This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
File: evqYcujQ_5IpleWJO1nDIUdnsfw.mft (raw, json)
Hash identifier: e9yGgFm/iym0lxO87++MU5+yeoPyzWUZnI05uqiVvAs=
Subject key identifier: 2E:A9:B5:16:26:6D:68:79:E0:C5:B3:45:AF:37:5C:83:D1:F7:00:0C
Authority key identifier: 7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC
Certificate issuer: /CN=A9154AA5/serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC
Certificate serial: 09A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
Manifest number: 0997
Signing time: Tue 23 Dec 2025 09:17:18 +0000
Manifest this update: Tue 23 Dec 2025 09:17:17 +0000
Manifest next update: Tue 30 Dec 2025 09:17:17 +0000
Files and hashes: 1: evqYcujQ_5IpleWJO1nDIUdnsfw.crl (hash: X17o9cH650W7UhoFZkud4bidaCHkoIZJrCGlThNcBxQ=)
2: 8F1FBA54B0AA11EA9603E729C4F9AE02.roa (hash: Nz3P2iiEM+tYBM7r80NDJBgoaNWmaeZZVGJDHXJw44k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl
rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 09:17:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2464 (0x9a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154AA5, serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC
Validity
Not Before: Dec 23 09:17:17 2025 GMT
Not After : Dec 30 09:17:17 2025 GMT
Subject: CN=694a5e1e-66c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:5b:53:b8:62:60:71:e3:6c:63:3a:3d:92:
dd:eb:5d:34:57:40:14:dc:dc:a7:26:2d:e8:19:69:
37:23:d1:14:cf:13:45:21:5b:68:f1:d7:1c:0e:85:
50:a4:3f:94:cb:52:dc:00:4b:25:5f:36:e0:8a:7d:
b0:b2:6b:fe:dd:7c:c5:28:d2:b8:01:f2:10:35:a3:
24:86:87:bf:97:c4:ff:05:b4:5a:bc:79:ee:97:b8:
7f:b9:2c:c0:a7:4f:0a:5c:05:d2:93:3f:ca:86:58:
1c:09:22:9f:c4:22:a1:27:b2:1f:5b:fd:52:a1:17:
98:5b:d8:19:be:91:77:b6:5f:28:75:a1:3a:13:98:
4a:ca:79:ff:ad:20:58:62:be:2f:88:13:c2:e8:da:
43:d9:4b:62:c4:d8:78:51:0b:75:bd:20:c2:8d:52:
20:d8:6a:a2:7f:86:e0:f8:c1:41:54:cc:ff:57:14:
14:43:ca:74:59:fc:e0:95:29:c0:06:d2:9f:ab:ff:
b9:b2:34:f3:33:21:c5:72:04:38:2c:f2:7f:b7:2a:
ff:7f:49:b4:54:83:70:df:a6:fc:56:61:27:06:d9:
a1:8c:8d:75:ff:35:d8:3a:5e:f8:03:f6:ee:c8:32:
c8:9f:29:b0:d6:ac:7a:fa:c9:46:a9:b7:27:12:5e:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A9:B5:16:26:6D:68:79:E0:C5:B3:45:AF:37:5C:83:D1:F7:00:0C
X509v3 Authority Key Identifier:
keyid:7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:1a:49:25:44:22:5a:14:48:0c:79:41:91:09:28:2e:96:44:
b0:67:d0:eb:62:33:49:63:91:61:d5:f7:10:37:48:d2:09:4c:
6c:6a:c8:5b:62:30:b4:08:b6:5e:f5:98:9a:12:56:59:9f:fe:
e0:4b:54:dc:8b:4f:b5:fe:a6:3c:34:2c:9a:63:71:30:d0:1c:
c2:c0:51:e4:ea:2a:70:cf:6a:84:f7:7c:8a:8e:85:a7:39:f2:
bf:7a:07:9b:1a:40:31:7a:85:8a:27:70:9b:8d:7e:96:89:e3:
9c:f6:2c:d6:95:19:bc:d6:22:87:30:ed:bc:17:a9:0f:ec:58:
75:35:9b:6c:d6:c4:34:a1:94:21:20:a9:54:78:ee:9a:76:4c:
4e:1f:38:e8:8c:35:d1:18:1c:e6:68:8d:4f:2b:3e:bd:87:e7:
ad:a4:32:07:f7:f9:99:6e:13:60:29:89:ef:8a:36:36:b1:a7:
8a:28:c6:59:96:a9:3a:ca:87:8b:4c:7e:d4:15:f7:06:de:09:
e6:77:8b:30:a8:ea:be:d2:93:fd:8c:8a:65:45:6c:cf:c6:e9:
a3:66:94:c5:fd:4b:19:ff:e3:58:38:ef:a2:c7:c1:20:d1:bf:
8a:f3:3f:4c:9c:07:5f:75:08:f7:67:da:75:ce:42:1f:49:b5:
5d:58:64:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:23 2025 by rpki-client