This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
File: 0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft (raw, json)
Hash identifier: hs4YyxR6SuPVMO9OS3KQlhwG+TCK0Vg3kq1KqgMq9LQ=
Subject key identifier: F8:74:33:96:28:2A:C8:C1:42:70:E6:C2:D6:68:A7:27:AC:A8:F7:13
Authority key identifier: D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88
Certificate issuer: /CN=A919874A/serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
Manifest number: A2
Signing time: Tue 23 Dec 2025 05:16:07 +0000
Manifest this update: Tue 23 Dec 2025 05:16:07 +0000
Manifest next update: Tue 30 Dec 2025 05:16:07 +0000
Files and hashes: 1: 0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl (hash: l2kI7BwR3W0HEF/ZG/KuWvKdTLvqRG/o2Pcd5Wk8/m4=)
2: 7151B356EAD411EFBA2AB40EC4F9AE02.roa (hash: VSF4aaLno+UR3o6W3Jl8Y30MNxvgZ99sJu4IeD9pONk=)
3: 9A54CDE2348011F086A8BD61C4F9AE02.roa (hash: pT72WIe4fU0R7+0/z831L5zLkhO5BiW0L+nGv2+Kvtc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl
rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919874A, serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788
Validity
Not Before: Dec 23 05:16:07 2025 GMT
Not After : Dec 30 05:16:07 2025 GMT
Subject: CN=694a2597-e8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2b:6f:9f:00:2e:45:d0:c9:22:af:91:58:56:
57:89:18:72:19:99:dc:9a:39:88:0a:1b:b6:8e:00:
32:b0:9e:b7:ea:f0:01:e5:3d:55:c8:9a:88:69:bc:
95:b3:56:37:81:98:de:33:b4:ab:b1:e5:aa:f3:71:
c8:ad:b6:c6:51:6f:6e:20:21:a6:db:b8:df:d7:f0:
8b:88:3c:aa:ba:e2:95:5a:6a:26:8e:c0:51:0d:fd:
98:4c:f8:e5:ac:64:f2:a9:6f:5b:78:bd:63:ea:ed:
3b:3c:9f:3d:46:85:40:78:c9:cf:30:38:56:dd:7c:
f1:f9:3e:62:c0:5f:87:68:ce:a6:c1:85:2f:10:79:
e6:22:bf:b4:91:de:c5:27:09:61:e7:4d:ba:bb:d5:
81:3c:da:29:d0:4c:00:ee:70:b8:47:d7:63:9e:64:
8d:45:98:03:69:8c:b3:84:e5:e7:87:1d:d2:69:e2:
9a:1b:0c:bb:50:09:43:36:4d:c5:bc:ea:62:7d:9a:
40:c9:0f:33:a2:09:7d:89:84:bb:85:17:bc:40:b8:
71:54:41:6c:45:e6:21:5b:17:7b:8e:6e:8f:57:10:
88:ff:ce:98:94:e0:79:50:53:9b:51:42:e9:29:67:
fd:58:46:48:f1:5c:d2:4d:7d:db:14:f9:23:c7:fb:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:74:33:96:28:2A:C8:C1:42:70:E6:C2:D6:68:A7:27:AC:A8:F7:13
X509v3 Authority Key Identifier:
keyid:D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:09:2f:51:ea:a2:0a:33:15:b8:d6:30:77:0d:77:41:40:ac:
