This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.mft
File: eqF9y0Q-PfjajmchB6USkODpoBM.mft (raw, json)
Hash identifier: ab6VfpYP/x2OaX5gocARWLIeGK373jIzmlUngjfIQYw=
Subject key identifier: 4F:BC:9A:3E:DF:94:FA:D3:CB:88:A0:F8:C7:A8:E9:98:2B:EF:69:AA
Authority key identifier: 7A:A1:7D:CB:44:3E:3D:F8:DA:8E:67:21:07:A5:12:90:E0:E9:A0:13
Certificate issuer: /CN=A918233C/serialNumber=7AA17DCB443E3DF8DA8E672107A51290E0E9A013
Certificate serial: 049C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqF9y0Q-PfjajmchB6USkODpoBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.mft
Manifest number: 051B
Signing time: Mon 22 Dec 2025 23:06:16 +0000
Manifest this update: Mon 22 Dec 2025 23:06:15 +0000
Manifest next update: Mon 29 Dec 2025 23:06:15 +0000
Files and hashes: 1: eqF9y0Q-PfjajmchB6USkODpoBM.crl (hash: 7kGqAZbPIzkqBt0qZ/TQpX/bVpcAyK87wGbr0e4Kw5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.crl
rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqF9y0Q-PfjajmchB6USkODpoBM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1180 (0x49c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918233C, serialNumber=7AA17DCB443E3DF8DA8E672107A51290E0E9A013
Validity
Not Before: Dec 22 23:06:15 2025 GMT
Not After : Dec 29 23:06:15 2025 GMT
Subject: CN=6949cee8-5f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:76:d8:78:c0:08:4c:4b:77:db:e5:5e:6e:
98:a0:ea:5a:3a:c7:1e:b2:ac:6a:a6:8d:8d:28:c1:
bb:0d:e9:00:4f:93:01:22:f2:03:b0:cf:26:8c:42:
e7:03:c9:d5:84:4b:5b:7d:88:a3:88:ad:72:13:f5:
6b:c6:fe:3c:c1:0b:56:57:fe:55:11:ae:f8:65:df:
3b:84:f5:0e:1d:ce:11:9d:de:1e:02:43:d8:3a:8a:
ed:e9:0c:3c:07:a7:9f:3a:73:c5:96:e0:8d:e0:f9:
ae:09:52:40:5d:be:a6:bc:ac:19:7f:a3:38:6b:3e:
da:94:f9:6a:2c:34:78:b8:76:d5:e5:6b:85:62:7e:
80:35:35:0e:16:84:fe:e4:6c:9e:dd:cc:45:ce:0c:
59:0f:cc:f5:26:d8:0f:14:7a:6b:14:42:80:1f:9f:
72:3f:cc:32:ad:21:7d:c9:d2:6e:e6:6d:66:56:7a:
8e:1a:ca:de:f0:3d:84:c2:a8:35:f1:b7:ca:2c:9c:
8e:ea:6b:59:06:43:b6:e2:83:ac:0c:43:7d:c8:78:
b2:4e:18:3e:5b:aa:5b:67:d5:77:81:cf:b6:fd:10:
72:5a:0c:9c:aa:b1:a9:73:b3:83:7d:76:fd:f4:da:
85:1c:27:dc:96:15:e9:e8:70:3b:07:b1:f3:64:49:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BC:9A:3E:DF:94:FA:D3:CB:88:A0:F8:C7:A8:E9:98:2B:EF:69:AA
X509v3 Authority Key Identifier:
keyid:7A:A1:7D:CB:44:3E:3D:F8:DA:8E:67:21:07:A5:12:90:E0:E9:A0:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqF9y0Q-PfjajmchB6USkODpoBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f0:ac:7c:50:d4:89:63:b6:7d:de:ad:b7:22:53:05:03:20:
84:77:cf:78:cf:94:81:0c:6c:bb:9a:d0:50:18:fc:20:64:68:
df:d1:05:b5:22:29:cc:7b:6a:da:f1:14:9d:43:b6:36:cf:8d:
7c:89:b4:0c:e1:6c:25:5f:a4:e1:94:cd:cc:8e:cd:80:8c:29:
f1:02:55:be:d6:4b:c9:b1:a2:fb:57:91:18:a6:5d:ea:a7:22:
a5:3b:b2:96:75:cb:fa:bc:da:cf:12:1f:d8:b4:c7:ab:85:30:
5b:69:b2:d4:fd:c5:97:ad:e2:88:08:a3:d8:63:a7:98:9f:45:
0c:f4:d7:55:a7:09:8e:5d:32:c1:d4:5e:83:89:6e:d8:4a:97:
88:2d:28:34:af:62:c0:f8:01:0d:c8:5d:a1:43:14:d3:60:7d:
8e:77:0d:fc:c0:ea:eb:70:14:42:bd:c5:47:c8:12:4b:e7:7b:
ca:65:fc:94:a8:da:80:1a:57:02:0b:97:de:46:af:74:8b:5a:
5e:52:5b:96:6c:39:5e:1d:0e:70:01:91:51:4f:69:f8:34:9c:
ec:d0:dd:13:70:08:d5:32:00:a5:f2:00:91:9d:88:da:b5:83:
d5:9b:e5:4a:7f:43:41:e7:8d:49:bb:4a:6a:c7:9f:ad:36:93:
0c:15:0a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:40 2025 by rpki-client