This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
File: E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json)
Hash identifier: fg9CTAda/8qX5cK4UmgXR3FkKvoRZuxvTWRnFgo5qsc=
Subject key identifier: 74:A7:A5:04:A1:43:A8:D3:FD:27:DE:D6:5B:A0:26:4E:4F:BE:A4:95
Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3
Certificate issuer: /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
Certificate serial: 0CD7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
Manifest number: 0CBD
Signing time: Sat 06 Dec 2025 17:41:13 +0000
Manifest this update: Sat 06 Dec 2025 17:41:12 +0000
Manifest next update: Sat 13 Dec 2025 17:41:12 +0000
Files and hashes: 1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: NvGxC2W8npuFUSP4TdXzIMrcCyPQzFlJEiqQDal6jLQ=)
2: E26173CE050611EAA0470B49C4F9AE02.roa (hash: d9r/K3Z/+ZpfN6K0oGQ4V/Gvo2rBimX6eqfxYBr52AU=)
3: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: RFWeYBY+dtbK4wktzhue3QHZq7aWHP0QwUR/Vq6sP6Y=)
4: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: pRbTKeqEtoUzJI70BiEpqSNXbm2Xvp823oGSK1ijj0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl
rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3287 (0xcd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
Validity
Not Before: Dec 6 17:41:12 2025 GMT
Not After : Dec 13 17:41:12 2025 GMT
Subject: CN=69346ab8-ec0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c2:c9:2a:38:a2:50:e1:ba:65:51:cd:33:66:
9c:91:23:02:36:d6:84:83:e3:0c:4b:da:5d:a9:a4:
08:3c:51:a8:d9:fd:41:1c:4c:a4:13:25:5a:16:e8:
85:8b:f8:8a:35:9f:25:5a:ea:db:e6:8c:ac:c1:00:
ad:02:da:9e:df:97:f6:0c:16:a7:06:47:4c:ff:df:
ff:db:82:16:d4:4a:fb:58:69:07:64:66:6a:23:9a:
b4:39:1f:77:c5:75:3e:d3:a9:d7:8b:b1:b1:4f:22:
bd:77:8a:b8:51:92:90:b9:73:8e:df:25:de:bf:9f:
f1:cf:87:77:d9:2a:7c:b2:f7:f5:a1:28:80:ba:f7:
30:24:fb:38:ad:e6:00:2b:c6:90:9f:cb:68:71:d6:
4e:e7:80:3e:e2:0d:94:cf:a0:08:0b:1b:eb:e9:e8:
78:2a:6e:5d:d2:2c:d5:bd:b0:d8:93:0a:de:38:98:
14:5d:dd:cd:fe:cf:a8:60:5c:34:54:aa:8b:44:f8:
98:3a:12:2c:bc:95:4a:c9:c7:ee:fc:10:e2:44:28:
9c:a3:52:2f:43:ea:5a:2a:f8:04:c3:2a:4e:50:5f:
b2:8d:cc:5b:32:15:9a:1c:63:c8:7f:9e:4d:a8:80:
00:e1:d1:89:40:a9:bb:16:cd:41:24:ff:0e:9f:45:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A7:A5:04:A1:43:A8:D3:FD:27:DE:D6:5B:A0:26:4E:4F:BE:A4:95
X509v3 Authority Key Identifier:
keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:a3:60:cd:0b:ee:74:5e:23:69:05:af:ef:d6:aa:eb:95:4d:
e6:ab:57:72:67:07:44:b3:25:09:51:4f:2a:f7:70:fe:96:c8:
57:48:60:6f:f1:b2:5a:f4:cb:cc:9b:a1:10:af:fd:75:f6:09:
c4:13:a0:cc:a2:37:b1:88:b5:f6:26:11:a6:b9:1c:3e:bd:5c:
e3:e9:27:dd:5f:63:21:5c:4b:e4:24:40:bd:43:fb:da:ec:bf:
2d:c4:be:39:cf:4e:cf:ed:02:2e:06:3b:39:66:aa:63:fd:7a:
c4:21:e4:17:59:79:11:b0:3b:69:6f:29:14:0c:cc:19:93:25:
f9:ca:86:d4:3e:33:6b:fd:68:14:24:1b:46:dc:68:cb:7c:05:
c2:c7:c9:05:8c:30:bf:08:27:4f:3a:01:9c:cf:e7:ee:a7:4e:
23:43:2b:64:20:d4:07:1f:f3:f5:36:81:3c:7c:87:bf:0c:74:
f8:06:93:b5:00:df:7d:c3:07:82:a3:a9:88:e2:58:f0:c2:e8:
b6:64:cd:95:36:a4:3f:e6:e7:b1:8d:84:14:a2:e6:40:18:7b:
f0:14:cb:5b:03:13:a5:21:64:46:bc:e3:02:86:17:c2:28:1f:
20:c2:00:83:03:9f:a6:0b:ff:6a:88:c6:72:4a:c9:8d:07:0c:
46:d0:5f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:45:42 2025 by rpki-client