This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
File: ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json)
Hash identifier: 97UJAG0QX8gykARJu+JozE9+XeyfCie09BWCxECdHeg=
Subject key identifier: 09:B5:1A:62:72:CC:ED:A1:76:8A:DB:CE:D4:A9:50:86:09:E3:BE:A5
Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2
Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
Certificate serial: 0B64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
Manifest number: 0B54
Signing time: Mon 22 Dec 2025 18:43:20 +0000
Manifest this update: Mon 22 Dec 2025 18:43:19 +0000
Manifest next update: Mon 29 Dec 2025 18:43:19 +0000
Files and hashes: 1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: l7fqynGkQ23RrlBAze2OXMiQDPRCKdipF5uOV5l+Jps=)
2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: 01LuquJzODASdx7lUWZKvuNgawIkxSts2x99z+OLQA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl
rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2916 (0xb64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
Validity
Not Before: Dec 22 18:43:19 2025 GMT
Not After : Dec 29 18:43:19 2025 GMT
Subject: CN=69499147-491b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ab:8c:ef:1f:35:58:9c:4e:67:07:2d:a0:22:
a6:3a:72:d6:76:ea:bc:84:be:3d:8a:dc:09:a4:12:
a2:10:40:1c:30:a2:b6:57:5d:12:a5:a4:7f:60:86:
ce:af:2b:b7:5e:26:69:9b:06:ed:fd:c0:25:1d:37:
e2:64:c7:99:d4:94:e4:ed:50:b5:d7:57:f2:3d:e5:
e8:8e:32:1a:71:db:b6:9d:f0:e1:05:21:18:a9:e2:
71:d2:9c:bf:93:b7:d6:43:95:dc:a3:61:c2:e5:48:
23:e4:2d:63:a1:b6:7b:6f:21:aa:25:1d:08:3f:dd:
1f:61:c0:b5:eb:2f:c9:bc:0c:44:92:f5:d4:07:44:
3c:ec:0e:1a:f3:97:93:36:7b:35:3b:d4:b5:a3:0d:
19:c1:a7:bc:27:a5:be:bf:31:46:3d:83:18:ed:26:
1d:33:77:8c:2a:dd:dd:ad:65:61:67:91:83:54:6c:
d6:0d:a3:2e:8c:1a:a7:d2:e3:81:09:b1:83:a3:21:
11:c5:1c:26:fe:02:31:ab:97:c0:fe:63:8f:46:64:
86:2a:6e:db:de:71:09:a9:0d:93:4e:fb:c0:d7:85:
34:ae:a5:5c:df:15:32:db:34:80:55:57:fe:1b:15:
24:25:c2:27:6b:b2:d7:7c:f3:55:95:0d:11:14:c2:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B5:1A:62:72:CC:ED:A1:76:8A:DB:CE:D4:A9:50:86:09:E3:BE:A5
X509v3 Authority Key Identifier:
keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a4:10:45:e0:5f:6e:a1:18:76:6f:a2:55:01:2e:07:cc:31:
d8:d9:19:32:7a:31:05:08:6c:c9:21:9d:2d:4a:82:c1:ca:14:
05:f4:3d:1e:f6:ef:7c:68:0b:9e:88:c5:0d:65:be:62:55:56:
af:7d:9d:cd:60:67:70:4f:66:2c:7a:f2:71:db:a8:4a:b0:7b:
52:0d:63:b4:43:2c:e7:dc:e4:10:af:51:db:e5:fe:c5:13:86:
db:80:2d:65:d3:75:76:14:fd:3f:25:0b:e8:7f:d9:8f:03:53:
9b:23:9d:f8:c7:ec:f2:c1:05:5b:35:5d:e9:9d:20:fc:f0:6a:
14:2c:a2:73:70:70:cc:b2:f4:86:71:91:da:4e:de:1c:a1:5c:
fe:af:75:ad:50:94:e2:05:da:d2:0b:f8:d2:a6:2f:23:34:d0:
d3:fc:1b:11:99:63:7a:bf:3f:f0:c0:56:cb:ba:2a:07:8e:63:
65:f7:11:5f:6f:4a:cc:fe:e2:b2:c3:48:89:57:b5:d6:42:59:
76:23:f7:7a:a6:ba:25:7c:a5:24:cd:01:e3:22:8b:49:66:43:
db:e3:e4:ab:4c:d3:d6:90:77:c8:a5:7c:0f:60:4b:3f:43:16:
56:af:36:a0:1b:8c:fb:13:af:2d:7b:0f:df:db:42:69:0c:b9:
10:b7:0b:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDAzRUUxMTAvBgNVBAUTKDdBMzgzNUQxQkJFMUIxQjI1QzMxNjkxOTJEMkJEQ0Q3
MTkzQThCQzIwHhcNMjUxMjIyMTg0MzE5WhcNMjUxMjI5MTg0MzE5WjAYMRYwFAYD
VQQDDA02OTQ5OTE0Ny00OTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3auM7x81WJxOZwctoCKmOnLWduq8hL49itwJpBKiEEAcMKK2V10SpaR/YIbO
ryu3XiZpmwbt/cAlHTfiZMeZ1JTk7VC111fyPeXojjIacdu2nfDhBSEYqeJx0py/
k7fWQ5Xco2HC5Ugj5C1jobZ7byGqJR0IP90fYcC16y/JvAxEkvXUB0Q87A4a85eT
Nns1O9S1ow0Zwae8J6W+vzFGPYMY7SYdM3eMKt3drWVhZ5GDVGzWDaMujBqn0uOB
CbGDoyERxRwm/gIxq5fA/mOPRmSGKm7b3nEJqQ2TTvvA14U0rqVc3xUy2zSAVVf+
GxUkJcIna7LXfPNVlQ0RFMLYJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAm1GmJy
zO2hdorbztSpUIYJ476lMB8GA1UdIwQYMBaAFHo4NdG74bGyXDFpGS0r3NcZOovC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNFRS82NzI4MUNGNDQ5
N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNiSmNNV2taTFN2YzF4azZp
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VqZzEwYnZoc2JKY01Xa1pMU3ZjMXhrNmk4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDNFRS82NzI4MUNGNDQ5N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNi
SmNNV2taTFN2YzF4azZpOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB/pBBF4F9uoRh2b6JVAS4HzDHY2RkyejEFCGzJIZ0tSoLByhQF9D0e
9u98aAueiMUNZb5iVVavfZ3NYGdwT2YsevJx26hKsHtSDWO0Qyzn3OQQr1Hb5f7F
E4bbgC1l03V2FP0/JQvof9mPA1ObI534x+zywQVbNV3pnSD88GoULKJzcHDMsvSG
cZHaTt4coVz+r3WtUJTiBdrSC/jSpi8jNNDT/BsRmWN6vz/wwFbLuioHjmNl9xFf
b0rM/uKyw0iJV7XWQll2I/d6prolfKUkzQHjIotJZkPb4+SrTNPWkHfIpXwPYEs/
QxZWrzagG4z7E68tew/f20JpDLkQtwtM
-----END CERTIFICATE-----
Generated at Wed Dec 24 00:32:05 2025 by rpki-client