This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
File: eDj_-XHbpCvN2NjzdFXwsoSbedc.mft (raw, json)
Hash identifier: stWxrLVJygRvScqlGRd5afD5M8Pt/ErJ08Y9PT+CUys=
Subject key identifier: F3:9B:5A:3E:6E:60:3D:77:B8:91:29:AD:7D:67:86:66:CC:04:CB:59
Authority key identifier: 78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7
Certificate issuer: /CN=A919A9C8/serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
Manifest number: 017B
Signing time: Tue 23 Dec 2025 02:47:23 +0000
Manifest this update: Tue 23 Dec 2025 02:47:22 +0000
Manifest next update: Tue 30 Dec 2025 02:47:22 +0000
Files and hashes: 1: eDj_-XHbpCvN2NjzdFXwsoSbedc.crl (hash: bfqgxDB0o8FIOYg1EFYkOA0ffkruEfsVLQs6Q3nVpn4=)
2: 0D0118A89A4C11EEB7AE8812C4F9AE02.roa (hash: dKUIWl8erdDyFZKjf2ms5iCtc7nOGksh5tTJx3endFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl
rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A9C8, serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7
Validity
Not Before: Dec 23 02:47:22 2025 GMT
Not After : Dec 30 02:47:22 2025 GMT
Subject: CN=694a02bb-d25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:29:13:21:3f:63:71:0b:06:50:40:c7:18:
70:eb:9e:7c:39:6c:89:8d:c6:57:d8:f3:86:9f:85:
d1:8c:96:4f:15:41:d6:79:6d:5f:e7:f3:c5:99:b0:
8f:0e:d1:df:c9:75:3d:92:23:8f:15:59:5e:7d:3f:
c0:4a:80:a3:e6:cd:fe:63:19:77:b8:46:a5:b6:e9:
c2:c2:ad:8b:d0:cf:3a:f4:d6:2c:5e:e7:b0:70:dd:
3b:cf:88:2a:05:f0:ff:3a:2c:15:96:b1:a8:36:35:
30:2d:58:3c:fc:55:7e:9d:ae:81:f1:09:1c:1b:34:
39:25:b0:4b:3c:f4:1a:6f:65:58:4b:0a:d3:37:07:
8d:58:45:eb:08:11:2b:84:b5:90:52:4a:d7:fd:2a:
51:b2:30:6b:39:51:bb:e6:40:0e:d2:ba:03:5c:21:
12:6e:32:1c:b6:18:62:ab:d1:66:56:02:83:84:74:
a8:78:46:dd:32:7f:2e:8c:17:41:d0:28:ac:4c:a1:
01:26:24:1a:ab:78:dd:c7:ea:56:c7:21:38:97:f6:
fb:95:05:96:16:84:08:9f:d0:12:27:b1:31:1c:c4:
bd:90:9b:60:3e:d1:e7:94:f1:fa:f7:bb:df:c1:13:
4f:03:05:40:50:19:64:4a:ba:04:2a:66:b4:4f:f7:
6e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9B:5A:3E:6E:60:3D:77:B8:91:29:AD:7D:67:86:66:CC:04:CB:59
X509v3 Authority Key Identifier:
keyid:78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2f:d2:9e:62:00:7c:b3:b8:9f:1e:e6:99:40:ce:e6:1a:aa:
0a:56:68:a2:aa:d0:d4:0f:a5:14:ee:58:dc:84:cf:93:73:92:
6a:bc:32:3d:aa:51:36:55:36:ae:fe:65:f4:87:c9:fe:44:c0:
3a:a9:51:44:30:31:21:e7:7a:a6:17:92:3b:f3:d5:f4:76:97:
87:fd:81:71:d6:a1:ea:09:f8:3d:6d:1b:87:c8:87:d1:ca:ea:
60:f4:a7:e4:11:07:6f:84:df:33:3e:ec:db:63:ef:bd:99:da:
bb:e3:e3:d6:46:6e:2d:ad:62:21:7e:7b:95:fe:b6:cd:cf:b4:
17:25:d8:4f:e3:c0:34:99:b0:5e:22:51:00:04:70:b5:8e:a3:
bb:41:91:5b:bf:2f:88:c0:ab:5c:30:9d:d3:e6:1f:5c:02:6f:
85:2e:2f:4a:5e:e2:d8:b3:cf:c6:7a:61:26:03:bc:e2:1b:ff:
e1:bb:f1:5c:78:29:08:76:19:c1:5b:2c:80:7f:d9:21:2e:3e:
90:9c:4f:b3:5b:10:9d:91:c1:69:9d:fa:c7:63:58:09:32:31:
f6:93:0f:98:ca:f2:70:d5:49:8d:d2:5e:e8:f3:b7:fb:de:55:
bf:25:f9:de:8e:1e:50:54:ef:24:35:16:fc:36:a0:44:cc:99:
b6:0d:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:21:24 2025 by rpki-client