71:b3:95:0c:59:ef:db:f1:de:be:c1:1e:1b:c2:7a:37:ca:79:
1e:4f:a1:b3:47:02:7c:e8:4b:23:ad:7d:fb:52:87:6d:d5:90:
c3:0e:57:6a:97:8f:94:9b:fc:e7:3b:0b:b2:d0:ef:eb:aa:de:
b0:f7:6c:90:ac:41:da:82:48:2d:e6:0c:ec:43:55:18:3b:c8:
39:c4:bc:e8:71:be:58:a5:58:09:e1:a0:be:ed:0e:0c:ce:2c:
72:bc:93:9e:ef:f5:56:28:68:68:2d:32:04:42:e1:ca:e1:2a:
f0:d6:28:09:b4:80:a9:ed:04:60:8f:fe:34:fa:04:9b:a2:eb:
b5:f3:ad:94:dd:78:a9:39:5d:8e:e6:8f:46:a9:fe:6a:d6:85:
5a:15:8b:69:47:90:35:a8:32:3b:8c:24:06:2c:a2:a6:86:7e:
b5:f0:64:a4:a0:68:ac:94:1d:76:fc:af:26:6c:92:08:9a:f9:
ad:b4:30:79:ac:5a:62:78:5b:fc:69:1c:14:82:ce:9d:7b:22:
86:24:bf:da:84:fd:bb:7c:27:b0:e1:b3:4d:39:ea:40:31:87:
f4:4c:ea:f7:12:94:c0:79:f1:2f:5e:40:34:bf:8c:83:f8:dd:
5b:4f:28:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg3NEExMTAvBgNVBAUTKEQwNDgwRkYxMDc1MDUyRkVGRUU2QzA4RTFEQkY4RTgz
RTAwMTI3ODgwHhcNMjUxMjIzMDUxNjA3WhcNMjUxMjMwMDUxNjA3WjAYMRYwFAYD
VQQDDA02OTRhMjU5Ny1lOGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8CtvnwAuRdDJIq+RWFZXiRhyGZncmjmIChu2jgAysJ636vAB5T1VyJqIabyV
s1Y3gZjeM7SrseWq83HIrbbGUW9uICGm27jf1/CLiDyquuKVWmomjsBRDf2YTPjl
rGTyqW9beL1j6u07PJ89RoVAeMnPMDhW3Xzx+T5iwF+HaM6mwYUvEHnmIr+0kd7F
Jwlh5026u9WBPNop0EwA7nC4R9djnmSNRZgDaYyzhOXnhx3SaeKaGwy7UAlDNk3F
vOpifZpAyQ8zogl9iYS7hRe8QLhxVEFsReYhWxd7jm6PVxCI/86YlOB5UFObUULp
KWf9WEZI8VzSTX3bFPkjx/tFGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPh0M5Yo
KsjBQnDmwtZopyesqPcTMB8GA1UdIwQYMBaAFNBID/EHUFL+/ubAjh2/joPgASeI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc0QS9FQ0UxNjZENEVB
RDMxMUVGQjFDNENDNTVDNEY5QUUwMi8wRWdQOFFkUVV2Ny01c0NPSGItT2ctQUJK
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBFZ1A4UWRRVXY3LTVzQ09IYi1PZy1BQko0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODc0QS9FQ0UxNjZENEVBRDMxMUVGQjFDNENDNTVDNEY5QUUwMi8wRWdQOFFkUVV2
Ny01c0NPSGItT2ctQUJKNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA1CS9R6qIKMxW41jB3DXdBQKxxs5UMWe/b8d6+wR4bwno3ynkeT6Gz
RwJ86EsjrX37Uodt1ZDDDldql4+Um/znOwuy0O/rqt6w92yQrEHagkgt5gzsQ1UY
O8g5xLzocb5YpVgJ4aC+7Q4MzixyvJOe7/VWKGhoLTIEQuHK4Srw1igJtICp7QRg
j/40+gSbouu1862U3XipOV2O5o9Gqf5q1oVaFYtpR5A1qDI7jCQGLKKmhn618GSk
oGislB12/K8mbJIImvmttDB5rFpieFv8aRwUgs6deyKGJL/ahP27fCew4bNNOepA
MYf0TOr3EpTAefEvXkA0v4yD+N1bTyjL
-----END CERTIFICATE-----
Generated at Tue Dec 23 14:54:44 2025 by rpki-client