This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
File: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft (raw, json)
Hash identifier: xZ0IGOh4RZDVbzyLNN407frQ0Htws2igydTZVkiAHA8=
Subject key identifier: C0:44:3B:4E:63:1B:E6:93:2A:6B:D3:E2:EA:86:E3:4F:DE:42:35:C4
Authority key identifier: 78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6
Certificate issuer: /CN=A914CF73/serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6
Certificate serial: 34C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
Manifest number: 34B9
Signing time: Mon 22 Dec 2025 15:12:09 +0000
Manifest this update: Mon 22 Dec 2025 15:12:09 +0000
Manifest next update: Mon 29 Dec 2025 15:12:09 +0000
Files and hashes: 1: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl (hash: I7Gb/eailHiDlCE3/q/5vO703a0kEVOrQSyAbvamScs=)
2: 5007D8DECAB411E889484D32C4F9AE02.roa (hash: TVZFCFvktJ5OxkCoipiRWo+QWTbjibg23BZncqtSlRw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl
rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 15:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13506 (0x34c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CF73, serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6
Validity
Not Before: Dec 22 15:12:09 2025 GMT
Not After : Dec 29 15:12:09 2025 GMT
Subject: CN=69495fc9-ce5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:b3:8e:06:3f:de:ec:c0:e0:fd:84:2c:fd:
2d:41:ad:89:7a:ae:f8:09:87:c4:6b:c0:7e:4b:e3:
c5:08:54:4d:1a:6d:a8:a4:af:2e:64:6f:7b:90:41:
a5:75:ed:75:b0:6f:3d:16:9e:a7:6e:b1:07:0e:31:
f2:00:1a:65:ad:53:0f:9f:f7:87:5f:00:1e:c3:5b:
fa:fe:b3:6b:52:3b:ef:bb:d4:b0:6d:f2:8d:d9:9f:
af:07:f5:58:ff:08:31:6e:2d:0d:0b:02:cd:03:ca:
27:74:49:66:42:9f:cb:14:31:43:68:18:4e:01:be:
4c:37:a7:61:d5:40:82:41:c8:a1:90:6f:ad:33:d4:
73:6b:0f:3b:d6:98:d7:25:ed:21:77:38:5f:7c:c1:
81:6a:82:89:9b:45:04:b1:77:1e:c7:78:79:d3:d7:
08:30:03:49:70:b8:cc:4d:9a:bd:6d:3e:72:19:2d:
50:6e:0b:07:55:e4:2e:a1:bd:a2:ad:b9:3a:be:61:
4b:6e:68:6f:3f:06:62:dc:4c:9c:ea:e7:e4:80:f8:
bb:5f:00:65:86:d5:99:cf:e5:63:bb:f2:13:eb:4f:
19:a3:16:09:da:01:5f:8a:b5:1f:b7:b9:4b:7d:f2:
e9:db:fd:29:91:51:54:ad:8e:d2:fb:13:14:5a:2c:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:44:3B:4E:63:1B:E6:93:2A:6B:D3:E2:EA:86:E3:4F:DE:42:35:C4
X509v3 Authority Key Identifier:
keyid:78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:16:38:6c:6a:5b:e6:8d:91:9a:fa:49:e4:04:24:25:2d:ca:
87:b9:fc:63:ac:ce:30:ee:3d:ac:35:fd:7e:80:12:f8:be:d8:
97:d4:1e:79:39:0c:e5:28:19:8b:a3:5e:16:70:f3:10:22:16:
8e:72:0c:eb:48:cd:78:f1:01:37:76:c1:73:5c:68:0b:d4:41:
a0:8f:f4:b2:8c:9d:44:a2:f3:13:50:90:9b:98:95:a8:56:6c:
94:04:09:9f:22:2e:66:9d:6f:e7:91:25:9f:0f:c3:24:c5:7b:
b4:d4:8e:f7:7c:ab:c7:84:bf:d4:a6:8b:25:ad:90:3b:54:f4:
9e:10:9e:48:59:95:65:d5:d3:57:de:2c:24:8b:3b:d5:2b:3b:
f8:87:e8:31:f8:ed:d2:f6:4f:04:6f:17:84:6b:80:91:de:7f:
dc:ae:1b:40:fc:7d:87:d2:4c:d8:66:62:a0:f5:19:b6:a9:ae:
4f:b2:2d:ad:2f:99:3c:96:32:90:de:8c:4a:56:b7:01:41:f2:
35:f7:dc:e6:1d:1b:00:01:25:dc:1b:ff:73:ff:c8:be:ea:8d:
cd:d1:67:b6:fb:c5:9b:0d:2e:75:73:34:58:90:89:15:c4:e7:
97:c6:47:34:8b:70:e8:72:66:4f:5d:79:bd:e9:07:a4:ea:72:
77:6c:fe:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:26 2025 by rpki-client