This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json)
Hash identifier: 6/JDulgdLqk9/DkhevXUd3O37ECwvqlF7T+1plmOEjA=
Subject key identifier: 66:70:D4:E0:67:D5:2B:C1:63:27:EE:D1:C6:81:5B:11:9C:9B:25:7C
Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
Manifest number: BF
Signing time: Fri 05 Dec 2025 04:01:49 +0000
Manifest this update: Fri 05 Dec 2025 04:01:49 +0000
Manifest next update: Fri 12 Dec 2025 04:01:49 +0000
Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: oiJxAEwXOLZ8uc2XX03eoXN6o5GuUTI/zNKpX3TV5Iw=)
2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: OH16X8GEk+h/u670xpKDKmtIszx6M9DvNarlNlVqoko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Validity
Not Before: Dec 5 04:01:49 2025 GMT
Not After : Dec 12 04:01:49 2025 GMT
Subject: CN=6932592d-b161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:dc:54:c1:74:7f:35:da:f0:0b:f5:73:02:
32:3a:9d:6f:10:b0:63:e2:83:61:ee:86:d2:3d:49:
ac:a8:8e:b3:7e:ee:51:41:0f:13:32:9c:40:99:1c:
5c:e9:06:bf:8b:87:72:1c:38:39:99:60:c3:ae:bb:
41:3c:55:a3:b1:de:61:2e:16:da:73:af:da:fe:8f:
76:a8:a0:6e:ac:34:03:e7:bc:dc:d8:ab:07:5d:70:
cc:fe:5d:18:9f:3a:cd:8b:0a:b9:6d:a7:44:6b:17:
5e:ca:2a:ac:68:81:d6:f3:bc:39:ac:b1:40:34:07:
6b:10:ca:17:91:7b:18:ef:72:1a:14:65:e2:fc:31:
ae:69:37:42:7c:9a:26:82:7b:17:1d:b5:e0:b5:74:
9b:85:e8:47:59:de:0c:18:57:de:cc:12:d6:97:59:
5d:d3:10:f5:6b:ee:09:6f:b6:dd:29:b6:bc:a1:10:
39:02:59:b4:73:58:74:ae:ef:76:ea:fe:af:5b:6c:
31:08:d9:ea:7d:b8:5a:18:61:0b:36:3c:0f:6f:1b:
08:34:00:e0:e0:73:a9:6f:e8:85:c9:37:44:e9:81:
0b:c6:07:fb:bc:f2:6f:9e:9f:af:ea:d9:19:97:fb:
8e:77:5d:60:33:47:44:87:05:c9:3e:37:c7:f8:6f:
a8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:70:D4:E0:67:D5:2B:C1:63:27:EE:D1:C6:81:5B:11:9C:9B:25:7C
X509v3 Authority Key Identifier:
keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:e0:4e:d5:6f:78:09:40:2f:ce:2c:03:2a:17:3c:90:ab:44:
ad:ce:be:df:fc:5d:04:97:1c:90:de:91:2b:40:c5:1f:0a:5b:
93:17:36:92:f4:a5:28:84:05:19:24:8c:b5:33:47:88:48:5b:
e2:a8:b9:21:5f:d3:f6:26:48:d2:d6:d3:3b:52:9f:8f:93:55:
c2:ad:f4:ad:66:06:a1:70:6d:f1:1b:a2:70:a5:96:26:16:aa:
f2:3b:bc:6e:43:88:84:ef:62:3c:40:da:fc:b6:f7:4d:06:27:
58:60:4a:1f:83:9f:58:45:6e:e0:68:dc:32:28:a2:5e:4b:7e:
b6:fe:d9:c2:34:7b:31:9d:7e:5f:e7:7d:77:10:d5:d4:16:02:
3d:6a:0c:e7:8e:da:82:6b:ea:87:ac:70:85:1b:c1:7c:34:66:
6a:ae:96:f8:bb:b2:76:31:fc:17:3e:c6:02:00:16:17:ac:a6:
af:78:bb:c3:f9:1e:af:52:06:66:21:bc:8f:9f:83:9d:a1:f4:
79:be:a7:cb:24:0f:2d:5d:6c:74:2d:61:30:02:09:54:11:fc:
34:63:80:ef:62:2d:b1:50:0f:9e:bb:30:de:f2:40:b3:55:68:
23:77:f8:e2:69:93:d6:6a:2a:1c:8b:f2:e0:1e:44:96:07:6a:
37:3e:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:29:34 2025 by rpki-client