This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
File: eiygmoVxKbGAQoJJIxJDPat15sI.mft (raw, json)
Hash identifier: GegZlGdj+uyoJFYIyucagPZ/FptRWmluRSaS9XSfkB4=
Subject key identifier: AA:4A:51:CA:19:87:42:8B:9C:F5:BF:B7:85:46:7C:B7:E4:44:A1:4D
Authority key identifier: 7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2
Certificate issuer: /CN=A9112571/serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
Certificate serial: 024A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
Manifest number: 0243
Signing time: Sun 07 Dec 2025 00:21:50 +0000
Manifest this update: Sun 07 Dec 2025 00:21:50 +0000
Manifest next update: Sun 14 Dec 2025 00:21:50 +0000
Files and hashes: 1: eiygmoVxKbGAQoJJIxJDPat15sI.crl (hash: DSZR9+1NUlbofYZRwsD+da9f8y2x452IKNrpIwM+UC0=)
2: ECDFCD86656711EDBED7F511C4F9AE02.roa (hash: 8GAnqF7qkvBcRLnOyvdfMkTZTaujvV44HcYbxiEDYyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl
rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112571, serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
Validity
Not Before: Dec 7 00:21:50 2025 GMT
Not After : Dec 14 00:21:50 2025 GMT
Subject: CN=6934c89e-6c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:7d:92:7a:4a:bd:98:75:05:58:23:64:58:
74:a5:93:c2:0e:5f:98:18:96:d8:b2:6e:ec:f2:ec:
f1:07:cb:6b:43:d1:1e:e5:99:30:e8:f1:04:96:55:
ec:86:39:29:89:11:11:e8:f3:2c:fd:e0:51:fc:ad:
f4:c2:32:ee:85:b3:a7:7b:bd:23:51:77:1f:47:8f:
a5:3a:ab:46:d1:32:5f:e8:55:5d:70:db:f7:12:14:
46:af:7e:18:2a:ca:da:4a:93:dc:72:58:ee:55:f5:
a5:80:4e:94:ff:f6:b5:7d:26:e6:b8:af:2e:87:22:
d7:16:bd:a7:72:4b:be:f5:b1:cb:7a:d7:78:35:20:
05:be:4f:23:55:6a:4a:07:18:4f:37:8e:8b:78:f9:
b4:e1:ac:06:60:f8:10:50:a3:f4:cc:43:7b:95:27:
5a:f8:a0:ef:49:2c:ab:6b:9f:68:0c:6d:80:fb:11:
6c:8c:ee:54:f7:bd:bf:15:f2:30:eb:5c:92:a5:b4:
bf:0a:5a:7d:f5:1a:1d:44:bb:6e:a8:d4:cb:4e:b2:
da:fc:f3:b0:92:98:87:df:7c:55:7c:63:a5:ac:3a:
4e:06:0d:f3:a2:93:1c:46:78:c5:ec:6e:42:d1:1b:
53:83:40:1f:55:b5:4d:f7:b1:aa:16:49:84:2a:40:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4A:51:CA:19:87:42:8B:9C:F5:BF:B7:85:46:7C:B7:E4:44:A1:4D
X509v3 Authority Key Identifier:
keyid:7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:f6:cb:47:29:0a:76:fd:5f:60:db:a4:f0:2b:cf:d3:28:70:
5f:71:09:ff:fa:88:d0:a6:b0:50:99:13:a5:98:e7:f5:1f:18:
0e:ea:93:06:e1:2c:e1:36:25:64:a1:b6:e0:4d:50:4e:84:2a:
82:9d:d7:10:8d:45:b5:c4:4c:ab:de:9a:1d:f1:2d:12:b8:32:
86:6e:f2:d9:3f:12:35:dd:65:b1:e0:bb:da:a7:7e:1c:21:54:
86:9b:b9:f2:5b:a9:e4:14:27:30:f4:6b:11:bc:85:70:76:f4:
be:e4:c6:c3:1f:8e:75:d1:df:81:e7:86:70:11:8e:c1:78:ad:
d1:6e:74:3d:c0:6a:bc:75:74:46:8a:d2:e1:79:d2:bf:2c:bc:
fa:bf:7c:a9:89:24:7c:96:71:04:e7:dc:37:9a:25:0c:8e:de:
14:f9:d3:78:f9:a2:74:e9:17:a0:1c:66:8f:89:57:6c:3c:c2:
cf:26:5e:98:24:ac:65:0d:5e:24:af:2a:4d:5f:46:8c:47:15:
47:0b:8a:a5:db:88:f8:13:e4:b5:2b:d6:7e:3b:9b:13:77:2c:
7f:a1:31:0e:a0:09:d9:b2:5c:01:ca:1f:53:16:08:eb:c4:4f:
16:32:5f:14:2a:5b:54:db:fa:4e:ed:61:88:04:60:52:d3:23:
c5:83:8a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 18:29:25 2025 by rpki-client