This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
File: EESZe8Y6gT2gTBuRiXN0tosEumE.mft (raw, json)
Hash identifier: Y9UH8N4q27V211dxad+3XFme3xgUxL3GT5eVOOpVwKE=
Subject key identifier: 64:E9:76:3D:47:DE:86:F0:81:26:55:92:00:AD:36:EF:96:F7:13:54
Authority key identifier: 10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61
Certificate issuer: /CN=A91E87B4/serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
Certificate serial: 0EBC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
Manifest number: 0EB2
Signing time: Sat 06 Dec 2025 17:07:13 +0000
Manifest this update: Sat 06 Dec 2025 17:07:12 +0000
Manifest next update: Sat 13 Dec 2025 17:07:12 +0000
Files and hashes: 1: EESZe8Y6gT2gTBuRiXN0tosEumE.crl (hash: OHAWezVwyaaRWNQkSCtGKG+/CTW+rzYVbMI74C4ArpA=)
2: 6D6DED2830BE11EC9401610CC4F9AE02.roa (hash: 0mTstOtlN/36Gmv0U1vXBpu9wAUBHuJ7+PKxStc1hKc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl
rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3772 (0xebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E87B4, serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
Validity
Not Before: Dec 6 17:07:12 2025 GMT
Not After : Dec 13 17:07:12 2025 GMT
Subject: CN=693462c0-a010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:aa:f8:a8:82:6c:04:6a:ca:6c:63:9f:b8:
e4:1a:cc:22:51:6e:78:d7:0c:3f:70:f4:b1:ee:99:
68:85:aa:90:a9:bc:2a:01:b3:6e:d7:2c:44:ec:47:
d8:6b:f1:11:61:d0:12:06:ee:2a:d7:92:3e:af:fa:
a5:57:1b:38:b2:de:6b:21:4c:b2:13:28:29:92:6b:
fd:95:d5:39:78:67:96:e1:fa:30:97:fd:2e:61:e4:
1e:15:4f:c4:55:98:8f:d9:75:2b:40:44:ca:ce:f9:
21:aa:89:26:3b:dd:af:c5:d7:c3:05:a4:44:c0:9f:
f6:b9:de:90:b5:70:d8:65:bb:6c:8c:d7:e6:89:66:
0c:18:a6:f7:15:3d:c6:65:09:42:be:eb:be:4e:e2:
2a:f7:de:a3:fd:49:b3:fe:cf:48:21:73:4f:79:a2:
31:7b:58:85:e7:27:d0:ac:1d:24:aa:93:1d:62:5c:
8d:08:45:64:29:5e:cd:f5:08:fd:70:66:ae:88:99:
3a:39:a8:89:c2:45:00:fe:ff:c6:b1:eb:83:9e:a9:
96:fc:21:d1:10:db:7a:db:5b:90:99:a2:e7:51:55:
3a:6a:49:9c:c1:6a:ab:44:6d:68:43:7d:4c:eb:91:
95:ca:d1:a8:8b:b4:56:ee:b9:67:b3:d7:c3:ce:c3:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E9:76:3D:47:DE:86:F0:81:26:55:92:00:AD:36:EF:96:F7:13:54
X509v3 Authority Key Identifier:
keyid:10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:99:ba:01:b2:ef:b1:c0:12:19:7d:8f:39:8c:f4:2c:33:a7:
8b:ea:fe:d9:29:3c:20:55:6c:d5:74:80:b3:2d:07:1c:f0:d4:
8d:c1:fc:d1:d1:b0:2c:3b:da:6a:54:4f:32:52:33:c2:c9:df:
73:c7:47:9c:0c:09:9f:c1:34:e8:07:66:27:e7:2d:c5:ea:ff:
44:78:97:98:a6:a2:f2:f5:23:94:a0:e7:c3:37:42:72:ce:ec:
d6:44:c3:12:dd:9d:e2:13:0e:28:06:61:7e:63:84:96:62:26:
1a:f8:ae:cf:a2:e7:2f:11:b8:01:a6:0e:46:3e:08:82:02:5a:
1b:38:95:19:15:25:f1:29:76:0b:12:3b:39:2d:40:e9:c2:0f:
0b:c6:dc:79:4d:74:4e:23:0f:c3:26:41:de:c1:e0:d3:e0:b8:
cf:51:69:a6:aa:0e:19:52:ea:33:fc:a3:1a:25:bf:f3:39:c7:
ea:e7:1b:24:9a:ec:ec:63:31:b0:cc:c6:74:ae:93:44:0f:50:
90:fb:43:aa:3c:dc:78:0c:97:d0:ef:cd:62:4b:30:87:ed:08:
83:5d:f1:04:15:23:c7:e5:29:ba:37:d7:2c:06:31:3b:c3:bb:
00:36:13:fb:bc:ed:ae:9f:64:7a:a7:4e:bc:55:67:3e:e9:6a:
1b:26:83:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:33:39 2025 by rpki-client