This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
File: ez9g2bGigAKgeHXKtYohRXBz4X8.mft (raw, json)
Hash identifier: 7tz1m6Y4AokcCRuC00KGJDtH+OQsOp77TOFxQLI5F+c=
Subject key identifier: 5E:D0:8C:63:16:4E:E4:36:CF:B6:9B:20:1A:C3:A0:54:9E:1E:82:43
Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Certificate issuer: /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Certificate serial: 16EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
Manifest number: 16AA
Signing time: Sat 06 Dec 2025 16:18:28 +0000
Manifest this update: Sat 06 Dec 2025 16:18:27 +0000
Manifest next update: Sat 13 Dec 2025 16:18:27 +0000
Files and hashes: 1: ez9g2bGigAKgeHXKtYohRXBz4X8.crl (hash: JKkwSs8+A8QnUVjXU8k0GEaEl2JcqXQiuXB4csnq5r0=)
2: EE2F10889B4911EFBBAB9381C4F9AE02.roa (hash: tGyvJQ+VHA7B7G1gS3LwI/GSq7MJrx8JwpdoWLxQjws=)
3: 2CF180F0809511EFB8A82822C4F9AE02.roa (hash: HLuyZRv6VF6qFq88g7pPhaPeJ2Pt9n+iaV4TOkNRhbg=)
4: 774A232A718011EEA0E7EF5EC4F9AE02.roa (hash: QlcIbjq7jxCQ3SgyfdLUDXjmauzJiitADg/TiWQLByw=)
5: 1DCB662A3DF211EB81F4CE73C4F9AE02.roa (hash: kCg25FDQRQj+e3KU6R/BP0M2KGcBEvQ7uEDAyKmHOCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5871 (0x16ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Validity
Not Before: Dec 6 16:18:27 2025 GMT
Not After : Dec 13 16:18:27 2025 GMT
Subject: CN=69345754-6148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:62:61:07:d9:76:19:ee:dc:83:ea:f1:89:0b:
df:4e:14:ac:79:4b:50:cb:84:16:60:4d:58:12:b6:
8a:1c:1c:8c:f9:6e:37:a0:b8:b6:da:f8:c1:93:09:
a0:73:6b:d8:4e:03:50:07:95:40:18:99:c0:f0:66:
42:17:91:cc:67:84:88:b7:c7:dd:2f:a1:65:88:4e:
96:b3:5b:33:74:ec:a8:7f:19:63:fd:03:bb:b9:f8:
54:37:44:83:03:e6:10:0a:2b:ba:6c:89:78:04:4c:
cd:ed:eb:5e:03:a0:0b:04:3f:d7:c2:e2:db:78:9a:
5a:52:cf:af:8a:9a:2e:af:98:fd:9e:78:66:cf:45:
de:59:5e:ba:37:94:11:a4:e2:1f:1a:dd:1e:0f:a2:
4a:46:00:04:06:c6:c6:c8:ef:cf:76:29:73:e2:ec:
e9:80:83:75:3f:89:52:08:ff:28:b7:2f:7f:67:1b:
61:5f:3d:e1:f6:06:d6:c9:b7:0f:30:e2:01:f4:7a:
09:41:da:d7:c8:5b:1e:c7:5c:bb:8d:68:69:89:11:
30:58:8f:5c:ac:12:3c:3e:7c:36:5a:d8:b1:cb:41:
dc:f4:29:ea:66:15:90:05:75:3c:92:ac:32:ab:f2:
19:64:6a:6d:c3:7a:eb:35:8b:54:22:a6:ce:d3:a4:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D0:8C:63:16:4E:E4:36:CF:B6:9B:20:1A:C3:A0:54:9E:1E:82:43
X509v3 Authority Key Identifier:
keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:c3:64:7a:08:92:86:a3:88:27:6c:b0:0b:a4:70:87:18:90:
7b:81:bf:98:79:ef:02:e4:0c:66:5f:3d:91:ec:20:c5:c8:7e:
39:c3:35:90:cc:26:59:aa:33:b5:a9:b6:5c:e3:df:a9:68:57:
c0:2d:00:9e:dc:de:4e:3b:c3:84:bb:a3:62:8e:7b:e0:90:f3:
d8:72:63:da:1b:12:0c:21:e0:ca:34:f5:e4:1b:22:0d:e0:cb:
60:0a:dc:ab:da:3a:15:f7:4d:ea:e0:9f:8f:ac:be:98:cb:12:
e5:04:90:a1:9c:ad:52:8f:87:1f:41:81:46:32:6a:c4:29:ae:
69:ef:6d:1b:5a:ad:de:2f:14:96:70:7b:a7:3e:51:c3:d2:e8:
3a:88:af:aa:fd:8c:62:43:a7:c4:e3:1a:be:cc:35:54:c7:f8:
c6:86:c6:9d:3a:6c:cd:30:eb:73:3a:e2:1d:29:72:cb:a8:5b:
85:62:63:a8:ec:1d:64:b1:f0:da:ff:2a:75:95:7f:19:92:73:
3d:b9:e7:a4:f0:bb:ab:1c:fb:a8:7c:33:a5:b6:4d:9d:a0:17:
d7:13:90:87:af:a3:65:60:49:b4:07:53:55:1e:05:b4:38:88:
13:7f:df:bd:70:32:c2:a9:a8:88:ac:70:1a:32:2c:ca:f4:fa:
47:39:08:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:14:27 2025 by rpki-client