This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft
File: E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft (raw, json)
Hash identifier: 5vU/1TwwW6smCbIsubjjVOTEXk9ed1a6DvDKrGt9cCg=
Subject key identifier: E5:11:FB:DC:31:1A:2C:B4:C8:BC:AA:DC:3E:BA:FE:15:BB:4A:33:7B
Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C
Certificate issuer: /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C
Certificate serial: 0590
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft
Manifest number: 0587
Signing time: Thu 04 Dec 2025 21:54:48 +0000
Manifest this update: Thu 04 Dec 2025 21:54:47 +0000
Manifest next update: Thu 11 Dec 2025 21:54:47 +0000
Files and hashes: 1: E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl (hash: vdMww+eGokMSV568e+OZj9Xcl9wd+D4YPQjMb2fFP4E=)
2: BBECA326B2FC11F0AB9D691CC4F9AE02.roa (hash: zqgS+zlgehzRdHe7d+oyK8Qe/7J3aamdJc6La9J4rtI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl
rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1424 (0x590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F8B5, serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C
Validity
Not Before: Dec 4 21:54:47 2025 GMT
Not After : Dec 11 21:54:47 2025 GMT
Subject: CN=69320327-03ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:66:b7:27:04:37:20:74:b5:fd:09:5d:92:
ba:6b:d1:93:c9:1a:9c:ae:6a:36:8b:18:44:69:ce:
a5:fa:8f:c1:4c:6a:22:a5:91:84:9a:08:9e:40:02:
e7:3f:6f:42:f6:2b:48:06:6f:e4:af:4c:bb:80:16:
13:76:95:c8:7a:02:f0:85:06:e8:2b:48:af:f0:b7:
6f:c3:03:e5:be:fd:5a:f9:c0:7f:87:72:c7:0d:29:
58:6f:f0:d2:38:64:3b:3b:85:54:b0:39:7d:f6:78:
2a:15:69:e2:f3:72:2a:08:c2:aa:bc:5e:59:aa:71:
21:a9:5a:5a:58:25:54:66:b1:c8:6d:54:71:c9:1b:
66:32:c0:0d:b3:03:e0:2f:18:5d:7b:55:20:ae:b4:
65:15:f0:6d:e4:1d:4f:a6:7f:b0:85:a1:00:07:bc:
e9:16:f5:5b:0c:79:87:dc:b7:10:b9:e7:ae:0b:d0:
78:a4:73:3b:29:43:5f:99:a3:fb:23:4b:33:e3:b3:
10:99:31:bf:57:08:a9:ca:de:61:43:54:ad:61:d7:
e8:70:88:23:f9:17:0a:53:a5:39:65:38:26:21:c5:
25:ab:9b:9a:5b:d5:9c:61:7c:44:68:22:51:9d:90:
4a:50:0b:d0:24:97:aa:92:99:18:66:2d:8f:3f:60:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:11:FB:DC:31:1A:2C:B4:C8:BC:AA:DC:3E:BA:FE:15:BB:4A:33:7B
X509v3 Authority Key Identifier:
keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:2c:95:c9:b7:58:f2:11:f2:b2:5b:42:df:7b:62:f3:83:4c:
e3:3a:12:17:8f:0f:f9:43:7e:ad:db:78:e5:00:33:1b:60:52:
96:2f:58:29:ac:8d:bd:2a:10:bb:f9:d9:04:e0:9f:c2:ae:6d:
83:c9:b4:43:46:11:9a:fb:e8:47:52:71:47:97:93:1a:5e:1d:
68:9f:25:1b:29:d3:07:4d:82:63:15:1e:2a:2f:fe:eb:f2:d1:
4f:83:ef:6c:94:0c:30:91:a3:6d:20:fe:49:df:ba:80:7a:79:
28:2b:c6:ec:0a:67:95:7a:e7:6b:3b:8f:53:8d:ac:d8:d7:43:
8c:94:eb:f8:a5:b6:52:89:69:63:04:ba:91:c4:51:8a:53:4f:
e0:95:9b:93:9e:be:c6:94:2b:c9:04:d4:79:0f:48:7e:7e:08:
49:07:95:74:67:ca:df:ed:14:fc:97:e5:40:fe:6a:7d:29:e9:
14:d7:d6:ad:c1:0a:d7:88:70:7f:e6:b6:f2:3c:3d:1f:af:ea:
13:12:ad:68:a5:d7:9b:69:c7:db:2d:d7:ad:84:ac:31:6c:37:
23:fc:c0:9d:4e:e6:57:5e:b6:90:71:25:d9:17:c3:99:66:ce:
e9:77:f7:31:24:c5:19:58:74:01:bf:3c:32:9a:d2:b2:3a:0c:
0e:6b:3b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:04:23 2025 by rpki-client