This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
File: eHZtYCpA71cBQmhKcj6KNAxv84I.mft (raw, json)
Hash identifier: ogMKlXdtdbCGx89539ZYP45JzvzVMmqyhXjmWp9eElw=
Subject key identifier: 8E:C3:55:62:07:3A:DC:A8:AA:B6:20:51:41:5C:6B:FF:57:1D:8A:13
Authority key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82
Certificate issuer: /CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382
Certificate serial: 04AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
Manifest number: 04A5
Signing time: Sat 06 Dec 2025 23:07:24 +0000
Manifest this update: Sat 06 Dec 2025 23:07:24 +0000
Manifest next update: Sat 13 Dec 2025 23:07:24 +0000
Files and hashes: 1: eHZtYCpA71cBQmhKcj6KNAxv84I.crl (hash: Vuvf52NgCiJQW4hwRuW+6qi1pNyDzy9q4Nlr6FE2ncY=)
2: 90AE61AC595711EC8761C361C4F9AE02.roa (hash: OAezeEI6RpBOiUJ8ewJfs0Sho5+yDdMl9kVco4ydsjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl
rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1194 (0x4aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A70D, serialNumber=78766D602A40EF570142684A723E8A340C6FF382
Validity
Not Before: Dec 6 23:07:24 2025 GMT
Not After : Dec 13 23:07:24 2025 GMT
Subject: CN=6934b72c-c44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:36:6b:25:43:b1:a2:8b:25:f5:0f:62:7f:
3b:3f:60:9d:90:93:ca:52:81:38:19:4c:a0:47:ec:
18:69:a7:ac:b0:5a:e1:97:3b:c3:31:7e:79:d8:61:
a3:61:9d:f9:ec:d6:8c:58:44:02:c6:74:f1:63:fb:
9b:4a:4a:1b:95:ce:b5:2e:cf:a3:0a:3c:10:33:be:
18:cb:ff:3c:c6:a6:c9:ac:1c:4d:88:fe:d8:2c:a1:
07:2c:75:76:26:9f:61:1c:8c:e9:24:f6:c3:70:fc:
04:8c:21:f2:5a:5a:e6:ce:60:3e:d7:ff:54:08:1a:
66:32:e0:c8:60:f0:8e:59:38:3e:f9:7e:65:f4:c2:
7a:40:05:ce:7b:ce:5d:39:c6:e1:54:d7:c8:f3:97:
89:e1:6e:70:5c:f3:a5:e7:c1:ae:75:03:5d:3c:8c:
ca:74:13:85:c1:32:0f:54:a9:6c:db:65:11:8c:41:
af:c2:2c:aa:87:e6:4a:ea:18:c2:4b:47:ac:ab:26:
af:ab:7b:51:bd:0c:de:e3:59:47:56:a8:0f:0c:8f:
99:3e:94:27:74:fd:46:37:8d:c8:9e:1b:57:2f:fe:
bb:e2:8e:fa:46:c6:ff:a9:83:37:3e:32:b9:99:28:
b1:a2:73:c4:d8:d0:eb:0b:8f:c2:21:24:90:fb:c2:
69:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C3:55:62:07:3A:DC:A8:AA:B6:20:51:41:5C:6B:FF:57:1D:8A:13
X509v3 Authority Key Identifier:
keyid:78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:09:a2:c4:d8:27:c3:ed:3c:d1:54:8e:ee:25:1a:91:78:c7:
4f:6c:1a:36:34:7c:ce:c2:de:d0:4c:b8:17:95:de:09:db:a1:
14:56:3a:ad:40:39:18:e1:c9:33:f3:5d:25:db:10:ea:2b:89:
0d:91:53:80:83:0f:cf:62:28:d9:62:ee:25:76:5d:55:8a:95:
d0:58:08:d1:9c:e8:41:c1:c5:fc:98:6e:41:40:d2:ab:d6:d9:
f9:2a:26:4c:77:7b:e6:32:18:c4:76:da:80:64:6d:bf:0d:cd:
80:46:1a:ec:67:e3:b9:44:84:a5:4d:29:c4:8c:49:04:85:df:
c4:74:23:9c:e3:04:05:32:a8:1b:25:e3:c8:24:0e:0f:b8:6b:
4f:65:f2:70:19:73:b0:f2:96:0f:b9:37:c5:29:a5:95:b5:7d:
2e:d0:2a:c6:af:1f:7b:a4:c5:a9:27:fa:ea:bc:4d:cf:48:cf:
92:cf:ca:c2:96:35:09:22:9c:54:b4:6f:77:47:41:ba:31:0b:
8e:89:f3:6c:68:3b:2e:9a:ff:e5:ed:2f:92:d2:e8:0a:6f:99:
c0:d9:80:de:ed:35:00:ef:9d:5a:d8:2c:4b:af:d4:4e:47:d4:
41:9d:21:58:7e:eb:23:14:9d:fd:37:dd:f3:e7:c1:e1:e0:f7:
4a:14:c7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:58:18 2025 by rpki-client