This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
File: 0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft (raw, json)
Hash identifier: jvzKuAowKVIrosdXTcuIxa/9AckZoeYH5W2u9+Wj4cQ=
Subject key identifier: F5:F6:CE:AC:DD:03:7E:39:A0:80:CD:E8:8B:A2:3F:49:9D:08:7F:20
Authority key identifier: D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88
Certificate issuer: /CN=A919874A/serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788
Certificate serial: 9C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
Manifest number: 99
Signing time: Fri 05 Dec 2025 04:23:57 +0000
Manifest this update: Fri 05 Dec 2025 04:23:56 +0000
Manifest next update: Fri 12 Dec 2025 04:23:56 +0000
Files and hashes: 1: 0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl (hash: WftNxh5Fx3fzxw5U0JLDxVVJkptxUNlh50qEZneaTmQ=)
2: 9A54CDE2348011F086A8BD61C4F9AE02.roa (hash: pT72WIe4fU0R7+0/z831L5zLkhO5BiW0L+nGv2+Kvtc=)
3: 7151B356EAD411EFBA2AB40EC4F9AE02.roa (hash: VSF4aaLno+UR3o6W3Jl8Y30MNxvgZ99sJu4IeD9pONk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl
rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:23:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919874A, serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788
Validity
Not Before: Dec 5 04:23:56 2025 GMT
Not After : Dec 12 04:23:56 2025 GMT
Subject: CN=69325e5c-dcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:8b:98:ed:e2:89:57:c3:46:62:dd:a7:62:
b0:4d:5e:80:9b:9a:ce:a3:ba:57:25:48:c6:72:33:
35:a6:a8:04:ae:b2:88:f2:8a:b3:f7:92:d7:7c:0b:
33:c4:28:8c:5c:ac:51:5d:8e:2f:54:05:d7:9b:a9:
9f:64:a7:f7:b3:f3:2b:4f:33:31:9b:b4:65:3e:39:
99:9a:36:53:3f:5a:01:c5:29:9f:72:c4:2c:34:39:
2e:5e:af:a1:62:6f:83:d8:a0:f8:53:e7:51:15:2e:
fa:9b:a9:a1:65:59:af:8a:03:e9:62:80:fe:1c:3a:
ac:dc:19:ae:ff:3f:35:ee:95:48:eb:64:e4:5a:81:
3d:81:a2:e5:5e:62:03:46:b0:c1:37:f4:76:88:70:
0e:95:7a:f1:48:d1:78:1a:5f:23:19:b1:e4:5c:32:
35:a9:03:ec:38:ce:4c:9f:5e:cf:f6:53:94:e7:72:
05:50:b5:73:03:6e:5f:2c:d5:6d:90:ec:e1:4e:cd:
d9:54:ad:4b:db:c0:6d:48:c1:e2:76:29:af:3c:4a:
2b:17:f5:96:2e:e2:e0:5a:79:93:e0:53:a5:82:d1:
b0:85:81:31:00:39:3c:4e:65:c1:a9:9a:0a:15:68:
a1:5a:94:e0:ea:fd:0c:f5:55:b1:b2:25:22:60:02:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F6:CE:AC:DD:03:7E:39:A0:80:CD:E8:8B:A2:3F:49:9D:08:7F:20
X509v3 Authority Key Identifier:
