0:e6:4e:09:
b4:46:ac:ba:1a:1f:29:ad:a5:f7:95:db:fc:46:1a:
eb:bc:69:10:29:ec:42:29:8a:80:66:44:10:ea:52:
a0:5c:69:6b:15:0e:28:d5:ef:a8:8a:ab:41:2d:73:
fb:06:40:f0:41:c2:f2:7c:48:2d:ce:08:7e:b7:69:
96:8e:3d:10:17:3c:22:f7:be:94:e3:a4:17:c5:3d:
51:56:74:e0:f8:f6:e7:c6:cf:8d:5d:e1:bc:7f:79:
9e:84:7b:58:76:77:20:92:e8:98:6a:02:51:d4:a5:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:70:EC:9E:C4:20:36:0C:14:56:2C:B8:29:EA:48:73:B3:9D:4A:E6
X509v3 Authority Key Identifier:
keyid:11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:49:ae:37:45:f4:40:ad:89:3b:13:94:d5:dc:e8:fc:6d:11:
4f:91:25:fc:0c:b0:48:fa:8b:08:48:5a:01:a5:55:58:24:8c:
a1:d6:55:8e:49:82:81:a6:36:7f:0b:74:5d:9c:25:36:e9:8a:
39:68:63:c9:3b:60:a8:9a:fa:45:cc:b3:b5:fb:01:c2:9a:9f:
c5:3c:ba:59:3c:75:f6:82:9e:af:14:76:82:87:0c:8a:14:d1:
da:0b:b1:75:57:84:1f:52:4b:ee:4c:73:8a:fd:45:23:82:e5:
71:ba:ef:2b:a6:a7:5a:47:59:83:8c:07:3d:0d:c0:d2:f2:a7:
e7:fb:7b:c3:77:73:18:5e:b7:52:7c:62:40:7d:4f:4b:b9:fe:
22:39:8a:d4:11:d8:a7:52:0d:c7:2f:0f:7e:60:12:48:1f:20:
e6:91:c4:a2:63:d7:69:c7:bb:07:6a:8d:ee:b2:8e:86:1d:a3:
3d:5c:2a:ad:35:04:7d:94:65:f7:60:f3:78:17:47:c8:fc:0c:
89:22:01:96:ad:d0:d2:a4:cb:ab:c7:46:78:05:20:4d:17:5e:
64:06:93:d1:72:f8:79:44:29:0f:6b:cd:b8:44:ee:87:90:a4:
b5:43:b8:ee:f7:6c:92:84:9b:c9:50:84:69:07:e4:10:b3:02:
95:9f:f4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:02:53 2025 by rpki-client