This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
File: eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft (raw, json)
Hash identifier: Iu2ufj4aAOmlUJAOorh/1TzRlZlHwaSpn2YLWL5HPOM=
Subject key identifier: 3B:B5:FC:5C:49:F5:D2:D0:18:C4:82:30:03:AD:57:B8:01:DC:5E:A5
Authority key identifier: 79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
Certificate issuer: /CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
Manifest number: 01D0
Signing time: Tue 23 Dec 2025 01:55:50 +0000
Manifest this update: Tue 23 Dec 2025 01:55:50 +0000
Manifest next update: Tue 30 Dec 2025 01:55:50 +0000
Files and hashes: 1: eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl (hash: Mv9mXqR5fzorpUiobA9QpWg3LWZf+m4jq8TQjIzgjug=)
2: C110D9D23D8611EEB7F2D04BC4F9AE02.roa (hash: TxTcbAcufMja4FsqpJQTg2We2RY0eq4FwQMk5GLL3ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl
rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113A27, serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
Validity
Not Before: Dec 23 01:55:50 2025 GMT
Not After : Dec 30 01:55:50 2025 GMT
Subject: CN=6949f6a6-ac0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:d8:e9:e3:40:62:6b:05:62:aa:83:e9:33:
eb:64:02:fa:1c:25:e2:06:52:11:3a:71:e4:bb:d7:
99:02:a4:22:fc:8f:50:5a:8e:5a:f9:b9:85:82:4f:
3e:e1:d3:e5:fd:f2:f7:44:ff:af:43:42:69:29:4f:
8b:a8:8f:38:00:c5:6e:eb:bf:ea:31:c6:96:8b:22:
71:df:8f:b0:49:76:eb:7c:56:47:45:19:82:6d:bb:
85:d1:5e:4a:a0:6e:1d:80:bf:16:0a:71:60:cc:15:
ae:b4:11:78:2e:14:8c:1d:be:c6:bc:ab:14:da:27:
34:4a:69:24:7b:40:7d:3b:6e:a8:4d:ad:ae:e5:69:
9a:71:4c:a5:20:92:59:52:51:c9:de:02:ea:98:3d:
c9:2c:c1:43:56:73:14:ab:04:0c:94:9a:44:11:dd:
11:1e:15:26:9d:69:f9:6d:fd:ee:13:e0:18:9c:5e:
8a:0e:0e:86:ac:6e:72:2b:58:4f:a1:d4:62:12:f7:
9d:82:a2:6d:74:de:91:d2:09:85:33:32:60:15:af:
80:17:eb:4f:77:21:ed:7d:47:a1:5e:88:2a:c3:9a:
12:e8:42:b8:a9:b7:cb:1a:9e:65:2c:1a:51:84:a9:
4d:e7:16:f4:87:0f:71:0d:5f:c7:05:f7:f3:72:7f:
b3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B5:FC:5C:49:F5:D2:D0:18:C4:82:30:03:AD:57:B8:01:DC:5E:A5
X509v3 Authority Key Identifier:
keyid:79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a0:ac:99:14:a9:b1:f3:a7:3f:c6:6d:9c:16:1e:20:c0:1e:
de:d1:0d:52:70:84:66:d1:bb:c7:12:0d:8d:9f:b9:e0:e1:c6:
56:22:eb:66:93:e4:89:72:80:4e:2f:05:66:8f:2b:e8:77:a0:
01:2f:0c:cb:e9:7b:fd:06:f1:96:3c:0b:da:fe:e2:ce:18:63:
02:3a:41:d4:c4:a3:b8:22:d1:6c:4c:65:31:49:1b:5f:24:f3:
dc:07:bd:c4:a4:be:7c:1a:73:a4:8d:b7:fb:2a:30:bf:b9:8a:
3a:65:89:c2:91:1c:91:83:6f:62:78:03:5f:d5:0b:34:3e:a4:
4d:2a:ef:cc:58:dc:5f:c9:be:63:14:d2:4d:c8:de:f7:b7:74:
4f:03:ad:14:99:a7:2e:f1:48:06:c0:d5:d4:2f:3f:28:5b:67:
26:a3:3d:88:94:10:88:98:9f:4a:c0:d0:ed:98:e8:71:80:92:
34:73:38:47:95:c2:71:17:e5:1e:30:37:7e:01:48:16:ab:66:
bc:fa:2f:dc:b7:e7:07:a0:0f:fa:a3:bc:3b:8d:b3:92:66:28:
03:24:f7:2a:52:8f:22:f8:ac:99:a3:9e:a6:68:54:2d:42:1c:
66:d3:19:97:2a:b2:d2:c5:60:bf:94:5a:86:5e:9a:fb:f8:1f:
f7:eb:c5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 23:29:47 2025 by rpki-client