keyid:D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:57:80:87:39:7b:62:b3:1e:0d:c1:23:2a:e6:11:03:b8:12:
dd:d9:57:1f:14:64:0a:70:0d:ed:04:1a:37:77:44:5f:02:62:
73:ae:f2:0a:a4:c8:7e:9d:3f:0a:90:ae:f9:b2:0a:75:57:c3:
11:81:43:d8:63:0e:3a:8b:f0:3a:07:77:2e:f9:a3:09:28:7f:
fd:0a:d0:b8:27:96:ee:37:d2:83:3a:2c:95:04:ce:55:5e:ee:
d7:39:29:22:c5:f3:f3:96:55:7f:29:e8:59:ff:d5:c2:9f:e7:
8c:e3:93:ec:e9:43:15:69:4f:97:f2:ef:23:8d:79:5d:66:c8:
f2:55:51:86:34:6b:83:71:17:fc:f7:45:9e:42:a3:da:49:b7:
0f:b5:7b:07:e0:95:3c:99:94:dc:6a:0d:1b:94:dc:af:e5:71:
57:ea:24:f8:15:c0:53:49:89:a5:94:5d:d9:19:96:de:81:12:
c2:53:7a:50:16:50:0f:d0:76:62:ed:53:db:cd:e9:44:d2:38:
cb:5e:fa:a7:0d:1f:f7:1a:4c:d6:77:2b:dc:43:f7:15:bf:d7:
42:15:10:33:c0:f6:7f:ca:cc:16:7c:01:02:7a:38:b2:e2:b6:
8c:4b:a1:f5:3f:2e:71:87:a1:3c:0d:0b:dd:4e:7d:a9:0b:31:
5b:b0:8b:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg3NEExMTAvBgNVBAUTKEQwNDgwRkYxMDc1MDUyRkVGRUU2QzA4RTFEQkY4RTgz
RTAwMTI3ODgwHhcNMjUxMjA1MDQyMzU2WhcNMjUxMjEyMDQyMzU2WjAYMRYwFAYD
VQQDEw02OTMyNWU1Yy1kY2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtniLmO3iiVfDRmLdp2KwTV6Am5rOo7pXJUjGcjM1pqgErrKI8oqz95LXfAsz
xCiMXKxRXY4vVAXXm6mfZKf3s/MrTzMxm7RlPjmZmjZTP1oBxSmfcsQsNDkuXq+h
Ym+D2KD4U+dRFS76m6mhZVmvigPpYoD+HDqs3Bmu/z817pVI62TkWoE9gaLlXmID
RrDBN/R2iHAOlXrxSNF4Gl8jGbHkXDI1qQPsOM5Mn17P9lOU53IFULVzA25fLNVt
kOzhTs3ZVK1L28BtSMHidimvPEorF/WWLuLgWnmT4FOlgtGwhYExADk8TmXBqZoK
FWihWpTg6v0M9VWxsiUiYALJQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPX2zqzd
A345oIDN6IuiP0mdCH8gMB8GA1UdIwQYMBaAFNBID/EHUFL+/ubAjh2/joPgASeI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc0QS9FQ0UxNjZENEVB
RDMxMUVGQjFDNENDNTVDNEY5QUUwMi8wRWdQOFFkUVV2Ny01c0NPSGItT2ctQUJK
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBFZ1A4UWRRVXY3LTVzQ09IYi1PZy1BQko0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODc0QS9FQ0UxNjZENEVBRDMxMUVGQjFDNENDNTVDNEY5QUUwMi8wRWdQOFFkUVV2
Ny01c0NPSGItT2ctQUJKNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAcV4CHOXtisx4NwSMq5hEDuBLd2VcfFGQKcA3tBBo3d0RfAmJzrvIK
pMh+nT8KkK75sgp1V8MRgUPYYw46i/A6B3cu+aMJKH/9CtC4J5buN9KDOiyVBM5V
Xu7XOSkixfPzllV/KehZ/9XCn+eM45Ps6UMVaU+X8u8jjXldZsjyVVGGNGuDcRf8
90WeQqPaSbcPtXsH4JU8mZTcag0blNyv5XFX6iT4FcBTSYmllF3ZGZbegRLCU3pQ
FlAP0HZi7VPbzelE0jjLXvqnDR/3GkzWdyvcQ/cVv9dCFRAzwPZ/yswWfAECejiy
4raMS6H1Py5xh6E8DQvdTn2pCzFbsIu2
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:45:20 2025 by rpki-client