This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
File: emYQUZRc4uj7SubeY7KEeLDO014.mft (raw, json)
Hash identifier: I7LEks3e2tjmi2XYL+UpdmcUCLq7sXCGkSrwr0xsjDI=
Subject key identifier: 15:4F:55:DD:23:A1:D5:FC:26:DE:40:DA:F3:ED:F9:3A:24:D0:A1:3B
Authority key identifier: 7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E
Certificate issuer: /CN=A9165FF3/serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
Certificate serial: 34EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
Manifest number: 34EA
Signing time: Sat 06 Dec 2025 14:53:12 +0000
Manifest this update: Sat 06 Dec 2025 14:53:12 +0000
Manifest next update: Sat 13 Dec 2025 14:53:12 +0000
Files and hashes: 1: emYQUZRc4uj7SubeY7KEeLDO014.crl (hash: /+SZA7FvIhEl/h4CwAvJ66UgugqC6acd7H424QWv+vs=)
2: 5FBB084EAE6A11ECAA9D756AC4F9AE02.roa (hash: wwzdt+29bN5sRkpJd/eidoVjChYLuUnZj02CyiHrUiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl
rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13551 (0x34ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165FF3, serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
Validity
Not Before: Dec 6 14:53:12 2025 GMT
Not After : Dec 13 14:53:12 2025 GMT
Subject: CN=69344358-4729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:12:b2:06:3e:e7:bd:c9:e6:82:0f:a4:45:
5b:10:e6:6f:17:af:10:d4:d3:6a:a3:c1:e5:77:fb:
9b:33:30:86:4e:01:5f:4d:67:4f:03:99:61:e6:2f:
90:3a:81:56:7b:09:cc:d6:fb:82:e7:70:c2:e9:63:
14:d3:30:61:4c:10:c5:81:c0:ae:9f:56:19:36:91:
e6:7c:e9:32:dd:6a:7e:92:fa:23:53:93:f1:ec:15:
1f:81:c0:b3:ec:98:8a:6e:ae:08:fd:b3:50:20:42:
de:f8:d2:44:87:e5:2d:22:b7:0a:44:cb:bf:8d:7a:
2b:c8:8a:59:43:9a:e9:ed:ae:00:84:77:06:db:9c:
bf:69:58:b5:ab:fe:0a:71:4f:b2:91:46:a8:e4:53:
f7:05:50:98:7f:ef:ea:a1:0e:7d:cc:4e:bf:c4:f6:
80:a5:c0:07:71:04:8c:2b:33:25:ec:01:06:32:b0:
51:30:9c:6a:62:76:0a:0d:ea:d8:aa:17:09:da:37:
d7:6c:ac:49:b7:ca:1e:53:01:e0:a3:2d:eb:4d:dd:
81:f8:c0:e2:ea:77:dd:c4:ec:58:67:ee:b9:55:c8:
0a:fb:2f:f1:fc:ff:ac:b7:d7:77:e0:d2:bc:ac:6c:
c4:d0:be:e6:6f:91:63:1a:f8:8a:30:53:ee:84:24:
1e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4F:55:DD:23:A1:D5:FC:26:DE:40:DA:F3:ED:F9:3A:24:D0:A1:3B
X509v3 Authority Key Identifier:
keyid:7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:7d:89:1e:87:05:ad:44:44:e9:63:ff:cb:7c:5b:9f:43:1d:
1a:1a:5d:59:9b:cc:cd:25:b1:c7:0d:f7:03:88:af:f4:96:5a:
d2:04:01:a3:0a:64:bf:14:d8:67:73:10:d2:ba:23:79:ff:7d:
5d:36:62:4c:fb:90:cd:a6:37:f0:11:ce:3d:f4:84:19:63:92:
60:ba:e9:cb:1e:ab:1b:38:07:b1:9a:f2:cb:52:1d:80:59:cb:
54:a0:3d:a2:31:96:10:37:d5:f4:82:22:9c:1d:7a:8c:85:1e:
32:b3:57:8d:ee:99:42:97:80:0e:a4:53:69:e8:04:d0:6b:99:
81:b4:82:b6:07:12:9c:be:16:8d:87:b7:47:d5:a0:30:c6:75:
0c:c5:70:12:88:d7:10:8d:c0:be:2e:44:cb:ef:f7:25:97:a9:
c7:10:f7:ab:2b:04:1d:a5:68:d2:79:3e:5f:4c:d6:07:6b:58:
59:50:5d:f4:a5:f4:0e:72:1f:f4:c9:06:8a:3e:18:17:43:fb:
d4:a1:b4:f2:c6:cd:c0:14:5e:c5:e9:61:74:05:19:75:db:25:
70:2f:4f:12:42:ca:09:ef:b7:ba:ed:fd:26:3f:fd:38:80:fb:
f7:83:87:97:c2:21:86:8f:cd:52:58:69:69:a1:fb:f4:92:5e:
04:fe:15:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:14:09 2025 by rpki-client