This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
File: EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json)
Hash identifier: 2YlnvKBYcWDkMzsh9hGY+ydwYgCsW9URX5SiwS21ccE=
Subject key identifier: 1F:80:AB:90:CD:4F:C7:F2:91:53:75:5A:C3:35:E8:60:A9:DD:DD:89
Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75
Certificate issuer: /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
Manifest number: 010E
Signing time: Tue 23 Dec 2025 03:56:33 +0000
Manifest this update: Tue 23 Dec 2025 03:56:32 +0000
Manifest next update: Tue 30 Dec 2025 03:56:32 +0000
Files and hashes: 1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: d2byWqh56v5gESEU1bPPvlId3teLUqNDfhXdLcIiJ08=)
2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: GLbMFy1JbyAVM7u4jQAEv8xQTj/rbFbdkkf2ZQWfsOQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl
rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:56:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB72F, serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
Validity
Not Before: Dec 23 03:56:32 2025 GMT
Not After : Dec 30 03:56:32 2025 GMT
Subject: CN=694a12f1-93a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:29:ac:a5:6c:47:42:68:3a:82:63:1f:0e:34:
6e:9d:39:79:8c:2a:99:32:40:bc:7d:33:2f:fd:b6:
0c:e3:e7:90:8d:93:7e:43:f0:6b:c3:85:56:a8:22:
ce:de:c0:8b:f1:18:a0:b2:db:6f:73:d4:bf:54:9f:
c9:b6:b2:a2:7c:e7:5d:35:f0:78:83:8f:a2:99:21:
5a:30:5c:72:b9:de:a1:70:43:88:8e:8a:f9:de:b9:
4c:74:4b:55:e6:fc:cd:10:fc:6d:9b:e0:65:60:b7:
89:25:9c:4e:41:cd:34:25:d3:11:63:0a:82:90:a3:
bd:5f:8a:a5:20:bf:2d:7d:eb:dc:07:c2:74:ec:5f:
11:12:59:57:e2:37:99:b8:dc:e6:86:09:41:ef:47:
2b:cb:e6:3d:bc:ab:06:79:50:40:d6:4d:68:3a:76:
fe:f0:04:a0:2f:09:40:86:0c:3e:06:23:6d:88:a4:
bb:a5:39:aa:ed:45:07:7f:79:12:bf:62:93:d8:a4:
fb:78:80:ab:06:34:3a:06:ee:df:f5:9d:96:54:95:
b2:ba:34:87:e5:bd:47:13:10:a7:26:94:23:19:c6:
ca:e5:8b:1c:49:f0:f0:8f:2a:75:d5:61:a5:fb:c1:
21:7f:9f:89:41:f5:e0:08:33:95:de:10:1b:d2:86:
fb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:80:AB:90:CD:4F:C7:F2:91:53:75:5A:C3:35:E8:60:A9:DD:DD:89
X509v3 Authority Key Identifier:
keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:16:ac:73:50:4e:8f:02:2c:77:d9:18:23:11:7b:78:87:36:
f4:1a:e8:4e:f1:9b:56:c1:1a:db:0f:cb:1a:4d:bd:61:c0:71:
29:5c:3c:64:5a:55:23:80:a0:2b:59:2c:3b:4d:ad:9f:c6:92:
1f:8d:20:95:b2:2e:74:bf:24:8d:a5:18:d2:77:05:b3:62:95:
44:ff:a9:be:d7:ad:1e:7a:d8:30:45:59:b4:f1:14:9d:0a:8a:
63:eb:fa:0b:99:a6:1f:62:dd:cd:01:90:9f:65:b7:39:c8:d7:
46:4b:5d:22:98:d1:1f:2e:0a:5c:de:c6:f9:ba:d4:8d:4a:2d:
97:c5:32:f3:e6:1b:9d:10:6e:3a:3b:8a:51:8c:3b:b4:22:24:
5b:a5:1e:a5:42:7f:a0:33:1b:3d:1d:e9:5a:52:01:99:98:01:
77:54:ee:75:eb:1b:d2:77:61:38:ba:2d:fd:14:f7:ad:f9:bd:
07:38:1d:7d:f2:c4:98:80:14:2a:b4:d5:79:95:bb:44:aa:d3:
a7:ac:22:c6:9e:60:86:c3:cf:58:09:a9:90:37:5e:84:84:9a:
df:5e:80:d4:d0:4d:62:66:40:38:c8:9d:44:85:d9:71:80:16:
05:4a:28:36:bb:6e:54:12:08:0b:dd:27:fe:e8:83:12:bb:59:
ad:52:04:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI3MkYxMTAvBgNVBAUTKDEyNDQ3ODVENDBDNUVDNThERkM0QTMyODU0MEYxQjM5
M0RFQTIzNzUwHhcNMjUxMjIzMDM1NjMyWhcNMjUxMjMwMDM1NjMyWjAYMRYwFAYD
VQQDDA02OTRhMTJmMS05M2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlCmspWxHQmg6gmMfDjRunTl5jCqZMkC8fTMv/bYM4+eQjZN+Q/Brw4VWqCLO
3sCL8Rigsttvc9S/VJ/JtrKifOddNfB4g4+imSFaMFxyud6hcEOIjor53rlMdEtV
5vzNEPxtm+BlYLeJJZxOQc00JdMRYwqCkKO9X4qlIL8tfevcB8J07F8REllX4jeZ
uNzmhglB70cry+Y9vKsGeVBA1k1oOnb+8ASgLwlAhgw+BiNtiKS7pTmq7UUHf3kS
v2KT2KT7eICrBjQ6Bu7f9Z2WVJWyujSH5b1HExCnJpQjGcbK5YscSfDwjyp11WGl
+8Ehf5+JQfXgCDOV3hAb0ob7GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+Aq5DN
T8fykVN1WsM16GCp3d2JMB8GA1UdIwQYMBaAFBJEeF1AxexY38SjKFQPGzk96iN1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjcyRi8yRkI0OUIzRTQz
RDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdGamZ4S01vVkE4Yk9UM3FJ
M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VrUjRYVURGN0ZqZnhLTW9WQThiT1QzcUkzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjcyRi8yRkI0OUIzRTQzRDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdG
amZ4S01vVkE4Yk9UM3FJM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAUFqxzUE6PAix32RgjEXt4hzb0GuhO8ZtWwRrbD8saTb1hwHEpXDxk
WlUjgKArWSw7Ta2fxpIfjSCVsi50vySNpRjSdwWzYpVE/6m+160eetgwRVm08RSd
Copj6/oLmaYfYt3NAZCfZbc5yNdGS10imNEfLgpc3sb5utSNSi2XxTLz5hudEG46
O4pRjDu0IiRbpR6lQn+gMxs9HelaUgGZmAF3VO516xvSd2E4ui39FPet+b0HOB19
8sSYgBQqtNV5lbtEqtOnrCLGnmCGw89YCamQN16EhJrfXoDU0E1iZkA4yJ1Ehdlx
gBYFSig2u25UEggL3Sf+6IMSu1mtUgTr
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:28 2025 by rpki-client