This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
File: EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft (raw, json)
Hash identifier: i/9983pCx52SRA0yvODDXsuWwXSgK5Z4YMxDs3m9OzU=
Subject key identifier: 81:7D:1D:D7:18:15:11:B6:4B:7A:33:FF:3C:67:10:31:6A:9F:C9:CA
Authority key identifier: 11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9
Certificate issuer: /CN=A911A1FC/serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
Manifest number: 017E
Signing time: Sun 07 Dec 2025 02:06:41 +0000
Manifest this update: Sun 07 Dec 2025 02:06:40 +0000
Manifest next update: Sun 14 Dec 2025 02:06:40 +0000
Files and hashes: 1: EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl (hash: gu5DYSq8rJjIrSCY0SxLMqiVM+6Ha+Rhrm3KkaZzj/Q=)
2: 1D5E8EB6887B11EE8981CE28C4F9AE02.roa (hash: 8onb495DsY+6sybfjvn3/yiqLOv+8ormyHYLSFvICB8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl
rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 02:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A1FC, serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
Validity
Not Before: Dec 7 02:06:40 2025 GMT
Not After : Dec 14 02:06:40 2025 GMT
Subject: CN=6934e130-1268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ec:7f:b6:36:f9:81:36:13:98:0a:36:84:75:
16:08:0d:aa:25:6b:5f:d8:34:d0:03:48:05:81:7a:
1b:44:fb:d4:18:5f:55:77:bf:f7:37:cf:b5:8f:52:
9f:9b:08:eb:33:be:8f:4a:1f:3d:b2:bd:db:67:27:
21:3d:91:17:bb:d0:11:51:a7:c9:8a:42:05:d3:eb:
5e:23:1e:a7:dc:e0:45:d8:d3:8f:1b:d1:8d:6a:ac:
1e:f2:73:6a:db:63:c2:2c:bc:7f:19:f3:3c:4f:65:
30:ba:d9:64:a6:c6:64:c0:2f:64:09:4b:d8:f2:2d:
da:ef:b7:b7:58:56:11:42:c2:5b:ec:cb:2d:f3:be:
8d:7c:7e:e2:26:d6:63:bd:1d:37:98:54:b7:3b:22:
7e:63:3f:ba:11:60:67:78:90:76:38:6c:d5:49:4a:
d3:09:51:27:4e:70:16:dc:8c:c6:49:74:39:eb:a2:
5c:85:5a:be:aa:18:b9:30:2f:cc:1d:69:84:c3:35:
fb:d2:b2:e1:63:47:94:32:08:2f:22:9f:11:38:84:
53:21:70:a5:3a:03:5b:44:8d:8d:57:d0:50:6f:77:
fc:6e:08:f8:eb:1a:0a:01:10:71:86:e7:24:9f:bf:
1a:3b:dd:30:b2:63:62:0b:e4:a8:c6:ac:82:1d:78:
dc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7D:1D:D7:18:15:11:B6:4B:7A:33:FF:3C:67:10:31:6A:9F:C9:CA
X509v3 Authority Key Identifier:
keyid:11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9f:a5:5b:dd:54:9f:00:47:32:bf:7a:d7:10:d9:b5:7d:91:
e5:44:11:cd:9a:b4:27:1c:76:ac:7d:a4:90:ef:19:bb:a4:92:
2d:54:eb:a3:76:3a:10:6c:b7:4b:24:c2:c8:9e:72:ac:82:c0:
b2:ba:0c:5f:c2:7f:33:ee:47:fb:f1:1f:f1:dd:0b:a3:df:c7:
7e:2d:a1:de:e3:fb:3f:bc:1e:ec:f0:95:71:7e:e5:68:2c:b7:
cc:98:60:d5:b5:61:d3:1a:c9:32:b9:63:4e:d6:4d:b9:b1:57:
ff:36:ed:df:45:bb:c0:4b:f3:8d:f2:bb:ec:5b:79:46:60:87:
42:59:2c:38:18:2c:19:aa:d0:fd:9d:c3:e9:fa:07:b7:28:f2:
35:8e:0a:cb:63:7d:42:0a:88:a8:01:db:b8:b1:4d:3c:19:72:
30:8b:37:22:57:e7:bb:f5:8c:83:b1:e6:04:c5:38:44:d8:f4:
0f:af:b8:b8:4a:a7:36:51:12:7f:41:f4:0b:c1:3d:9b:92:27:
d7:69:f6:da:92:b4:3e:d0:c8:21:5e:d4:fc:43:9e:97:28:f4:
e7:b9:f3:79:75:fd:d6:6b:d5:fd:6f:b4:38:7a:f1:20:2c:b9:
ae:cf:74:7f:e1:d7:43:bb:62:0b:54:f0:f6:d6:d8:f7:2c:b7:
da:c7:1f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:15:09 2025 by rpki-client