This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
File: mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft (raw, json)
Hash identifier: SvvMn6bivPQm9XbXIh+fJ0vKI7qudeI7XILuO86TKyQ=
Subject key identifier: 73:AC:D4:E3:39:7E:64:12:47:87:6B:D7:B6:3D:3B:69:3C:59:F9:18
Authority key identifier: 98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19
Certificate issuer: /CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19
Certificate serial: 0213
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
Manifest number: 020F
Signing time: Fri 05 Dec 2025 00:36:25 +0000
Manifest this update: Fri 05 Dec 2025 00:36:25 +0000
Manifest next update: Fri 12 Dec 2025 00:36:25 +0000
Files and hashes: 1: mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl (hash: kXoDgL6Wr2otKeqXIsqAp1CnaPn5hVY6MkMLNQauc9w=)
2: EE4D73F2AE5611EDA021E516C4F9AE02.roa (hash: rHhV9X+494LZVhsBFnMPP35cu2Qc4CF3Pf3vW78mDqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl
rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:36:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145E67, serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19
Validity
Not Before: Dec 5 00:36:25 2025 GMT
Not After : Dec 12 00:36:25 2025 GMT
Subject: CN=69322909-a6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:58:fc:b0:25:29:15:13:e2:dd:f5:b2:86:74:
fd:99:63:7b:7a:9c:fd:c1:90:dd:55:0e:ce:8c:cd:
4a:18:14:62:76:21:5b:9e:5b:63:b7:54:f4:8c:91:
9f:ff:50:1a:98:91:18:c7:0d:6e:f5:11:ec:14:16:
64:6d:bf:38:c4:0f:0a:70:8b:99:07:56:d1:a9:61:
1d:ec:28:26:9e:c4:44:fe:8e:9b:a1:af:2e:65:26:
d2:5e:27:b0:8c:66:19:f0:97:db:7e:62:0a:4f:25:
c9:19:01:b6:1a:2a:b0:ba:62:f9:e6:4a:13:d1:db:
48:1e:dc:e3:bf:3d:64:76:b5:f2:f9:be:05:93:79:
56:4e:31:ae:84:a5:05:c3:aa:20:00:c5:96:cc:3d:
f9:a0:8f:fa:2c:8b:42:28:f1:02:8e:07:7d:c9:05:
09:30:15:f7:de:4e:ce:f4:e2:6c:76:b9:0b:71:48:
48:0e:07:ce:df:d4:a2:ad:82:d0:33:b4:d7:57:e8:
3c:3c:46:6d:3f:c4:63:7a:c6:96:b5:eb:2f:e8:bc:
3a:f8:7f:88:4c:2d:19:10:ed:d2:ce:f4:c9:d6:c6:
78:6e:bd:34:c8:ed:d7:4a:d3:e9:2d:bd:32:79:8a:
1e:02:e1:44:35:a9:3e:39:63:28:e2:2f:88:38:d0:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AC:D4:E3:39:7E:64:12:47:87:6B:D7:B6:3D:3B:69:3C:59:F9:18
X509v3 Authority Key Identifier:
keyid:98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:1e:1b:76:b3:06:ac:15:09:14:04:ae:3a:be:0f:19:fc:35:
b9:4b:3a:c7:51:14:6e:6b:9d:1c:bc:81:42:09:98:59:94:c8:
cd:7e:72:1f:36:55:9e:93:6f:de:71:17:33:a7:9f:3b:71:91:
3b:18:59:17:0f:d7:5f:c4:a5:82:3f:1f:79:51:bd:26:36:e2:
e9:e6:9f:c6:5d:7f:0b:04:43:e1:70:7e:fc:87:93:b3:41:c5:
62:bd:6d:bc:cc:c9:44:d1:fe:fc:49:a0:68:33:cb:71:be:19:
5a:a3:d3:11:bd:19:dd:85:a2:dc:69:48:ba:e5:6b:11:6b:33:
79:f2:eb:54:86:ed:72:7b:8c:32:bd:ab:8c:03:20:21:c7:7f:
4f:e5:30:13:61:ab:f9:98:01:aa:6d:9c:36:00:9e:75:d0:83:
97:d6:27:23:1d:04:a2:63:09:17:05:33:70:ae:13:12:76:ee:
a5:ce:95:cb:95:af:58:0d:cf:fb:9f:99:57:72:13:92:59:4e:
f0:ce:7f:88:a9:f7:6a:12:93:15:c4:4e:9b:93:08:75:88:25:
0d:af:ce:12:e6:c6:39:62:7a:ed:cd:24:c9:51:38:77:ff:88:
05:fc:02:9a:1c:31:fa:19:7b:92:b6:33:12:7f:35:e5:e3:45:
8a:89:3c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:02 2025 by rpki-client