This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
File: eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json)
Hash identifier: Ni3KmpKbOZsnDqgtXSj0IMQmdyVU7NOAT+1dJgJswT8=
Subject key identifier: 23:14:6B:D5:0F:C2:D7:6F:25:11:71:88:1F:62:00:C9:71:03:AB:A9
Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
Certificate issuer: /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
Manifest number: E7
Signing time: Sun 25 Jan 2026 04:40:45 +0000
Manifest this update: Sun 25 Jan 2026 04:40:45 +0000
Manifest next update: Sun 01 Feb 2026 04:40:45 +0000
Files and hashes: 1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: dIRccJ5bjHuj7FWrvcTBU8x9g7jJRLllIujQ0tqPIo8=)
2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: AKBTFuYWF0QJYhEYy3kesNey7V4DUjbDl4ck/CpF7wE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Validity
Not Before: Jan 25 04:40:45 2026 GMT
Not After : Feb 1 04:40:45 2026 GMT
Subject: CN=69759ecd-e68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:00:2f:07:58:1a:7a:93:ff:ef:fe:58:91:
20:31:80:e7:b9:4a:c2:4c:35:0c:01:7e:65:e1:a9:
73:98:3b:2c:b8:be:7f:55:9a:7d:a3:90:2e:c3:de:
16:2f:2f:d7:60:a7:92:9a:fb:3b:00:b1:2c:2f:75:
6c:f3:e6:43:52:2f:a3:78:85:70:96:95:23:be:c0:
19:b0:23:fd:de:d0:5e:ca:a4:12:7d:83:55:38:c7:
54:b7:33:0b:60:82:cf:5d:d7:0a:9b:df:f6:8a:07:
f8:09:3e:e8:c1:04:da:5b:16:b1:f6:72:6f:ad:9a:
8c:30:ce:5a:b0:c0:f0:b4:75:18:6d:fa:df:b8:a6:
66:87:24:27:55:ca:b3:d8:51:4d:89:10:f7:77:0a:
53:17:65:72:01:02:16:49:31:8c:9e:fc:bc:a0:bd:
09:f7:59:04:5d:26:67:f4:58:46:16:9d:e3:a5:a0:
7b:02:0f:d1:a4:6b:b0:31:76:7a:5a:81:86:f8:f3:
4f:cf:56:2f:c3:31:51:77:38:83:62:48:72:99:55:
2a:03:54:01:6d:07:a2:aa:51:e5:eb:fd:d5:fc:1f:
f2:ef:c8:e5:e9:99:3e:29:5c:52:60:d0:41:8f:c7:
1e:46:79:84:8d:4c:67:18:51:9f:a2:1f:2e:66:74:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:14:6B:D5:0F:C2:D7:6F:25:11:71:88:1F:62:00:C9:71:03:AB:A9
X509v3 Authority Key Identifier:
keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:a8:fe:75:61:b4:ff:ef:7a:96:ad:80:97:c2:cf:c3:a3:19:
84:c8:d9:33:f3:36:9e:7b:f4:82:1b:66:cb:80:9e:58:93:a7:
61:b0:8b:4a:a9:d1:3d:5c:c6:25:dc:7c:f3:00:f0:d9:c4:9a:
b3:59:c0:1a:aa:84:fa:0b:5b:2b:eb:21:9a:80:f1:cd:92:a8:
86:e2:c5:49:8d:67:14:03:30:5e:c0:14:0e:e4:d1:52:29:a5:
9a:0a:d6:26:20:3b:d6:9d:12:ac:60:df:d3:39:00:fa:14:81:
68:ef:b9:a0:51:a5:e0:3f:18:cf:79:69:49:dc:17:bb:f9:64:
5a:25:f6:94:93:f1:ba:7d:bb:74:b5:0c:30:f4:c8:a3:ee:1e:
fd:dc:d7:1c:2c:4f:ea:9c:d6:41:9c:9b:38:c8:6e:d0:bc:9a:
d3:ff:4f:1a:dc:e9:d1:95:a6:87:88:c5:0c:4e:21:c5:68:73:
25:23:eb:ef:61:a6:ed:1a:62:db:1a:4e:e9:49:81:80:82:6c:
51:ab:f0:29:55:00:4b:96:c6:58:1d:de:21:25:67:03:a4:88:
81:32:21:25:c9:25:f5:a1:04:08:06:7d:cb:f4:53:33:82:f8:
e3:5d:74:05:44:09:66:fc:b6:f6:49:07:b3:72:b4:77:a9:a7:
95:8a:da:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:59:26 2026 by rpki-client