This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
File: EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json)
Hash identifier: VWOh2YNgwp/a5m09ULfyhGgyZK0aOWDQjDl/4+kqgKg=
Subject key identifier: CB:77:46:0E:12:93:E4:3E:84:B8:AA:F3:28:1E:C5:C9:C2:AE:E8:AD
Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83
Certificate issuer: /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
Certificate serial: 0CDC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
Manifest number: 0CCA
Signing time: Thu 04 Dec 2025 17:41:23 +0000
Manifest this update: Thu 04 Dec 2025 17:41:23 +0000
Manifest next update: Thu 11 Dec 2025 17:41:23 +0000
Files and hashes: 1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: AfULLaz0yQSlTFHGHagqQpB8bZCsd1q+WVJXxtqUc6o=)
2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: IFWas/rgHa7uSrgJAOPof+Srn7iqSkG+8jyeDB/7tHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl
rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 17:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3292 (0xcdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
Validity
Not Before: Dec 4 17:41:23 2025 GMT
Not After : Dec 11 17:41:23 2025 GMT
Subject: CN=6931c7c3-8417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:aa:ca:53:f5:4e:cb:67:82:98:ad:a8:9f:
42:0d:07:4b:e9:02:d1:e5:c7:0d:9d:1e:b1:48:92:
6e:7a:3f:02:0a:5f:ab:f6:22:3d:ae:67:6f:17:b4:
a4:7f:02:91:c9:3b:eb:d5:cf:b3:7b:c3:48:c0:2e:
de:74:64:26:04:7f:37:32:74:46:00:4a:b3:d5:39:
93:fc:6b:20:00:dc:bb:6f:dc:4c:e6:7a:e1:d3:68:
e3:e8:67:70:de:3f:ed:25:3c:b1:83:09:52:bb:5b:
ec:97:b4:94:9b:27:ce:b8:a1:e7:f3:c7:fc:28:71:
b4:9e:17:c5:c8:46:a9:4a:7c:5b:45:a3:04:77:f4:
55:2f:cd:bd:c4:ca:24:6b:f5:21:37:0c:9b:82:3d:
12:f6:b6:3f:47:5b:bf:91:e6:61:60:9f:bf:08:8e:
14:40:5f:75:b0:0e:af:02:f6:d6:5a:77:6b:0d:84:
e5:cb:70:09:b7:7d:71:a7:5c:5c:b5:87:97:0d:83:
68:ab:36:a1:b3:03:ab:24:a1:9d:46:44:26:4e:8a:
e2:97:51:96:e4:dd:2a:1b:74:e1:de:68:ca:63:b4:
60:21:ed:f3:1e:68:a3:4b:db:16:30:54:f9:6d:e2:
b8:83:c5:c7:64:9b:af:b7:e5:c7:e3:44:dd:f7:b2:
ca:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:77:46:0E:12:93:E4:3E:84:B8:AA:F3:28:1E:C5:C9:C2:AE:E8:AD
X509v3 Authority Key Identifier:
keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:bb:d6:84:18:39:f0:8c:03:cc:9a:85:d4:62:91:89:06:22:
df:86:4b:01:6e:23:a3:a6:4b:05:0e:7f:3a:4f:a4:0c:64:47:
ae:84:94:3b:2c:17:67:fa:3d:43:c7:30:8a:a9:58:a7:24:f2:
0f:53:21:7c:33:51:5f:96:64:8e:83:23:87:37:d6:87:8a:d2:
16:da:ad:c7:ee:70:a4:6b:86:d7:d6:76:96:c2:12:31:4d:cb:
e2:0e:49:3d:bf:aa:fa:6f:50:2b:75:38:e5:f1:f7:1a:8b:62:
1e:23:1f:2c:72:f6:20:fb:49:2e:f5:fd:30:cd:7e:89:0b:c7:
5c:c7:01:d1:b4:22:42:ad:44:b3:53:b3:b4:f4:cc:46:7a:8e:
49:ea:65:28:52:f5:26:2d:7e:f8:67:e9:17:90:83:e2:6a:30:
3d:a1:67:75:e5:e8:7c:43:fc:1c:6e:21:17:bb:82:04:72:ef:
1a:44:a3:c2:8e:53:51:6d:7d:c8:d3:6e:0a:75:35:b9:14:eb:
c7:12:b8:97:d8:5d:22:26:06:0d:5c:3d:17:a0:ef:df:92:e8:
b2:0b:82:c1:00:de:b5:45:56:58:2b:77:1c:ec:06:a6:a7:79:
3d:21:79:8e:90:47:09:88:16:0e:b2:95:7d:01:0d:29:fd:b7:
47:ea:cb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:40 2025 by rpki-client