This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
File: eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json)
Hash identifier: 1tU9YZmbo6mqzkI4ACO4w2MwU7LnT7AMJJGQUTloQoQ=
Subject key identifier: 4F:73:58:C8:D0:C7:B8:BD:74:AD:F0:EB:BF:45:A0:D6:B2:A7:79:41
Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
Certificate issuer: /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
Manifest number: D4
Signing time: Tue 23 Dec 2025 04:37:39 +0000
Manifest this update: Tue 23 Dec 2025 04:37:38 +0000
Manifest next update: Tue 30 Dec 2025 04:37:38 +0000
Files and hashes: 1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: 1lo7nze7NJAuUiD0zMLV33IVSWelf5fmHTf15uXoawo=)
2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: OlXBby3DJZy8rl/8+NH1zeLmOWVMUXLA2k9gi34qwsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:37:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Validity
Not Before: Dec 23 04:37:38 2025 GMT
Not After : Dec 30 04:37:38 2025 GMT
Subject: CN=694a1c93-3070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:79:dc:fa:bc:21:d6:b1:cf:44:f3:79:c4:
d6:f9:bb:df:d2:b0:c3:25:d7:8a:71:88:de:7b:30:
f0:ab:81:b6:92:d5:0d:f0:35:2a:c2:45:78:b9:b8:
9a:c1:8b:6d:de:52:2d:e3:73:e8:99:b7:55:6e:9e:
04:20:a9:82:6d:4a:3d:76:1a:79:7f:3b:81:5c:18:
d1:c7:fa:02:d1:d0:87:04:fa:29:4f:fa:2f:f2:ec:
1f:00:8b:88:80:2b:8d:2f:36:2b:99:dc:59:f8:01:
93:de:de:0c:bb:c1:9a:d0:9d:68:e9:0f:f8:a2:76:
6d:47:57:ce:1b:1a:89:ca:87:97:4c:25:44:e3:3b:
46:f0:7f:b9:2f:01:64:f5:51:e3:3a:ea:e4:01:d4:
27:ff:85:08:32:71:cd:14:71:a4:e1:4f:8f:6c:47:
18:0d:01:e7:da:d7:8f:19:bf:2e:e8:b1:be:78:dc:
02:d4:02:23:18:d6:78:41:17:66:d3:0a:16:1c:53:
44:52:a8:83:a8:bf:b2:3c:4c:03:a8:04:4f:59:6e:
8c:27:97:02:74:2f:1d:ad:0f:ad:b7:03:a3:04:e9:
36:70:a1:a5:81:bc:11:83:6c:92:4d:11:e4:88:0a:
05:9b:c3:a8:91:24:83:b8:6a:9b:0a:16:80:5d:73:
38:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:73:58:C8:D0:C7:B8:BD:74:AD:F0:EB:BF:45:A0:D6:B2:A7:79:41
X509v3 Authority Key Identifier:
keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:d6:86:7d:93:bf:1f:fe:2b:a4:c0:93:eb:d6:d1:a6:7b:cf:
30:03:13:10:3e:0b:5e:11:c6:e5:d0:8d:36:ac:63:d9:a6:09:
55:64:ab:a9:95:5d:5c:43:9f:02:b8:9c:c1:32:8e:b7:6d:ad:
e9:ee:37:83:ac:1e:ea:7e:91:f2:50:2d:ad:70:46:2d:c3:03:
82:fb:a9:f5:7c:27:49:ee:8b:25:80:0b:b9:b0:e6:0f:30:58:
e4:ca:50:e5:c2:51:f3:b6:18:89:57:f4:95:f2:be:87:07:1f:
7d:98:39:36:8d:d7:98:b9:fc:aa:95:f5:c4:89:b2:9c:10:f5:
43:7d:6e:40:ab:03:3c:2d:8a:2b:e0:88:f0:62:46:72:18:2f:
dc:cc:47:a2:89:56:de:2e:79:fb:bc:04:e7:e8:2b:3b:9e:0a:
b7:ed:ef:6e:e4:85:f8:64:15:dd:b5:22:6a:5a:03:de:f4:4e:
5d:52:32:e8:82:a9:5b:08:e3:f3:15:cc:a7:22:87:57:b5:0e:
54:64:e1:33:5e:e9:f6:e8:b4:a8:2c:70:1b:3b:8f:2b:88:28:
f5:d2:cf:04:5e:d7:30:c6:79:51:06:08:68:66:a6:7e:35:45:
c1:72:77:6a:dd:38:d9:7e:2b:8c:5c:90:fb:ca:b5:32:e9:14:
de:e1:30:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:52:51 2025 by rpki-client