This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
File: eOQpC8zJmRWAsnbcDCyXv7CGINg.mft (raw, json)
Hash identifier: X5y+W9SsgXXVjitn9YZaWf2TgQG1+ojvf6kXapGOskA=
Subject key identifier: D2:CC:96:EA:72:5D:9E:89:AD:08:66:A3:F0:9F:FF:DC:42:E1:D0:92
Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8
Certificate issuer: /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8
Certificate serial: 01B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
Manifest number: 01AF
Signing time: Sun 21 Dec 2025 02:26:24 +0000
Manifest this update: Sun 21 Dec 2025 02:26:23 +0000
Manifest next update: Sun 28 Dec 2025 02:26:23 +0000
Files and hashes: 1: eOQpC8zJmRWAsnbcDCyXv7CGINg.crl (hash: LLXo7+FV4ZmlLWsWGUJhATOpkuGc2GRmvLAXsKtWly8=)
2: 071BCFF849D011EF9F8A8969C4F9AE02.roa (hash: ta+wizYmG5Li1UNdnV+RjnG6RQDSQFnDtjBK6l15sJs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl
rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B79F, serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8
Validity
Not Before: Dec 21 02:26:23 2025 GMT
Not After : Dec 28 02:26:23 2025 GMT
Subject: CN=69475ad0-8598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:eb:fb:4e:6d:07:19:c6:bf:ae:62:c2:75:50:
c1:e2:ee:22:28:eb:86:c9:47:34:35:84:ec:b2:b6:
8f:7e:c8:66:48:2a:bc:07:e9:ef:a6:b7:56:ef:24:
20:0a:1a:25:fd:b4:16:64:2f:90:2a:bb:69:b3:0d:
11:e8:3c:3d:ec:4e:0c:79:05:56:ab:99:48:0a:c5:
a5:7f:59:55:ef:fc:01:fc:cf:b7:b9:c3:9d:bd:f6:
95:00:79:6e:04:a2:9a:05:9b:3c:b2:c6:c5:a4:7f:
84:cf:eb:c1:27:af:85:df:fd:50:da:60:ab:91:c3:
ff:5d:fb:f0:96:e6:ce:22:f0:79:2c:02:ef:34:7d:
41:f4:a1:06:c8:f0:4a:ba:e5:7f:2b:b6:8b:ba:8d:
b9:c9:32:02:45:41:84:84:65:80:26:d2:04:d1:f0:
e8:58:2d:c2:04:b6:06:28:29:7a:30:0e:b5:26:24:
73:5d:43:79:03:25:87:af:8b:0e:5f:f9:4b:ba:77:
49:39:7e:bd:95:22:2f:8e:2b:01:a7:8f:a6:8a:43:
e1:af:12:24:ad:20:18:eb:5d:6a:1a:6d:66:73:71:
13:3b:8f:d3:93:43:4b:87:e8:1c:82:4b:8b:44:ea:
a2:54:d8:19:7e:31:81:90:c5:65:67:0e:8b:be:06:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CC:96:EA:72:5D:9E:89:AD:08:66:A3:F0:9F:FF:DC:42:E1:D0:92
X509v3 Authority Key Identifier:
keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:ad:61:2a:c8:98:a3:9b:a4:51:f3:93:c0:f3:e3:46:5b:27:
e2:77:f4:7e:15:1d:8d:ab:cf:7a:1c:ff:2e:8d:55:f8:65:6a:
cd:2f:ae:74:d1:d0:6c:7f:31:5d:1a:ab:18:d2:24:a8:27:91:
e1:ec:ba:11:27:fa:9b:a1:af:6a:ca:cc:89:f2:51:e1:b8:b3:
dc:a2:da:47:ad:68:5d:89:e5:75:7f:df:0f:71:c5:b0:a4:59:
e3:82:f5:54:98:3f:6a:75:90:1e:79:4b:42:34:dc:a5:ac:67:
30:74:a3:b6:e6:98:27:b3:b1:bd:8a:ca:3d:05:97:a5:19:d7:
c6:a0:80:3e:13:d5:8e:e2:9e:4b:82:eb:71:e6:04:f1:25:7a:
24:d7:3c:d5:34:de:36:92:01:31:25:73:da:31:1f:07:40:0d:
ee:ce:15:0a:10:94:52:cb:8a:a5:6a:1c:92:a5:e0:19:c8:71:
59:7d:b5:6a:f1:33:6a:e5:4b:47:ad:0f:2a:55:52:59:2d:e4:
4e:0a:16:94:f2:d5:6a:ee:0b:55:e5:f6:fe:88:cf:c8:83:e1:
8a:5f:78:12:80:8e:37:5c:cb:62:ef:d1:e5:17:d6:19:4d:de:
c9:8e:74:e5:c2:f9:12:b7:0c:b7:35:52:e4:2a:97:85:a6:84:
60:7b:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:37:04 2025 by rpki-client