This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
File: EQTOLG2R752aM5VvBzHZ4j8Tr74.mft (raw, json)
Hash identifier: 8MjJmBpkIYZbmNPiClSpolNWqGJjbgZnPk1qkCy3VNc=
Subject key identifier: 62:2A:74:C6:66:D6:C8:D0:A3:C3:D5:0C:8C:5B:88:15:EA:40:07:68
Authority key identifier: 11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE
Certificate issuer: /CN=A916EC8B/serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE
Certificate serial: 0260
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
Manifest number: 0257
Signing time: Sun 25 Jan 2026 01:02:09 +0000
Manifest this update: Sun 25 Jan 2026 01:02:09 +0000
Manifest next update: Sun 01 Feb 2026 01:02:09 +0000
Files and hashes: 1: EQTOLG2R752aM5VvBzHZ4j8Tr74.crl (hash: 1C6NTtRT1OEe1T0I8Wo68PXCooQrLkuutt5bzEezgDc=)
2: 4B9461EE360211F0B340176EC4F9AE02.roa (hash: bOe8nr2E8t1ATROZ4KuuEHTILvcglG1TUoH86rOv6Xs=)
3: 9F13CA9AC60C11F0BE755750C4F9AE02.roa (hash: PyeUHh2Ng6SJ5El0I6XUEocd+w1I2M5sfj3R1NBqgdo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl
rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EC8B, serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE
Validity
Not Before: Jan 25 01:02:09 2026 GMT
Not After : Feb 1 01:02:09 2026 GMT
Subject: CN=69756b91-4680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:ef:b9:e4:6f:05:82:07:09:ed:87:05:61:
82:ba:b1:f6:c5:7a:04:16:76:fb:96:f7:2b:5e:3d:
28:33:cd:16:ca:f9:a5:e1:f1:68:49:0a:0e:40:e4:
61:b5:2e:10:3c:f0:58:98:6a:c9:2c:ec:93:b9:bf:
4d:8c:fe:11:7a:c0:0c:c8:7d:0b:28:26:86:a1:c4:
3c:0a:a5:24:a1:87:29:81:18:e1:e6:d0:c5:de:a0:
4c:14:43:ef:7b:a0:ff:42:c7:78:6f:97:e2:15:d5:
b9:cb:8a:e7:27:a0:c3:a5:e6:82:bc:2b:65:c8:c0:
61:51:ee:b0:b5:78:42:9d:dc:65:41:6c:e5:cf:9b:
e1:88:43:d5:90:77:dc:f7:44:8a:16:dd:d1:81:b4:
d3:cb:ba:2d:61:3a:9c:32:2e:5a:f6:a8:24:bd:db:
d5:d4:ab:6b:fb:87:0b:9b:8f:5b:b5:5c:17:ef:a1:
d2:11:7c:76:e7:23:89:2b:b1:d1:9f:77:58:2f:ee:
a1:a6:16:0e:7c:90:38:6a:45:f9:c0:03:9a:8d:a2:
7c:e5:cd:42:9f:3e:40:ff:a4:ca:49:6b:74:79:04:
a1:f2:08:1a:e1:03:72:d7:a5:65:09:50:87:f8:7f:
92:1a:b5:b5:3d:9c:4f:ba:45:a3:12:19:88:2f:26:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2A:74:C6:66:D6:C8:D0:A3:C3:D5:0C:8C:5B:88:15:EA:40:07:68
X509v3 Authority Key Identifier:
keyid:11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:98:45:28:d7:ed:34:66:79:b5:4b:ce:37:92:df:60:e6:bb:
ab:52:73:0a:e5:04:5c:11:b9:0a:9a:69:0f:27:bb:ba:31:9c:
41:ae:65:cd:62:30:aa:0b:d9:4e:d3:e3:62:87:ac:da:d1:e4:
d3:8c:79:64:18:2a:dc:fa:ae:de:65:7a:25:32:05:d1:9c:d3:
b8:30:4c:fa:06:6a:1e:0d:a2:73:9c:76:ec:84:94:0d:85:5b:
4a:44:cd:2f:c9:6f:c6:3b:36:00:4a:47:3b:fd:47:c4:51:67:
e7:b6:fe:e3:9a:66:d8:9f:4e:a0:b1:cd:f8:f6:de:bd:d1:b4:
3f:33:d3:31:b1:b3:b9:76:8b:e3:e7:ad:8c:93:a8:6d:5e:e2:
59:33:67:cd:0c:27:e6:c1:08:52:6f:d8:45:2a:9a:02:95:6f:
40:01:92:a5:47:7c:d0:c3:21:8b:45:2e:f8:7d:4d:22:d2:00:
47:37:40:d3:de:78:98:67:86:93:3a:76:60:a7:c2:fd:46:74:
23:89:a1:2f:74:84:a1:78:be:35:ef:8d:44:6f:88:a8:c3:51:
0f:18:23:f9:61:67:47:91:ff:79:ba:da:d2:41:5c:7f:90:3e:
04:ac:13:eb:20:2c:d1:cd:80:6b:a3:cd:10:09:9a:cf:19:74:
a7:e3:0b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:28:18 2026 by rpki-client