This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
File: EOplMmUQJQKUQ84SQ1fTPSisJMA.mft (raw, json)
Hash identifier: 9QiXHwBLkLz7rU1tLtvS9fE+jUdWtxEmOyjCb7lr6jY=
Subject key identifier: 8C:24:98:69:30:51:17:75:33:35:98:C0:1F:00:EC:DE:45:59:7D:39
Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0
Certificate issuer: /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
Manifest number: 0108
Signing time: Tue 23 Dec 2025 04:01:26 +0000
Manifest this update: Tue 23 Dec 2025 04:01:26 +0000
Manifest next update: Tue 30 Dec 2025 04:01:26 +0000
Files and hashes: 1: EOplMmUQJQKUQ84SQ1fTPSisJMA.crl (hash: 3ncfaFAAPWhP9DjeBmg2EMWnR/TPy17y9GSIXdTRyYk=)
2: 55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (hash: HYF/fg1voE6IFgfpnqUye0EtCWfbuCFF1mA1Z69GiMA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl
rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7C90, serialNumber=10EA6532651025029443CE124357D33D28AC24C0
Validity
Not Before: Dec 23 04:01:26 2025 GMT
Not After : Dec 30 04:01:26 2025 GMT
Subject: CN=694a1416-41d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:df:24:8c:22:a8:8e:f7:7f:fb:f7:c5:d8:11:
2f:9c:9a:ee:97:b6:be:a1:e4:fd:00:25:43:b6:cd:
96:05:1f:db:28:1f:84:a2:61:c7:8e:4e:66:d9:e3:
66:40:c5:52:f4:30:aa:74:3d:87:cb:2a:8c:9d:07:
8a:bb:41:ba:e4:b7:ad:35:87:20:1f:a4:19:a3:d4:
ae:3a:51:17:d9:59:95:fb:e5:a2:0c:ee:39:85:72:
fa:7f:ec:24:e4:b4:70:7d:98:73:f7:d4:95:96:b8:
03:fb:63:94:de:f7:73:ab:72:e6:e6:21:b5:94:83:
bd:16:da:86:37:a5:39:1b:33:5e:41:77:e0:da:cf:
19:0c:63:a7:b3:bf:65:5a:2e:94:c6:b6:45:d6:75:
32:26:86:e6:41:11:31:f4:34:93:2c:77:81:f2:19:
79:6f:33:64:6e:d2:39:06:f4:ca:53:10:b8:43:39:
15:a7:c2:39:01:d7:49:4e:08:87:39:bd:5b:c2:81:
49:d4:08:aa:9a:35:41:8b:c1:18:e0:f6:76:5e:1e:
a8:6e:01:d0:86:e7:61:3f:d1:4b:63:ca:7a:35:4b:
dc:18:10:4c:dd:8f:6e:2c:05:c3:2d:aa:47:e3:8a:
0c:17:1a:b0:d0:b0:38:50:64:46:ce:4a:8f:45:e3:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:24:98:69:30:51:17:75:33:35:98:C0:1F:00:EC:DE:45:59:7D:39
X509v3 Authority Key Identifier:
keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:4f:d2:1f:d8:d6:2e:c2:52:9f:d8:e0:5c:a7:35:9a:57:e9:
61:08:c8:90:a3:1a:6f:32:01:3d:7f:35:b4:ad:26:5c:0e:5e:
86:5a:d9:95:75:50:6b:8d:57:a3:8d:83:fb:b7:c4:94:a8:0d:
01:68:09:f7:37:96:fe:42:8e:76:1a:7a:15:06:ae:0c:de:b8:
87:56:85:53:bd:bc:81:c3:77:7e:26:cc:84:4b:c3:7b:17:1c:
b9:3b:c3:a5:de:00:8d:94:6b:5c:1c:7d:e4:a5:73:2f:7e:41:
0d:be:8a:d2:0b:7b:1f:40:bc:c6:00:6c:d6:86:f8:59:9c:7d:
08:ff:36:a5:6b:cc:f4:f5:30:6d:5e:0b:7a:b1:a9:5c:63:21:
ed:22:46:f5:18:26:b1:ba:46:3d:07:65:aa:dd:72:76:12:93:
5d:7c:84:1b:29:4e:d9:ff:c9:1f:69:08:d1:0f:1c:07:35:35:
a9:c7:02:0f:e8:e1:ad:83:89:0c:ba:59:df:b0:6e:14:a1:c9:
d9:d9:96:3d:9a:11:7a:aa:8b:97:45:78:48:f0:78:6f:e5:72:
67:7b:a4:6c:55:7e:fd:20:a2:4e:13:29:b5:90:81:65:82:de:
7f:14:b0:f1:28:44:f3:df:a2:83:bf:cb:8e:9c:d6:b2:90:88:
64:fb:95:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 09:03:19 2025 by rpki-client