This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
File: 0ewZe9sNlRk40e71SWoRrMoCiO8.mft (raw, json)
Hash identifier: WWcMbmbwZvqiS8PMizwB2OIWioaJeTloUtsl0ktBnkY=
Subject key identifier: 0F:B2:86:04:87:8F:2E:65:F0:ED:65:84:E9:0E:7F:51:FC:F8:EF:93
Authority key identifier: D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF
Certificate issuer: /CN=A919FDC0/serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
Manifest number: 45
Signing time: Fri 05 Dec 2025 05:15:47 +0000
Manifest this update: Fri 05 Dec 2025 05:15:47 +0000
Manifest next update: Fri 12 Dec 2025 05:15:47 +0000
Files and hashes: 1: 0ewZe9sNlRk40e71SWoRrMoCiO8.crl (hash: FOIBhAv+sPBv5FzeWCh7ZEW4Prb+ZwW7mgfxkJTORqs=)
2: ACFE803469E911F0A7D42F68C4F9AE02.roa (hash: hVcLQOQnj8t+4j/b6kUDlk5JAqcOolfdhy262nXQ91E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl
rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FDC0, serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF
Validity
Not Before: Dec 5 05:15:47 2025 GMT
Not After : Dec 12 05:15:47 2025 GMT
Subject: CN=69326a83-a063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:55:a5:61:1d:f2:5d:4f:77:f8:5e:5c:23:
72:39:61:a1:59:5e:49:28:8c:eb:6a:c4:4d:94:98:
65:ae:8a:89:f5:cd:df:dd:00:7d:4f:88:be:2e:3d:
ad:ff:9c:ec:4d:9a:f4:60:75:c5:f7:35:a0:c4:cb:
83:4b:37:71:b4:61:6a:c0:a8:8e:d0:9f:b5:4f:dc:
79:a4:e6:d4:32:b7:be:af:f3:7b:86:7d:4f:2f:98:
d3:72:69:7c:e2:f8:61:6e:6c:2b:7d:2c:80:7e:51:
b6:0f:fa:8e:e6:43:82:ac:73:e9:95:d3:d0:26:da:
bf:86:2c:e7:1e:b4:cd:41:d5:5d:0e:36:04:43:3a:
6f:fd:c0:84:ac:92:ba:14:2e:db:9a:df:ef:9a:ef:
96:f9:c7:1c:2f:02:1b:dd:db:c6:9e:58:d5:23:19:
25:30:37:0d:d5:5f:1b:75:16:6a:c8:7c:f7:75:17:
58:b4:b8:f1:fa:30:20:cb:ac:12:ec:0f:44:e4:cf:
18:94:d2:d9:41:d0:19:fd:25:2f:a0:b5:22:49:0b:
2b:90:f5:63:47:99:8f:5f:51:7b:01:f6:c1:41:56:
2a:5a:cb:b2:d8:92:b2:44:cb:ba:97:a7:63:02:5f:
1a:95:66:a4:55:76:15:29:38:a1:c2:9a:43:62:13:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B2:86:04:87:8F:2E:65:F0:ED:65:84:E9:0E:7F:51:FC:F8:EF:93
X509v3 Authority Key Identifier:
keyid:D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:0f:b7:c6:c2:da:87:76:2f:ae:29:1c:8e:63:aa:d3:d3:3c:
b9:ac:a3:8a:72:5d:5f:45:ff:30:f3:61:92:33:30:22:7b:c4:
45:8d:6e:ee:f9:00:bd:b8:55:ea:10:a0:a6:dc:cf:2f:68:f9:
70:ef:64:67:8d:4a:71:5f:85:34:38:33:8c:37:21:1b:08:28:
01:64:d0:50:25:46:bf:c6:80:39:c4:c7:57:95:67:0c:be:71:
d4:58:9a:cf:9b:34:e5:5c:ef:e8:6c:67:28:a5:88:7b:71:fa:
f7:54:82:04:c7:df:48:84:2c:84:ef:c5:53:3a:97:44:05:ac:
b1:ec:be:36:9c:ea:63:ae:36:64:e7:5a:fd:19:9c:1b:0a:5a:
26:3a:57:63:ff:70:0c:75:ae:e3:c5:dc:fb:ac:07:14:4d:54:
d5:b7:6a:4f:22:28:67:64:06:99:89:19:7f:88:26:71:b8:f9:
0b:5a:3a:a6:70:1b:eb:9e:89:88:26:d6:18:e7:9e:fb:e4:79:
2c:99:78:a0:ac:e1:59:e5:f8:14:22:71:39:4f:96:53:26:2f:
06:b9:40:b0:ea:5d:d8:cd:8f:6d:dd:32:b8:0c:1a:d9:65:6e:
e8:76:4d:d9:ac:b4:f8:61:f4:a4:7b:4d:23:e6:71:de:bf:fa:
c2:45:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:39:57 2025 by rpki-client