This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
File: IEZaOpwIN-e2iDBzNx26CSIvv0o.mft (raw, json)
Hash identifier: wZXhLzyp2LAX6Fm2LiE3hUWqkHDIwSRkTWWPb3LIRA4=
Subject key identifier: 70:22:BF:1F:29:C0:05:41:3E:89:3D:42:F1:4B:44:D7:0C:8D:66:5C
Authority key identifier: 20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A
Certificate issuer: /CN=A915D897/serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A
Certificate serial: 0732
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
Manifest number: 0728
Signing time: Thu 04 Dec 2025 20:42:54 +0000
Manifest this update: Thu 04 Dec 2025 20:42:53 +0000
Manifest next update: Thu 11 Dec 2025 20:42:53 +0000
Files and hashes: 1: IEZaOpwIN-e2iDBzNx26CSIvv0o.crl (hash: 9EcQvwXGRt/SjXmCQ3Gm2ILO1bwEIW0jkEHBZxIH8TI=)
2: 9CC98174539711EEA9B2324DC4F9AE02.roa (hash: 0A/CXVN2eZbUiRffQvUFjdyeu61N59RhQvNuDSIYlnA=)
3: 45490AB25AD611EB946A2C37C4F9AE02.roa (hash: gW3vTkaN/wNkWG6a1pWxZMXDNkiPWh7wV3EZWd6a77k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl
rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842 (0x732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D897, serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A
Validity
Not Before: Dec 4 20:42:53 2025 GMT
Not After : Dec 11 20:42:53 2025 GMT
Subject: CN=6931f24d-c80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:cb:96:ba:f3:dd:3e:ad:3a:10:c1:1d:5e:
da:04:3c:0f:f7:ce:41:7a:ba:b8:56:2e:86:3c:dd:
49:ed:ac:8a:cc:05:2a:09:64:05:fa:48:17:3b:cc:
22:c7:e2:08:97:b4:74:16:50:92:1c:97:79:89:5d:
0b:81:2d:40:8c:37:a3:6b:66:25:8e:c5:7b:a0:62:
f4:77:a5:e1:55:82:25:d8:39:6b:c5:57:7f:3a:cc:
91:5a:b0:6d:84:13:08:d7:18:f9:c7:9d:51:62:5b:
c7:49:2d:0a:9c:0a:c1:48:09:bd:31:d9:5b:22:c8:
58:46:ca:84:f3:bd:14:a9:ca:2d:f4:6e:67:d6:32:
ac:d7:22:bd:ef:4a:83:50:1d:f4:a8:79:dc:37:9b:
92:f6:4b:af:8a:27:17:b3:9a:27:1c:07:a3:e1:44:
54:8d:ef:6c:83:83:50:6a:f0:b0:89:27:7b:a2:f3:
35:1a:8c:80:1a:27:cb:64:c3:f4:81:ad:cc:80:52:
48:f3:50:82:3d:02:fb:f7:f2:09:66:ff:e7:37:ff:
75:9d:76:a2:c8:d6:84:e5:cd:32:c2:b5:d1:04:ab:
72:e2:ef:26:b7:8b:fa:7b:c6:c5:5e:4e:05:34:62:
72:e3:7b:aa:44:c6:58:2a:76:c8:5b:03:82:14:84:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:22:BF:1F:29:C0:05:41:3E:89:3D:42:F1:4B:44:D7:0C:8D:66:5C
X509v3 Authority Key Identifier:
keyid:20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3c:3c:75:8b:57:a1:09:de:5d:49:dd:1b:c5:40:9f:f4:65:
51:57:2f:d3:47:5a:52:d8:ca:ae:91:e5:7d:1c:76:29:5e:cc:
65:f3:aa:2e:54:a7:89:4a:1d:ac:78:a5:81:9a:9d:f5:ca:d3:
5a:f5:6a:73:e3:e8:ac:cb:36:6a:4d:09:91:b9:93:91:c0:50:
b3:78:34:c2:e1:2c:5a:88:57:f1:f7:c4:5d:5b:8b:b1:ae:e7:
4b:dc:6f:bc:46:e7:5e:bb:6f:08:d5:c2:80:c3:55:db:88:e3:
d6:00:57:de:a6:1b:91:44:fe:af:96:8f:ae:4a:86:e7:a0:8e:
30:d3:e8:77:90:f9:0a:88:01:15:39:68:5d:ca:a2:5a:3d:53:
86:ac:61:1f:74:b4:86:af:78:1b:1f:1f:b8:5e:f0:7e:63:e0:
76:b3:c3:5b:fe:de:bd:3d:50:ad:25:fa:bb:58:3b:5c:3c:0e:
25:2e:ea:78:ce:4e:e5:78:ca:ee:61:ba:83:ba:b7:1e:06:a4:
3b:2f:60:6f:1c:3b:a1:63:82:7f:53:73:61:32:bd:b2:78:32:
e8:b4:be:2b:87:b3:4e:64:f5:92:e9:8f:82:e8:4d:b3:c4:5f:
98:a4:5e:9e:5f:19:d6:18:8d:3d:7e:fb:b8:9d:e0:35:1f:9c:
5b:d1:4c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:15:09 2025 by rpki-client