This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
File: eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json)
Hash identifier: gzFbnTBFelkDiZdmgymgSS2h5xUp69NlDWP9VzIvmXM=
Subject key identifier: 78:9B:C7:7D:17:D1:AB:E9:B2:37:E6:C5:DD:AC:54:E0:8B:63:AA:F6
Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00
Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
Certificate serial: 0613
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
Manifest number: 060A
Signing time: Thu 04 Dec 2025 21:36:41 +0000
Manifest this update: Thu 04 Dec 2025 21:36:40 +0000
Manifest next update: Thu 11 Dec 2025 21:36:40 +0000
Files and hashes: 1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: hFkj/s2KwEeZm44y28fRROAS3EZPsGIxmBJ4vZf7GDU=)
2: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: 2FiQQsbz3nt2u/cekKkmnmxwVKcgAmIxkizQKnpeMp0=)
3: 18981398329B11EDB9F09862C4F9AE02.roa (hash: dJlRsSYRiHAfXA1Nnt7jiiGzcupZLCHRX4H/d6aCfuU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl
rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1555 (0x613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
Validity
Not Before: Dec 4 21:36:40 2025 GMT
Not After : Dec 11 21:36:40 2025 GMT
Subject: CN=6931fee8-99cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c3:d3:4b:ad:97:b8:9a:c3:4f:58:6b:45:61:
a0:10:03:d6:e5:65:fc:ef:1c:e2:31:a4:60:ba:78:
21:2d:c5:67:39:28:6a:a2:60:17:23:35:34:7d:14:
c4:02:61:5e:d2:34:df:87:40:ad:ff:6f:41:21:72:
4e:1e:70:6e:54:82:2d:a2:32:61:c8:73:fd:54:7c:
e8:dc:58:a6:6d:4b:4b:44:3e:e6:b2:8c:be:98:95:
ef:95:ba:45:9e:19:f2:9c:11:1d:e8:dc:0e:72:53:
96:d6:31:26:fa:b9:c6:20:4d:5c:a8:47:d6:60:c5:
26:5e:4c:73:4b:6a:02:e9:25:9b:54:56:b8:8d:4e:
e2:0b:13:e9:08:88:8b:09:4e:76:1e:9b:56:03:6b:
1f:08:37:fe:3a:60:1c:95:6f:58:20:56:68:74:04:
92:d3:c4:d0:6e:97:35:d3:10:fb:32:77:f1:e6:3d:
76:dd:88:f4:a5:16:4c:9b:df:1a:2d:de:73:44:c3:
7b:e5:24:90:fe:b5:7d:d2:78:73:a9:55:9b:ef:d5:
63:e4:3b:61:3b:5f:45:b3:08:79:d4:e1:57:a6:55:
1c:5d:b0:ba:ee:d8:15:fb:e1:d6:59:e1:25:07:3c:
71:84:f7:37:92:50:1d:46:98:09:6a:00:dd:46:d3:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9B:C7:7D:17:D1:AB:E9:B2:37:E6:C5:DD:AC:54:E0:8B:63:AA:F6
X509v3 Authority Key Identifier:
keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:df:a2:76:00:0c:e5:dc:fa:1e:fc:66:8e:33:85:bd:66:39:
88:73:43:de:04:0a:77:fc:90:a3:63:05:cc:73:30:aa:34:b0:
9f:dd:9b:b3:99:57:7e:01:56:7c:80:25:e2:9e:60:51:09:a4:
86:d5:15:5a:a0:10:c8:cf:5b:96:31:e8:cb:19:82:de:56:a3:
1f:f1:a6:a7:d5:75:5c:30:c8:fb:06:c6:90:33:3f:72:5d:04:
fa:ed:13:1e:2b:96:bd:29:46:30:f0:f2:93:0d:5a:90:26:ce:
81:3f:7c:e6:95:f5:83:81:a9:7e:a7:76:f9:d2:08:c6:90:7f:
d2:51:cf:0c:99:c0:3b:f8:ba:b0:0f:d4:a8:0b:b9:fb:53:08:
e6:b4:9b:b4:d4:e4:52:8d:f1:53:5f:71:74:71:90:53:82:7e:
da:9f:d0:56:98:d5:f2:76:32:0a:c7:19:3c:9b:72:c0:ad:dd:
72:89:2e:5a:01:08:6f:d1:6c:a9:49:f9:ef:e4:bc:14:f3:86:
1a:4d:19:6b:b4:3e:74:40:c5:e3:82:f3:f2:e7:0e:b1:e0:94:
8d:88:7e:cc:0f:28:2e:5a:ba:d8:f0:9f:b8:31:de:72:20:81:
dc:13:4d:c4:bb:2d:10:9d:fe:cc:f7:92:b8:0b:69:95:b4:f6:
53:a3:07:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:04:06 2025 by rpki-client