This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
File: emDAS4fWxsslHxUpfuJa0tpQXg4.mft (raw, json)
Hash identifier: 94dfpOSr1gd8N97Cwarvcskn/tVd7UJ1YD9cJuQ55ek=
Subject key identifier: 9F:02:02:5E:77:FF:5F:9F:4E:09:87:A1:39:7B:ED:AF:27:04:53:A0
Authority key identifier: 7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
Certificate issuer: /CN=A91D0935/serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Certificate serial: 0388
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
Manifest number: 037F
Signing time: Sun 21 Dec 2025 00:05:23 +0000
Manifest this update: Sun 21 Dec 2025 00:05:22 +0000
Manifest next update: Sun 28 Dec 2025 00:05:22 +0000
Files and hashes: 1: emDAS4fWxsslHxUpfuJa0tpQXg4.crl (hash: +hvn7dW/4CXxCK+Afvq3XPZ2WhmvF43B0mWCtJDBPV8=)
2: 38043DF4938B11EEA552D487C4F9AE02.roa (hash: Z/v2dPSlVHtaS2gXVPwHt6zhX6qyLYHvPRCOMkLkMrI=)
3: 387AE648938B11EEA552D487C4F9AE02.roa (hash: n2JnUjdK1G3DKEtjobXUa5tJlDzoU7ugVziN4/cf1hI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 00:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 904 (0x388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0935, serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Validity
Not Before: Dec 21 00:05:22 2025 GMT
Not After : Dec 28 00:05:22 2025 GMT
Subject: CN=694739c3-8f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:b8:5d:10:f6:98:7a:22:91:e8:4f:16:0e:
8c:20:80:47:04:6b:c2:ee:5f:de:5f:de:2c:31:bf:
08:b0:07:6e:aa:32:71:c8:ea:fa:7e:3e:65:39:9f:
7c:ce:11:12:64:0c:59:01:f8:bf:41:1a:92:59:6d:
97:1c:d8:8e:c9:28:cf:fd:02:b5:73:9a:b9:80:76:
8f:25:a1:b6:39:f3:89:31:aa:da:97:c4:10:6c:65:
9c:a9:52:03:42:84:e5:8b:69:5a:95:68:28:ae:45:
0a:98:6b:58:72:b2:97:39:b9:a5:d3:6e:ec:e4:be:
a4:7b:fd:f6:1c:e3:da:78:16:7b:ad:36:f6:45:85:
88:fa:72:92:ea:f5:c8:2b:1c:81:82:a2:82:b6:cb:
ad:b7:92:30:0d:72:c6:7f:f5:a5:5f:c2:b0:aa:cb:
db:6c:f0:02:98:c2:80:4c:27:fa:9e:90:e6:1d:d6:
31:e9:9a:e0:39:77:2d:10:f9:28:12:31:0e:cc:03:
b5:fa:f2:7e:99:12:91:3a:26:f4:a3:db:3d:4f:c2:
9e:33:59:1c:fa:8d:cb:d3:a9:59:c9:85:fa:77:55:
79:33:cf:cd:02:82:0c:6a:44:63:75:42:ba:09:ec:
9d:81:5c:cd:1a:54:67:8b:b7:3a:75:98:67:46:85:
ef:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:02:02:5E:77:FF:5F:9F:4E:09:87:A1:39:7B:ED:AF:27:04:53:A0
X509v3 Authority Key Identifier:
keyid:7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:d3:c5:2f:f4:d5:67:e0:b5:ad:c7:89:c4:69:35:ee:80:f8:
bd:6e:40:7a:43:af:38:e0:1c:d8:83:39:e5:00:20:86:37:9c:
71:ba:17:c2:d0:06:01:85:17:05:cd:4f:91:7d:47:71:9b:21:
2b:a8:e4:7d:4f:51:58:6b:e3:0b:79:4f:7a:a7:38:ec:e9:a9:
f8:2e:9d:b4:8c:23:9a:09:c7:98:62:59:3c:3c:9c:01:4a:c7:
02:4b:d9:11:a2:e9:48:2b:70:cf:9c:d2:c1:01:51:3f:ca:05:
cb:3b:a5:29:97:9f:4b:88:c0:30:ef:58:d0:a3:09:ef:0f:a9:
74:69:16:55:df:49:c7:73:d6:e2:7e:02:58:70:fa:ea:2e:86:
be:11:3e:85:72:66:92:46:e2:16:42:2a:36:dc:33:3c:27:2c:
02:0d:8a:de:db:62:b2:16:29:4a:8d:32:e2:6a:a0:6e:29:cb:
2e:b1:15:e5:fe:a1:f7:5c:71:9a:60:18:f2:7c:15:b2:b2:3f:
95:c8:2f:59:34:14:14:34:df:88:96:63:1a:cd:58:c4:25:48:
4f:39:4e:5d:2f:2e:f6:61:06:33:59:1b:48:c4:30:89:b9:29:
89:0c:1a:9e:4d:7a:36:de:c1:1e:80:8a:a5:6e:df:35:6a:79:
f7:ea:c3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:15:50 2025 by rpki-client