This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json)
Hash identifier: 7dI4ywPAKISuoi3xtULOoe8QqicO8nnknqo67lyBbpU=
Subject key identifier: 5E:B7:C6:76:71:AF:66:D6:46:53:51:FB:FC:C5:A0:3D:57:D9:D4:61
Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5
Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
Manifest number: 01F8
Signing time: Tue 23 Dec 2025 01:34:59 +0000
Manifest this update: Tue 23 Dec 2025 01:34:58 +0000
Manifest next update: Tue 30 Dec 2025 01:34:58 +0000
Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: UURIJZ2DzJPNechFksYkezmlvp0QEglDCvjl9VIeGpk=)
2: AD9C1DEE9E2311F0A35D7D1FC4F9AE02.roa (hash: 2AFvxOgERN6IP1ghZwOz+nDsY9qU1LoYMzKU7ME8H9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl
rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
Validity
Not Before: Dec 23 01:34:58 2025 GMT
Not After : Dec 30 01:34:58 2025 GMT
Subject: CN=6949f1c3-7c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:76:e2:28:18:02:ed:66:fb:04:16:b6:b1:64:
64:b8:b8:1d:af:db:94:ed:02:a9:3a:3b:b0:c7:22:
c6:0d:d8:7d:f1:59:90:f8:5f:7e:0b:86:89:c7:ec:
44:94:5f:51:dc:c0:0b:88:07:4d:7d:07:c4:f2:01:
c6:84:e4:3c:4c:be:a7:93:52:75:16:65:57:0d:17:
f2:ce:0c:f2:64:e5:27:38:f4:69:c4:e1:e2:6c:68:
2b:57:44:c7:3e:71:ef:d6:d0:6e:08:77:bb:9a:8b:
36:ca:16:d3:89:82:9d:00:d9:b8:02:e0:e1:db:7f:
0c:7d:4b:3b:72:1b:9a:27:86:0f:bd:55:b7:27:12:
34:98:34:3e:09:6e:4c:c8:80:a0:a8:6f:6d:1b:fd:
1e:40:fe:ce:f6:8e:1d:41:37:69:32:c1:5b:a1:a8:
75:fc:b8:60:5a:89:fb:33:0f:46:57:04:43:eb:92:
fa:58:b8:72:fb:7f:88:fc:15:d2:0a:5a:47:82:c2:
4f:8f:a2:c1:50:fc:77:2f:23:cf:a7:41:ad:c2:46:
71:b9:08:92:a0:22:fd:d1:26:3f:87:90:fa:f1:fc:
c3:6a:8e:77:00:73:c5:b2:47:e5:48:eb:53:d6:e3:
c9:87:94:2a:f7:5a:55:a4:61:69:65:28:0a:8d:31:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B7:C6:76:71:AF:66:D6:46:53:51:FB:FC:C5:A0:3D:57:D9:D4:61
X509v3 Authority Key Identifier:
keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:6d:54:85:65:07:b5:c5:eb:96:85:2e:24:49:25:4c:f7:1b:
10:26:92:70:f6:a9:65:f3:a9:6d:f0:05:16:65:8f:51:4e:aa:
e0:7a:60:9b:90:8a:5e:16:b5:cc:6e:2a:90:6e:3d:89:43:5d:
23:5a:e4:72:c0:5d:5a:25:e5:f8:56:e7:86:3b:40:45:f5:22:
be:a2:46:9e:0a:12:c6:34:63:89:c0:fa:1f:10:3b:2a:25:7b:
7f:f8:76:c4:ea:6b:2a:75:2e:2b:36:ae:fd:73:76:b1:44:b6:
2a:3e:4f:7e:80:76:82:50:f2:60:e7:21:8c:e3:8d:9e:cd:dd:
85:71:dd:9c:32:a7:77:f1:da:82:48:b1:8f:5d:d3:90:5d:08:
48:44:7e:b2:fe:e5:af:f6:55:4a:5d:74:88:54:a5:dd:3d:6a:
23:c9:e0:67:8c:67:fc:a3:fc:ee:d3:0b:70:0f:70:dd:90:9a:
38:4a:40:f6:05:b2:d1:5f:f4:30:59:01:d7:4b:ec:31:8d:2b:
6b:df:b3:e1:db:9a:a7:5c:0b:da:02:64:7c:cc:62:05:15:06:
87:95:b4:a5:11:34:40:ef:78:fd:b6:c6:4d:de:3a:5a:91:d6:
21:f7:9e:d6:94:20:66:47:c4:45:52:b1:57:14:97:ad:32:45:
72:26:b2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 12:33:18 2025 by rpki-client