This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
File: EjJ9_J6Ig827bG7us5JfLIwPfl4.mft (raw, json)
Hash identifier: A+8AdCtLLJUwkZCttp8VvfslYtwygnNYvIg1iFk9G3k=
Subject key identifier: 9D:AD:FA:C9:11:F5:92:42:4D:1A:80:58:15:4C:F4:7A:61:DB:71:8E
Authority key identifier: 12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E
Certificate issuer: /CN=A91833FF/serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E
Certificate serial: 1288
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
Manifest number: 127C
Signing time: Sat 20 Dec 2025 16:50:21 +0000
Manifest this update: Sat 20 Dec 2025 16:50:21 +0000
Manifest next update: Sat 27 Dec 2025 16:50:21 +0000
Files and hashes: 1: EjJ9_J6Ig827bG7us5JfLIwPfl4.crl (hash: OsWzCy/vSnpOOW1K6b+TTppyq9r9i9Cy5ROqBXQ7OBM=)
2: 659F6E188F2211E98AC7590DC4F9AE02.roa (hash: NX0Uu06g9kaFwSmmKkUW0sgMJpCNI4RFhei0HlK1wt8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl
rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 16:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4744 (0x1288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91833FF, serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E
Validity
Not Before: Dec 20 16:50:21 2025 GMT
Not After : Dec 27 16:50:21 2025 GMT
Subject: CN=6946d3cd-5866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:81:41:61:2d:c5:5b:af:38:b6:6e:a0:0e:
b2:57:fe:e7:b5:d0:87:87:3a:a9:ae:f8:6e:e5:54:
bd:19:09:09:ba:a7:c8:36:c3:6f:7d:91:bb:18:44:
8f:04:27:82:65:f1:7c:38:47:e3:86:92:70:d9:8a:
6b:42:8d:21:c3:67:64:d7:67:31:8b:d3:c8:f2:7a:
c8:f1:e3:7e:34:40:c5:bc:b6:a1:36:a3:98:2c:93:
51:b0:e3:c3:f0:a9:58:ed:92:b5:ce:9c:2d:94:8b:
4f:0b:91:51:d1:de:2b:f3:50:e4:d3:2b:f4:1f:62:
0e:b7:9d:52:16:19:a3:8b:18:7d:56:ae:ff:88:d4:
3f:40:a4:e4:37:d9:07:e4:8d:70:bd:0c:d2:f3:78:
ef:20:c4:d9:9f:64:53:b8:5b:06:d3:db:69:2d:8d:
96:37:55:49:b5:07:66:cc:3d:74:2b:f2:79:6d:ad:
f0:32:48:1b:bb:54:86:99:d2:6a:b1:ee:03:ae:70:
da:23:66:24:03:e6:66:74:b7:48:63:e7:0c:24:93:
62:e2:35:12:25:30:e6:b1:59:d0:1f:7f:c3:1c:90:
6b:be:02:34:1b:a8:cd:4a:4f:50:93:30:3a:27:9c:
a2:a4:f6:fc:73:1d:01:5b:5b:75:22:ca:52:0a:a9:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AD:FA:C9:11:F5:92:42:4D:1A:80:58:15:4C:F4:7A:61:DB:71:8E
X509v3 Authority Key Identifier:
keyid:12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:e1:04:78:92:6a:3f:8d:f0:6b:af:ff:fe:09:17:42:27:3c:
e3:a8:90:de:a1:77:d3:e9:b3:a1:17:23:32:9c:60:2a:2d:b7:
6a:3d:16:70:13:dc:f6:9b:6c:b9:6d:30:94:85:0c:b6:c3:46:
11:d7:82:54:67:29:c1:80:31:3f:95:c9:7c:57:17:6f:1a:bc:
ad:17:62:d8:64:78:b7:54:5d:96:02:a7:f9:21:67:90:69:59:
00:00:b7:63:c7:88:06:fb:18:6e:de:67:7f:9e:a1:48:bc:4b:
8e:15:ad:66:7a:c1:fb:90:ab:10:8a:4c:32:f8:fa:ab:9f:ad:
7b:4f:c9:ed:29:41:a8:c0:3c:b9:26:ef:bd:0a:71:6b:b3:62:
83:27:a1:3f:09:51:51:ac:70:78:e0:6c:3a:83:6e:c1:3a:e4:
61:77:eb:42:69:07:9a:fe:d1:48:94:b1:74:95:7a:e4:c9:86:
e2:85:3a:36:34:d4:05:5d:fa:54:93:89:f2:d4:c8:a2:08:ca:
42:61:26:34:12:6f:99:22:85:67:00:40:cd:e6:17:38:6e:68:
27:cc:76:80:b5:e8:a2:15:fb:60:28:78:af:ce:7c:14:83:8f:
b9:5f:e6:6a:ce:86:b5:8c:57:cd:04:c5:90:10:3f:95:20:3a:
a7:53:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 21:51:17 2025 by rpki-client