This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
File: EY5vss8Va51aJq7AUfscX37-AeM.mft (raw, json)
Hash identifier: bmzgjbtjNki4gBhd74dQz49bBU83K/veXEjb9taYjJk=
Subject key identifier: FA:D9:6D:37:CA:B7:FB:EB:9B:7D:F7:46:50:86:E5:0E:AF:11:45:31
Authority key identifier: 11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3
Certificate issuer: /CN=A914DA3F/serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
Certificate serial: 0222
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
Manifest number: 021D
Signing time: Tue 23 Dec 2025 01:12:35 +0000
Manifest this update: Tue 23 Dec 2025 01:12:35 +0000
Manifest next update: Tue 30 Dec 2025 01:12:35 +0000
Files and hashes: 1: EY5vss8Va51aJq7AUfscX37-AeM.crl (hash: ENRdOmYks4l5WxjFtTSNT5MiyM3ieSitbX/01BZqjrU=)
2: 612568D2A6D011ED8FBD0A82C4F9AE02.roa (hash: nm2zg9mKvyo9+lsb6e1TLrNeopFW/UoV47vdvbrHk8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl
rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA3F, serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
Validity
Not Before: Dec 23 01:12:35 2025 GMT
Not After : Dec 30 01:12:35 2025 GMT
Subject: CN=6949ec83-1988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:37:e8:69:bd:6e:e2:6a:a4:8a:a9:f4:64:
b2:3d:59:e4:86:1b:74:90:0d:7e:0e:18:e9:c8:de:
39:3e:62:bf:29:b7:e5:9d:24:77:03:65:a1:ef:0e:
5f:92:75:3f:be:61:c2:8a:d3:ba:22:9b:f4:66:a4:
2f:3c:cf:8f:68:0b:3a:51:f4:94:9c:73:6a:80:83:
eb:49:a4:56:a4:e6:0e:b3:80:3e:7a:0c:53:ee:36:
bd:e1:c2:15:3b:5f:7b:0d:ea:e6:d3:9a:0b:1a:52:
c0:b6:61:b5:fe:f1:79:3d:b5:e6:b2:50:38:00:cf:
ea:f9:15:91:2f:11:c4:f0:38:13:94:88:26:07:64:
45:8a:21:ea:73:85:db:71:cb:4b:b2:10:0b:25:79:
64:5f:a7:f4:f1:c5:40:90:c6:7d:0b:eb:f4:b0:c5:
32:97:5a:15:d5:b2:f8:81:af:19:db:61:3f:59:b3:
2b:42:46:38:1d:f3:d9:d4:ef:74:6f:0d:5e:bc:57:
40:10:99:50:5b:a6:d0:23:b6:f4:25:c7:4e:92:ef:
7f:88:9c:9f:b1:c0:16:93:ff:15:fa:5d:b6:35:17:
1f:8d:be:5a:b2:52:47:9e:60:f9:d4:3d:3a:13:12:
f5:a3:1b:eb:d8:bd:6b:bb:4d:38:eb:ff:1a:4e:37:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D9:6D:37:CA:B7:FB:EB:9B:7D:F7:46:50:86:E5:0E:AF:11:45:31
X509v3 Authority Key Identifier:
keyid:11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:69:19:1c:b6:eb:3e:85:63:e5:4f:38:51:3d:b0:ac:c8:bc:
b7:b4:66:29:48:23:91:d3:04:bb:34:ae:41:3c:d6:67:d6:df:
f3:c9:7f:ba:05:c2:04:9b:66:8c:d5:90:9e:6e:30:f9:37:b0:
d2:f3:a8:4f:e9:8a:4c:9d:e7:3d:fb:07:ab:cf:44:b2:42:d9:
21:83:fb:f4:e1:31:9c:6e:ef:c1:e1:4e:ea:25:ef:bb:17:6f:
fa:4a:8f:5f:29:2c:90:a8:b9:57:25:d8:ec:80:74:39:16:6f:
38:35:78:c2:ed:c3:2d:d9:13:31:ac:18:74:b9:e0:a2:93:2f:
f2:e6:49:7f:8b:e0:e4:3b:b7:d4:a8:ca:09:74:e4:6a:1e:ef:
e3:0b:b0:dd:cb:cd:2b:81:2e:fc:e0:e6:58:3b:99:6c:64:f9:
bd:05:3c:15:95:da:a2:ed:89:7f:1a:f9:a0:c4:90:3b:36:f0:
aa:19:1b:b8:14:35:11:7c:49:a0:ee:ff:51:f9:4e:b5:9d:b7:
2e:f5:71:23:ef:45:b3:f2:76:f8:8d:d4:4c:ef:8b:23:c9:ad:
48:a7:1a:76:a7:48:8b:8e:81:99:fc:d4:36:1a:c5:ce:84:11:
de:40:cf:29:1e:d6:3d:84:b0:6f:fd:8c:19:4f:82:7d:07:af:
5b:83:af:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:16 2025 by rpki-client