This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
File: EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json)
Hash identifier: o4V3X3Wjy4vsAPSt94uBcataTK6eWQjPth3PELt/9yk=
Subject key identifier: A9:C2:7B:B6:F9:91:E5:D5:46:15:6D:8D:7F:26:CE:DA:16:CE:79:2B
Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75
Certificate issuer: /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
Manifest number: 0105
Signing time: Fri 05 Dec 2025 03:06:18 +0000
Manifest this update: Fri 05 Dec 2025 03:06:17 +0000
Manifest next update: Fri 12 Dec 2025 03:06:17 +0000
Files and hashes: 1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: 32N+S3zAKG10//pMMzCbXjykY1V9EVhcv3rXaNDZoB4=)
2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: GLbMFy1JbyAVM7u4jQAEv8xQTj/rbFbdkkf2ZQWfsOQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl
rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB72F, serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
Validity
Not Before: Dec 5 03:06:17 2025 GMT
Not After : Dec 12 03:06:17 2025 GMT
Subject: CN=69324c2a-3f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:ec:63:09:c6:75:d7:70:b5:47:d6:88:b2:
81:7f:d8:3b:6a:4f:21:7b:82:e2:a4:0b:8b:b3:76:
d8:57:29:78:62:70:32:99:2f:fb:47:3c:8a:c8:c2:
0f:eb:90:6b:4e:71:ba:b1:4d:b3:20:67:17:a4:fd:
92:20:86:ef:63:06:da:63:1a:2c:2e:e9:08:c4:c8:
3f:1c:11:30:4a:8c:0f:76:f2:6e:24:3c:fe:f8:c8:
4f:d1:bd:eb:22:84:85:50:ce:67:0e:20:d9:bf:5c:
13:c5:16:93:cf:9c:0f:57:f5:ea:4f:34:97:8a:65:
6f:3f:47:5e:02:5d:65:4f:74:48:a0:5f:63:d3:a3:
ca:f1:3f:87:0d:62:fe:3c:16:7e:71:b0:6a:1c:fe:
ed:cf:f6:85:fe:2b:77:7d:25:df:91:07:b4:94:7a:
15:90:f5:d4:8b:74:11:68:ce:a5:74:49:d9:84:33:
97:04:c2:70:88:0d:a0:94:df:f7:b6:35:63:cb:4c:
ea:d2:37:b7:ee:56:b8:16:35:6a:e3:43:56:1f:d2:
c7:aa:9f:54:90:5f:af:c0:c2:8a:1b:04:83:14:92:
bc:c6:11:55:75:02:c4:a2:70:7b:55:50:40:71:19:
a8:79:9f:c9:d7:0c:4c:c4:5a:c3:35:5d:38:ca:b4:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C2:7B:B6:F9:91:E5:D5:46:15:6D:8D:7F:26:CE:DA:16:CE:79:2B
X509v3 Authority Key Identifier:
keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:6b:44:1e:d5:f0:ca:c1:2a:cd:cf:90:45:36:bc:6c:e6:33:
0d:c5:49:f2:4b:fa:83:ea:06:65:85:19:55:f1:d3:c5:b8:93:
ec:f8:24:07:ff:c0:b3:4a:69:4e:31:c1:87:85:83:5d:5c:ef:
aa:25:1e:ed:ea:97:e9:8b:ef:9c:3d:1d:b7:46:0a:8a:1d:25:
57:2a:e5:4e:82:ba:49:74:7d:1b:44:00:26:1b:0a:f6:a8:7c:
79:5c:43:84:c0:e6:88:5f:75:69:67:c1:d8:dd:92:a2:bb:13:
3c:0a:88:a5:20:cb:05:5d:c5:cd:d3:36:7c:87:99:52:b0:e3:
30:65:1f:44:05:ef:2d:8d:61:b1:2c:68:13:f0:37:a7:ee:51:
d0:24:e5:cb:65:66:13:6f:89:14:c7:b1:1c:a8:78:ad:24:70:
07:4a:de:c5:50:f0:4c:7e:c0:e5:6c:40:47:3d:5b:e7:33:cf:
83:db:ad:45:93:ad:62:1f:2c:18:d1:c5:b6:1d:7e:ed:b5:d0:
f8:1c:d5:4d:0c:4a:d1:a8:12:6a:e1:56:c8:4b:6b:71:59:f2:
78:95:96:6e:d7:1c:ea:34:01:17:17:a8:d3:46:f3:09:80:1e:
dd:b0:bb:4b:7f:1f:fc:f9:7c:a6:73:e0:3f:c4:40:55:83:63:
d7:64:11:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:04:05 2025 by rpki-client