This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json)
Hash identifier: 58vaKPs0HgPV8yMZTETwemcugZGC1pDzqE6IFTFwUrw=
Subject key identifier: 58:6C:8F:92:C3:E2:49:05:F7:06:BC:6B:29:7A:A1:05:78:96:79:DF
Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B
Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
Manifest number: EB
Signing time: Sun 21 Dec 2025 04:37:28 +0000
Manifest this update: Sun 21 Dec 2025 04:37:27 +0000
Manifest next update: Sun 28 Dec 2025 04:37:27 +0000
Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: UpGngg/6ZQP11m3dlt7eNqvUUf5+ghn8Q3lqnDf8F+M=)
2: A647525E853B11EFB513D149C4F9AE02.roa (hash: t1q6Mmlrz8mXbc1Vz8T8WidohHPsBk0Fmm5bZBubtH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl
rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
Validity
Not Before: Dec 21 04:37:27 2025 GMT
Not After : Dec 28 04:37:27 2025 GMT
Subject: CN=69477988-59e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:4c:97:62:f6:3d:ef:9b:4b:6e:81:03:c4:
aa:77:c3:d6:45:fc:4e:23:d6:1b:79:d2:ec:89:22:
b6:68:19:7a:63:8e:79:b2:97:06:16:40:40:7f:a6:
cf:83:86:8c:fd:42:dc:3e:c9:8d:8b:37:cc:68:8b:
cb:bc:ea:24:a8:b6:82:7d:52:e7:cc:56:e3:b9:0b:
8b:30:37:39:1e:34:cc:75:47:fb:4d:0b:ff:2e:3b:
7a:ba:2c:ab:63:8d:2e:62:48:e7:c3:e4:2b:da:8a:
37:b2:1f:6c:76:58:8e:67:d2:bb:36:f7:af:3e:78:
7c:e7:27:48:20:86:c2:51:fb:91:25:55:04:58:fa:
7c:52:3d:f4:68:88:f2:64:20:6d:89:e4:89:6b:65:
91:16:37:88:d2:0c:3b:82:f4:49:45:d3:4a:8d:0c:
83:00:d3:93:d2:e1:f9:9b:af:71:38:83:a8:d6:72:
20:a7:83:6d:d2:59:00:d1:ff:35:18:f2:33:7d:a3:
5d:f9:66:21:69:1f:c1:0d:4e:1b:af:6b:62:e9:69:
7c:c3:49:6f:a5:f0:3c:f7:17:6a:ff:39:ad:69:f3:
a0:e1:bd:a1:82:b3:9b:a4:3f:00:ab:b2:69:09:47:
58:ae:fb:a2:69:3d:32:7b:cd:ca:7f:09:1d:ba:96:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6C:8F:92:C3:E2:49:05:F7:06:BC:6B:29:7A:A1:05:78:96:79:DF
X509v3 Authority Key Identifier:
keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:8c:1a:37:28:88:a1:8b:04:43:5f:0a:9f:61:9e:a8:d2:b4:
33:ed:b7:a9:d0:53:e2:fc:56:a5:0e:1b:11:23:f3:a4:aa:ad:
25:20:b3:fd:86:01:7f:40:53:81:b1:39:28:72:94:ff:ee:8d:
40:dd:82:22:ac:04:a0:81:cd:58:7a:d4:2a:e5:60:7c:aa:45:
e7:82:48:53:8b:dc:11:96:0c:cd:2f:da:f5:6e:e7:7b:8f:50:
7b:f4:c5:3b:5b:74:43:25:17:42:dd:22:84:93:f0:ad:8d:9f:
82:28:89:b6:eb:9b:74:fe:22:76:6c:4a:e4:f2:85:00:3c:49:
b0:7d:75:24:08:39:2e:63:b1:c6:a3:39:dd:07:69:ac:cc:1c:
32:b9:c4:57:25:7a:b8:b3:bc:85:a9:67:c6:b5:21:a2:bd:16:
c8:aa:da:b4:99:fe:17:41:0d:de:24:f9:1e:f1:35:ec:e8:c2:
52:c1:ae:53:cd:d2:ce:85:16:5b:2a:7f:0d:87:4b:22:54:a6:
04:3c:82:81:bc:4a:8f:cb:8e:a4:10:1f:95:e7:c3:e6:f4:d4:
f2:22:3a:1e:86:67:16:68:1c:a3:4a:4d:93:14:ad:7b:46:0e:
3e:18:74:28:ba:8a:20:c4:47:ff:77:6b:8c:a6:8d:82:d8:3d:
13:74:d5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:30:03 2025 by rpki-client