This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
File: EQTOLG2R752aM5VvBzHZ4j8Tr74.mft (raw, json)
Hash identifier: ktn7AU+A4PNlhp9d8ySeJFklU+Ca/bLjE9+OYlGqI3Y=
Subject key identifier: 8F:DC:36:ED:6D:66:0D:9C:BE:9A:AE:5A:67:DF:61:47:12:80:A3:36
Authority key identifier: 11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE
Certificate issuer: /CN=A916EC8B/serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE
Certificate serial: 0246
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
Manifest number: 023D
Signing time: Fri 05 Dec 2025 00:16:54 +0000
Manifest this update: Fri 05 Dec 2025 00:16:53 +0000
Manifest next update: Fri 12 Dec 2025 00:16:53 +0000
Files and hashes: 1: EQTOLG2R752aM5VvBzHZ4j8Tr74.crl (hash: A5xSX5nduf+OVs3ldADaFhw0olVKIprgWhnky2O+6Pc=)
2: 9F13CA9AC60C11F0BE755750C4F9AE02.roa (hash: PyeUHh2Ng6SJ5El0I6XUEocd+w1I2M5sfj3R1NBqgdo=)
3: 4B9461EE360211F0B340176EC4F9AE02.roa (hash: bOe8nr2E8t1ATROZ4KuuEHTILvcglG1TUoH86rOv6Xs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl
rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EC8B, serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE
Validity
Not Before: Dec 5 00:16:53 2025 GMT
Not After : Dec 12 00:16:53 2025 GMT
Subject: CN=69322476-7735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:2a:d0:70:78:39:43:5a:23:e9:80:31:ad:
15:61:61:66:70:c7:6f:b6:20:c4:fa:2b:38:85:f8:
79:24:2b:ad:09:0d:37:9d:3f:cc:3c:9e:f9:dd:34:
04:2d:d3:6b:7b:8b:3e:5f:cc:b8:98:cf:35:e7:67:
5a:04:80:8c:c1:8a:0d:32:34:dc:0a:6d:4e:26:bd:
1a:97:94:45:aa:14:da:ff:1a:80:d4:6e:3d:9b:e4:
5a:06:53:cb:af:3c:c6:ee:8c:3e:6c:1c:7f:c0:27:
30:3d:13:7f:11:4b:0b:9c:e1:8c:80:73:a9:57:d0:
07:ff:17:50:de:b4:d2:a2:b9:79:82:54:df:14:37:
b1:07:e8:9c:61:c4:82:3a:d4:1f:4f:1e:54:88:0a:
4a:46:fe:7b:a5:df:15:5c:2b:66:8b:41:e1:e4:5e:
6f:52:19:03:0a:ba:c0:69:b1:ea:b7:a5:7a:1e:e0:
97:d7:f4:7e:4d:b2:2b:fe:1c:ba:3b:05:76:1c:b9:
04:74:2a:a5:47:cb:df:e3:c9:1a:93:2b:e5:e8:66:
29:71:be:d5:5e:f8:00:77:47:74:96:9f:73:9b:7b:
1a:d9:15:7c:33:8e:68:19:21:d5:1b:1e:28:8e:e4:
cd:29:ba:63:d8:e1:8d:65:91:cd:d9:bf:d6:53:a4:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DC:36:ED:6D:66:0D:9C:BE:9A:AE:5A:67:DF:61:47:12:80:A3:36
X509v3 Authority Key Identifier:
keyid:11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:52:86:5e:25:7d:5e:41:00:2e:4d:d4:a6:f2:69:02:2b:fb:
7b:69:07:3e:96:f6:93:26:87:6c:16:2a:b7:53:2c:06:46:28:
01:62:51:3c:84:4e:dd:50:95:71:cc:f5:60:c5:13:bd:a3:e9:
d3:9e:7f:73:cf:5a:f4:6a:75:e5:f1:63:70:9f:cb:bb:2f:73:
1d:46:a2:4a:64:86:2f:cc:1a:45:53:87:b3:6d:4d:8e:5b:30:
95:f5:74:eb:24:80:fe:27:95:47:4e:f0:58:f6:50:8d:74:5d:
09:a9:e8:b5:f1:5d:1c:3a:ac:ba:db:46:62:a1:8c:57:da:ab:
19:84:81:d7:1a:91:c9:ac:1b:b6:bf:c0:b3:3f:c7:15:27:44:
bc:b6:82:da:1e:5f:39:00:cf:59:5f:cf:02:dd:bb:86:85:f7:
2a:f1:c8:ba:e2:69:83:7e:a0:e7:42:7d:a2:70:54:e5:8f:ed:
78:ed:85:5e:1a:09:c2:28:85:c1:14:47:3e:01:02:8b:42:e4:
3c:ed:0e:a9:e8:c2:4f:7b:17:0e:8d:c9:6e:a6:5c:7c:99:ce:
5e:6e:4d:aa:0f:44:39:b4:04:6f:2f:15:8a:77:f7:6d:08:82:
c1:fc:79:9a:e3:26:61:70:26:62:0e:c2:e9:d0:be:dd:19:8d:
59:2b:85:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:11:53 2025 by rpki-client