This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
File: EZQLtYNEqix5xJU51t-RUZbv6CY.mft (raw, json)
Hash identifier: dI/dKovEjevSFBGo8ihSmaVvOcrsjADdtdBFjQX8EYs=
Subject key identifier: 4D:E8:6F:36:CA:DA:87:15:68:59:B3:F0:F6:D2:B2:DE:E6:EC:E9:91
Authority key identifier: 11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26
Certificate issuer: /CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
Certificate serial: 082C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
Manifest number: 0825
Signing time: Sat 24 Jan 2026 14:42:47 +0000
Manifest this update: Sat 24 Jan 2026 14:42:47 +0000
Manifest next update: Sat 31 Jan 2026 14:42:47 +0000
Files and hashes: 1: EZQLtYNEqix5xJU51t-RUZbv6CY.crl (hash: VKteyddyNe52hJcyCIwknyJ17zQZLXZae2sJW8rrAkY=)
2: 5DE12890180311EBA311E181C4F9AE02.roa (hash: 26p3NboETp7Nj+Pkns8h4o9kiHbewrSxU2XrnHDgX4E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl
rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2092 (0x82c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B600, serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
Validity
Not Before: Jan 24 14:42:47 2026 GMT
Not After : Jan 31 14:42:47 2026 GMT
Subject: CN=6974da67-c4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b8:59:70:2f:8c:fb:7f:42:76:e8:b3:69:ab:
17:bc:07:8f:5e:5f:df:42:66:5d:3e:a8:17:fa:61:
d8:0e:c1:4b:16:f4:cc:e4:28:28:03:5a:68:01:79:
ec:dc:8d:76:da:b9:51:4f:82:72:af:8f:a6:24:69:
c8:21:70:7f:6f:93:fa:71:1a:d8:8c:5f:1b:16:cf:
2e:61:5a:3b:f8:bf:25:1c:aa:1a:a4:53:7f:98:f9:
f6:e7:56:f8:6a:9f:65:cb:52:31:37:e9:8f:7c:d9:
f0:0c:24:2b:4d:41:a9:83:dd:71:88:8a:3f:34:c8:
93:17:59:05:64:05:9c:14:25:0a:47:b1:24:3c:d9:
e4:5b:13:d2:08:ad:f6:b4:38:85:86:ab:94:f5:45:
8d:7b:50:78:99:7e:9e:3f:4b:17:c9:e3:62:73:77:
d7:88:b4:86:95:cf:38:19:8f:36:47:7e:5f:0d:9a:
7c:87:34:b4:45:d4:03:72:97:a7:59:5b:3c:8e:d2:
e0:dd:3a:8a:dd:3f:3c:1b:15:08:46:b8:80:66:2f:
df:ff:9d:a0:f4:f1:f8:88:65:6c:6f:3e:99:7d:a0:
6d:16:4b:e7:dd:96:8f:9a:e6:b4:1d:4d:84:df:61:
18:59:7e:42:2e:8c:e3:83:de:a7:73:8f:4d:25:40:
2d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E8:6F:36:CA:DA:87:15:68:59:B3:F0:F6:D2:B2:DE:E6:EC:E9:91
X509v3 Authority Key Identifier:
keyid:11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:27:68:b4:1b:ce:a4:ec:87:97:23:33:a8:ff:05:57:62:b1:
51:d0:cb:86:8e:0c:6f:6f:de:22:83:66:78:3f:49:24:b2:97:
06:57:79:97:4e:4a:57:01:64:0d:6e:83:3e:3b:15:95:ec:25:
84:0f:2d:0d:ed:c2:65:c6:7c:67:11:12:c7:7b:41:d5:0d:70:
3d:f5:cb:41:b8:7f:c4:7f:40:1d:13:8e:55:d9:04:2c:6c:2e:
85:e0:bd:34:1f:17:12:d6:99:e4:f2:9d:f2:e2:65:cc:31:7f:
5b:ac:54:4f:de:5a:1c:36:10:a3:ae:37:96:f9:9a:2d:9f:b8:
43:c5:0d:2b:fa:d6:67:fb:db:92:6c:7a:b0:54:e2:b3:c7:ef:
17:62:dd:13:9a:94:da:29:1a:5c:77:64:11:84:0a:97:4b:c0:
c2:25:87:13:07:f8:6d:f7:dc:ce:ea:66:5d:e1:47:9a:43:bf:
f5:bc:7d:cf:d7:60:dd:de:10:db:2a:0e:1d:23:10:d0:11:7d:
ab:ab:d0:2a:8a:4e:71:df:59:24:10:72:e7:54:d4:48:39:37:
ca:aa:99:04:fb:9b:d3:15:0b:45:f5:9b:3d:df:54:44:0b:7f:
4c:47:20:81:48:8e:60:09:bf:1e:76:e0:b2:cd:6e:91:a5:e4:
3e:72:35:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI2MDAxMTAvBgNVBAUTKDExOTQwQkI1ODM0NEFBMkM3OUM0OTUzOUQ2REY5MTUx
OTZFRkU4MjYwHhcNMjYwMTI0MTQ0MjQ3WhcNMjYwMTMxMTQ0MjQ3WjAYMRYwFAYD
VQQDDA02OTc0ZGE2Ny1jNGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7bhZcC+M+39CduizaasXvAePXl/fQmZdPqgX+mHYDsFLFvTM5CgoA1poAXns
3I122rlRT4Jyr4+mJGnIIXB/b5P6cRrYjF8bFs8uYVo7+L8lHKoapFN/mPn251b4
ap9ly1IxN+mPfNnwDCQrTUGpg91xiIo/NMiTF1kFZAWcFCUKR7EkPNnkWxPSCK32
tDiFhquU9UWNe1B4mX6eP0sXyeNic3fXiLSGlc84GY82R35fDZp8hzS0RdQDcpen
WVs8jtLg3TqK3T88GxUIRriAZi/f/52g9PH4iGVsbz6ZfaBtFkvn3ZaPmua0HU2E
32EYWX5CLozjg96nc49NJUAtBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3obzbK
2ocVaFmz8PbSst7m7OmRMB8GA1UdIwQYMBaAFBGUC7WDRKosecSVOdbfkVGW7+gm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9DMEI1NzQyMjA5
NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFpeDV4SlU1MXQtUlVaYnY2
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VaUUx0WU5FcWl4NXhKVTUxdC1SVVpidjZDWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjYwMC9DMEI1NzQyMjA5NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFp
eDV4SlU1MXQtUlVaYnY2Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBsJ2i0G86k7IeXIzOo/wVXYrFR0MuGjgxvb94ig2Z4P0kkspcGV3mX
TkpXAWQNboM+OxWV7CWEDy0N7cJlxnxnERLHe0HVDXA99ctBuH/Ef0AdE45V2QQs
bC6F4L00HxcS1pnk8p3y4mXMMX9brFRP3locNhCjrjeW+Zotn7hDxQ0r+tZn+9uS
bHqwVOKzx+8XYt0TmpTaKRpcd2QRhAqXS8DCJYcTB/ht99zO6mZd4UeaQ7/1vH3P
12Dd3hDbKg4dIxDQEX2rq9Aqik5x31kkEHLnVNRIOTfKqpkE+5vTFQtF9Zs931RE
C39MRyCBSI5gCb8eduCyzW6RpeQ+cjUB
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:33 2026 by rpki-client