This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft
File: eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft (raw, json)
Hash identifier: VFvrMmkakpyc7nFKrjYgdEe3SpacIHk/s00wDms8F5s=
Subject key identifier: 57:3C:69:E2:6D:5D:CB:13:DA:BE:C8:82:CA:6A:2A:00:45:B3:7A:0D
Authority key identifier: 79:2C:45:66:B9:B0:25:8A:B1:65:53:82:2F:19:DF:FE:84:A2:DC:B8
Certificate issuer: /CN=A9136359/serialNumber=792C4566B9B0258AB16553822F19DFFE84A2DCB8
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft
Manifest number: 19
Signing time: Fri 05 Dec 2025 05:39:44 +0000
Manifest this update: Fri 05 Dec 2025 05:39:43 +0000
Manifest next update: Fri 12 Dec 2025 05:39:43 +0000
Files and hashes: 1: eSxFZrmwJYqxZVOCLxnf_oSi3Lg.crl (hash: KAENyD44OOG+ZZN2wozCjRk7JFTyD7n2cuXqiVxT5D4=)
2: 698A914EAE2711F096416455C4F9AE02.roa (hash: 7Jh4bbECd/hNw4i818yA2WJfwAYJwUXesvOfcYZ46i8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.crl
rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136359, serialNumber=792C4566B9B0258AB16553822F19DFFE84A2DCB8
Validity
Not Before: Dec 5 05:39:43 2025 GMT
Not After : Dec 12 05:39:43 2025 GMT
Subject: CN=69327020-443d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b7:74:5e:55:cd:7b:3c:25:ad:ae:1a:f3:95:
ee:27:de:f4:a6:80:02:a0:26:74:77:04:d8:62:35:
24:06:9a:83:1d:d9:bb:e2:cc:67:48:64:f1:71:d4:
43:15:97:63:57:9f:e3:94:60:87:51:e5:13:48:5e:
d4:cf:cd:86:20:4b:c6:3d:ec:c4:db:b3:26:0b:31:
a8:3c:ce:45:66:11:1e:43:18:a0:60:dd:4e:ac:c1:
f4:da:6b:d5:da:d0:cb:a2:68:4e:92:f2:59:ad:ea:
df:c2:ee:a8:c7:6b:99:f1:d6:a5:78:02:68:d3:96:
10:53:3c:11:82:a1:5a:15:58:5e:b1:2a:9c:bb:98:
1d:ef:16:97:5f:40:93:42:ec:ea:76:7c:5c:a1:ca:
ca:e7:ff:4b:cd:3d:63:1b:63:65:9c:0c:f6:b6:45:
79:f8:82:03:d0:e7:5e:15:36:2f:e4:b6:2e:2c:e6:
71:88:f5:6f:1d:54:a7:06:7f:6d:aa:9e:12:3a:9c:
dc:9c:a9:eb:b1:f3:43:6c:57:82:ed:a5:6e:17:44:
fa:b0:1d:cd:b5:c7:b4:ee:19:52:1c:c9:9b:d3:7d:
f0:da:9f:2c:5b:af:cc:93:6c:c8:40:4f:e3:d2:5b:
9a:35:e5:6d:08:8f:dd:b0:e8:66:d1:27:ff:7d:70:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3C:69:E2:6D:5D:CB:13:DA:BE:C8:82:CA:6A:2A:00:45:B3:7A:0D
X509v3 Authority Key Identifier:
keyid:79:2C:45:66:B9:B0:25:8A:B1:65:53:82:2F:19:DF:FE:84:A2:DC:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:ed:ca:69:18:76:14:99:f1:12:46:e2:cb:58:c5:94:61:7c:
3c:04:d6:11:47:df:89:2d:08:9a:0e:53:fd:17:a7:48:aa:88:
80:7f:e2:76:4e:56:b0:c8:3d:45:19:a1:9a:e9:54:d9:c3:3e:
82:63:a2:5d:71:2e:97:0a:5a:59:4c:0f:f1:b8:85:50:4f:c5:
3f:57:0f:8c:ff:1f:20:b7:26:fb:da:25:ba:24:97:bd:e6:45:
07:71:e5:db:f2:31:0c:0f:6a:cc:4b:3f:0d:fa:d7:53:3c:eb:
93:6e:b8:96:9d:c2:c3:42:ea:15:11:17:11:e8:da:57:f5:48:
70:f8:95:68:9f:38:73:9a:f8:65:46:fb:16:d5:81:d2:72:32:
93:5a:4b:99:85:3a:53:db:c9:b9:f4:7b:db:fc:00:57:67:55:
31:db:6b:80:04:f2:fc:c8:0b:92:f9:c1:40:29:6e:3c:60:b1:
86:bd:ed:f2:90:3d:5b:69:8c:ca:6c:c6:b7:6f:62:08:f0:d9:
dd:a2:a2:e3:19:55:a4:1c:38:fc:94:54:9c:3b:b3:d2:95:fb:
85:af:f2:41:2e:f5:db:cf:ab:44:07:bc:89:ee:d4:bb:67:c2:
35:3e:0d:78:3d:60:89:1c:29:d1:a2:f1:a4:1c:94:ea:04:ed:
a2:0b:40:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:46:10 2025 by rpki-client