This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
File: eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft (raw, json)
Hash identifier: NdkRf8nW2DLWDh8+I3B2Qz3wryOsoFeAw1cv9B/k9pw=
Subject key identifier: 2C:70:F9:96:F9:F7:B9:FD:72:05:B7:2D:29:F4:8C:4B:31:70:0D:98
Authority key identifier: 79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
Certificate issuer: /CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
Certificate serial: 01CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
Manifest number: 01C7
Signing time: Fri 05 Dec 2025 01:15:19 +0000
Manifest this update: Fri 05 Dec 2025 01:15:18 +0000
Manifest next update: Fri 12 Dec 2025 01:15:18 +0000
Files and hashes: 1: eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl (hash: qQe6QMR4/P4O2WWkqP9prbxQ4fu+ztiOFxSMZcnnnqE=)
2: C110D9D23D8611EEB7F2D04BC4F9AE02.roa (hash: TxTcbAcufMja4FsqpJQTg2We2RY0eq4FwQMk5GLL3ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl
rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113A27, serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
Validity
Not Before: Dec 5 01:15:18 2025 GMT
Not After : Dec 12 01:15:18 2025 GMT
Subject: CN=69323226-cc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:41:4a:5e:96:fe:6c:01:fe:0f:52:c6:0c:b2:
87:e7:c0:38:e9:ee:33:fe:16:b5:af:7a:54:87:b4:
ed:d6:9c:6b:5b:8d:59:6a:d9:70:d1:e8:ef:1c:fd:
4b:08:b7:6a:9e:4e:da:02:1e:4e:23:3f:69:a7:a6:
58:f4:90:87:f0:7c:4d:7d:3a:d5:5c:8a:21:2d:4b:
22:26:a6:77:ae:2e:9b:8a:c1:be:07:91:bb:c1:a1:
10:b3:3d:89:f4:9c:40:f7:01:1f:d7:d2:8c:9b:c1:
e0:e1:76:47:83:2c:09:2a:2f:3b:3b:d7:e0:46:d1:
ab:46:4a:3d:fd:27:45:44:f1:92:0e:ae:09:be:7d:
3e:30:53:4c:66:86:57:e2:20:28:b9:02:66:8a:19:
92:14:e8:fa:3c:a9:18:56:c9:5b:9a:8b:a9:c1:10:
7c:23:98:17:ed:34:03:9e:9b:15:d2:2a:35:0b:c0:
bb:bc:8f:70:eb:c5:7e:f5:21:40:c9:59:5e:a6:7c:
fd:a1:13:29:e8:1a:c9:95:d6:31:79:28:12:4e:1f:
7a:7d:c7:31:f7:9e:69:11:03:99:e6:d4:80:39:75:
eb:08:29:7f:a7:09:0c:09:a9:e9:e4:8d:cb:11:f5:
21:f0:54:35:ca:03:b4:83:73:19:4e:39:93:72:fa:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:70:F9:96:F9:F7:B9:FD:72:05:B7:2D:29:F4:8C:4B:31:70:0D:98
X509v3 Authority Key Identifier:
keyid:79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:27:86:e9:d3:5f:a8:2a:32:b6:1c:13:bd:3f:d1:1d:12:00:
49:9c:7b:81:7d:49:a7:c9:b3:3f:24:67:39:c5:76:b6:1e:7a:
ce:67:f0:77:11:b1:0a:7e:ec:32:43:be:df:56:06:1e:e4:cb:
c1:49:7b:04:35:77:45:86:98:71:91:24:69:90:0b:cf:a6:34:
b3:d1:55:f8:e9:1a:58:13:3e:be:a2:44:4f:0e:19:f6:ca:ef:
c4:fc:7d:17:5a:d2:32:16:c4:a4:6a:46:bf:0e:f7:bc:a2:60:
d5:94:eb:63:29:99:1c:48:ea:1b:c9:b3:a9:24:79:48:69:0d:
07:2b:7c:c5:bd:49:9a:05:ec:78:9c:c6:89:f2:f0:df:45:5f:
e9:c8:64:2f:73:c9:65:dd:99:cc:35:e9:cf:45:15:ae:0e:3c:
f8:e6:44:35:fb:69:63:4c:b9:44:7c:fb:65:39:e4:73:bc:3d:
a9:06:8a:df:09:97:10:b9:0a:62:45:7f:3b:6e:c1:71:fc:c0:
1d:21:d4:a5:f5:c6:65:c8:d6:10:45:3c:c1:62:33:ea:d6:c3:
9b:61:92:13:fa:a7:6c:d4:e5:d1:bd:c7:75:fe:b1:d8:eb:24:
33:54:88:55:6b:60:3f:ca:60:9d:7e:0a:6d:68:a7:04:9a:a9:
9c:da:15:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:20:09 2025 by rpki-client