This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
File: eZj15wgWto199ez2dy57XKI634M.mft (raw, json)
Hash identifier: bt+SYqhbHRa0IpUwptyDf2F0IdoZ+LTSysscd0/J9vg=
Subject key identifier: B5:47:B1:DC:02:F1:A9:1A:B3:0E:EF:74:21:FA:8E:53:1B:99:4C:74
Authority key identifier: 79:98:F5:E7:08:16:B6:8D:7D:F5:EC:F6:77:2E:7B:5C:A2:3A:DF:83
Certificate issuer: /CN=A9127C10/serialNumber=7998F5E70816B68D7DF5ECF6772E7B5CA23ADF83
Certificate serial: 0183
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eZj15wgWto199ez2dy57XKI634M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
Manifest number: 017F
Signing time: Fri 05 Dec 2025 01:53:57 +0000
Manifest this update: Fri 05 Dec 2025 01:53:56 +0000
Manifest next update: Fri 12 Dec 2025 01:53:56 +0000
Files and hashes: 1: eZj15wgWto199ez2dy57XKI634M.crl (hash: FVJp9ONBlMvcsT05HButDz5+nQlwmtKXbox6hrUnTMA=)
2: 5D1B0906890E11EE90BBB457C4F9AE02.roa (hash: 2IfO0tpd6nP0EzE4lLUKFL+xnPcYShRu8sAR7M9jaXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.crl
rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eZj15wgWto199ez2dy57XKI634M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127C10, serialNumber=7998F5E70816B68D7DF5ECF6772E7B5CA23ADF83
Validity
Not Before: Dec 5 01:53:56 2025 GMT
Not After : Dec 12 01:53:56 2025 GMT
Subject: CN=69323b35-93e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6d:db:00:4f:5b:73:2d:5e:97:5a:9e:fa:ce:
32:c2:07:a6:62:c6:9b:20:c8:fd:61:f1:a7:e9:f4:
40:23:c0:5e:8e:d1:87:c2:25:d2:1d:47:1e:88:03:
97:19:ce:78:de:2a:3a:09:80:32:46:e1:12:28:ce:
9b:99:04:4f:1b:b9:c3:39:08:97:aa:7f:32:66:6f:
c6:a6:ed:bb:48:59:55:a8:5d:74:58:d7:46:96:ef:
b6:1f:76:4c:6f:5e:20:36:3b:ab:25:0a:a1:d9:fb:
9f:f0:31:53:d0:87:3b:ab:47:c1:c2:84:b6:40:15:
64:63:74:41:85:75:5b:29:5d:dc:6e:ae:f9:8d:24:
4f:73:48:c3:bb:9c:7e:9b:75:94:d2:99:0a:3a:a3:
e1:6d:3e:ba:4d:bd:aa:49:d7:ac:4d:ce:70:04:4c:
a1:c7:cd:78:cd:07:de:d0:8b:1f:7d:be:25:38:86:
3e:d5:3b:38:f4:71:d1:de:14:12:90:12:f6:a6:b3:
25:08:29:f6:be:43:2d:29:40:42:79:83:56:04:24:
cc:d7:d6:54:40:82:75:8c:da:8e:b1:72:d1:f0:dc:
2a:89:e1:58:55:52:8b:f2:be:c9:7e:1d:23:cc:6b:
a9:23:ac:44:ae:a9:af:4b:32:83:fb:1c:8d:95:5a:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:47:B1:DC:02:F1:A9:1A:B3:0E:EF:74:21:FA:8E:53:1B:99:4C:74
X509v3 Authority Key Identifier:
keyid:79:98:F5:E7:08:16:B6:8D:7D:F5:EC:F6:77:2E:7B:5C:A2:3A:DF:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eZj15wgWto199ez2dy57XKI634M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a4:a2:a7:b4:1e:bc:a6:28:7b:aa:0e:85:47:b8:3e:dc:c8:
4a:51:b2:91:93:53:bc:f6:9c:98:c6:01:34:08:d0:b5:b1:b9:
d5:68:00:d7:ea:c8:a5:42:31:81:70:21:c3:17:18:44:d5:d2:
34:9d:02:1b:c4:dc:e8:1d:cc:32:49:6f:71:94:86:ea:9a:c6:
99:cc:e9:a1:82:f0:8a:f9:12:01:13:21:9e:97:ed:fa:99:ba:
4d:73:41:03:02:de:eb:df:5f:26:91:e7:7b:cd:80:c0:d2:66:
e0:40:7d:23:a2:70:3f:85:a7:47:ec:15:8a:93:b7:de:1d:2a:
6b:5c:a7:ab:88:1d:bd:84:ef:f8:c8:4b:af:c0:44:67:94:10:
94:38:39:b2:1b:b1:6e:dc:3e:9b:46:46:39:86:7d:bd:95:21:
87:cd:27:a3:e0:a3:b4:d9:b8:ad:91:4b:e9:cd:a5:a9:83:98:
c7:8b:af:c9:03:6a:e9:e1:cf:b0:bd:bf:de:57:6f:aa:f6:bc:
71:bb:2d:dc:d0:4e:ca:af:5b:ad:de:58:8b:c4:d5:d2:3b:39:
c5:08:2c:d8:be:c3:07:38:0c:95:a7:a5:75:02:85:14:47:60:
40:18:0b:77:6d:35:19:88:16:a6:20:d8:39:38:00:77:d4:8a:
0e:ff:ae:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:53:49 2025 by rpki-client