This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json)
Hash identifier: /4MrTTFZg8GSTuOFvqRYOulhe2ShdPCcyem7TafClJU=
Subject key identifier: 15:9C:C8:E0:5E:17:26:75:38:7C:27:45:6E:22:D3:02:21:E2:42:6C
Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Certificate serial: 0DAE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
Manifest number: 0D87
Signing time: Sat 20 Dec 2025 17:39:26 +0000
Manifest this update: Sat 20 Dec 2025 17:39:25 +0000
Manifest next update: Sat 27 Dec 2025 17:39:25 +0000
Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: 2VjPi6I9aLla9UK6ICKHuggt4OsVsUrhhduhQ9jjlI4=)
2: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: J4Hv1naBopBVbkvmkR77VLmGUJiYmVXkbO9FW9SSP/s=)
3: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: Y+E2Zw8cSibO88OVDC2atGI8LaONXqL9mkfjf3pS0hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 17:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3502 (0xdae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Validity
Not Before: Dec 20 17:39:25 2025 GMT
Not After : Dec 27 17:39:25 2025 GMT
Subject: CN=6946df4d-e691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:4a:3e:13:13:cd:5f:17:70:7e:a6:8f:10:
f8:f1:f4:a3:c1:ac:5c:c3:fe:b9:10:5f:29:83:45:
c7:87:16:64:3c:e2:6a:44:86:9a:f3:2b:66:6b:3a:
65:bc:b3:3a:e0:05:ee:1f:e5:da:f6:22:45:8f:40:
d7:1e:ae:32:73:6e:ff:60:ff:47:d7:a3:a1:e8:02:
51:5b:89:fb:2b:f1:f6:55:3b:cc:41:93:38:74:c5:
28:18:5d:17:43:de:e6:45:03:d2:6d:aa:23:ab:bd:
55:22:4e:09:fc:c7:17:07:bd:87:55:47:99:d9:c5:
11:3e:34:7e:ee:4d:5d:c7:87:cb:0c:13:44:71:a1:
34:f6:4d:72:b6:45:cf:44:84:a2:d3:ad:f9:8e:e5:
bd:3d:8e:8b:46:a1:a5:5b:27:8a:2a:2f:40:d4:f3:
14:eb:2a:cd:ae:93:b7:ca:26:a3:db:4a:34:11:0b:
03:be:85:2b:da:74:d9:e1:5f:d7:cd:15:27:b8:58:
d4:27:59:97:d4:9e:4c:48:38:6c:2f:42:1a:5c:a5:
95:48:68:86:60:85:60:66:0b:42:7d:1f:46:1a:31:
14:1c:b3:9b:f1:17:21:13:4f:a4:f1:b9:9a:fa:a6:
dd:e4:db:d3:c7:04:52:b8:e1:67:4a:be:66:c4:ee:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9C:C8:E0:5E:17:26:75:38:7C:27:45:6E:22:D3:02:21:E2:42:6C
X509v3 Authority Key Identifier:
keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:84:e8:97:a5:2c:fe:4c:88:99:07:bc:de:5e:5c:71:21:5f:
69:2f:b1:20:d1:07:a6:22:6c:d5:5c:c8:4f:1a:6f:74:13:6c:
d9:cb:81:f8:22:09:79:00:77:d2:72:66:19:05:91:22:a9:3e:
88:b6:05:b9:8f:0e:23:08:40:30:1d:fa:aa:b6:04:f9:e5:9f:
77:5f:22:f2:14:ca:69:cb:ba:df:a1:ce:58:34:86:d4:9b:9e:
66:59:06:65:b6:67:f8:eb:78:b2:42:2e:59:16:1e:e3:c2:33:
7a:23:1d:86:7e:4a:3f:05:3e:4a:5b:39:82:a1:3c:ad:42:39:
1e:86:27:e1:d7:2a:28:37:23:67:7f:8d:ac:1d:38:7f:40:10:
05:a3:d7:f0:9a:1f:6b:b1:d8:02:ed:2c:73:93:6b:1c:55:08:
9d:5f:e6:b2:43:1a:36:0e:f5:dc:54:1a:90:4c:b1:f4:36:34:
f1:e9:7c:ea:35:04:6c:bd:0e:94:eb:48:2d:5f:ad:5d:f9:27:
5e:28:bf:0d:21:a6:da:2e:ea:67:d7:76:2d:3f:a4:fe:14:a0:
cd:f4:37:89:53:13:44:5e:f9:8c:de:bc:60:f3:91:72:28:80:
7e:d4:db:15:d7:6a:51:f3:77:7a:ef:67:98:d9:1d:fd:78:60:
82:72:e9:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy
QTk1NjA0MjkwHhcNMjUxMjIwMTczOTI1WhcNMjUxMjI3MTczOTI1WjAYMRYwFAYD
VQQDDA02OTQ2ZGY0ZC1lNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCdKPhMTzV8XcH6mjxD48fSjwaxcw/65EF8pg0XHhxZkPOJqRIaa8ytmazpl
vLM64AXuH+Xa9iJFj0DXHq4yc27/YP9H16Oh6AJRW4n7K/H2VTvMQZM4dMUoGF0X
Q97mRQPSbaojq71VIk4J/McXB72HVUeZ2cURPjR+7k1dx4fLDBNEcaE09k1ytkXP
RISi0635juW9PY6LRqGlWyeKKi9A1PMU6yrNrpO3yiaj20o0EQsDvoUr2nTZ4V/X
zRUnuFjUJ1mX1J5MSDhsL0IaXKWVSGiGYIVgZgtCfR9GGjEUHLOb8RchE0+k8bma
+qbd5NvTxwRSuOFnSr5mxO53+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWcyOBe
FyZ1OHwnRW4i0wIh4kJsMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy
QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01
QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBNhOiXpSz+TIiZB7zeXlxxIV9pL7Eg0QemImzVXMhPGm90E2zZy4H4
Igl5AHfScmYZBZEiqT6ItgW5jw4jCEAwHfqqtgT55Z93XyLyFMppy7rfoc5YNIbU
m55mWQZltmf463iyQi5ZFh7jwjN6Ix2Gfko/BT5KWzmCoTytQjkehifh1yooNyNn
f42sHTh/QBAFo9fwmh9rsdgC7Sxzk2scVQidX+ayQxo2DvXcVBqQTLH0NjTx6Xzq
NQRsvQ6U60gtX61d+SdeKL8NIabaLupn13YtP6T+FKDN9DeJUxNEXvmM3rxg85Fy
KIB+1NsV12pR83d672eY2R39eGCCculN
-----END CERTIFICATE-----
Generated at Sun Dec 21 09:18:25 2025 by rpki-client