This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
File: ER6YG60wGDD3weWQzBqotIImDtg.mft (raw, json)
Hash identifier: l7XumNwW30qERftRQ9J4hTtsQqHe0Q6iDg4e31AeVKM=
Subject key identifier: E3:45:53:B8:67:0C:C9:2F:7B:92:19:02:E1:87:35:B7:D5:1C:45:A6
Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8
Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
Certificate serial: 1C9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
Manifest number: 1C83
Signing time: Sat 06 Dec 2025 15:51:22 +0000
Manifest this update: Sat 06 Dec 2025 15:51:22 +0000
Manifest next update: Sat 13 Dec 2025 15:51:22 +0000
Files and hashes: 1: ER6YG60wGDD3weWQzBqotIImDtg.crl (hash: l8IpLH2L8em2EkDrSAotFNpKUWZbT65oxyo5K2sxJbE=)
2: 14564AB0E83311E6A72DC543C4F9AE02.roa (hash: 4+gvlbrCKPYHxXa5P1wV2CMHV3TVWTeug3ZLXYBNytU=)
3: 20C4803669A011EA9055BD0EC4F9AE02.roa (hash: nzh03mGpFuWBuJjX4zOpsk0cBliW2iPs211HjGanKnk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl
rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7324 (0x1c9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
Validity
Not Before: Dec 6 15:51:22 2025 GMT
Not After : Dec 13 15:51:22 2025 GMT
Subject: CN=693450fa-b2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:7d:aa:54:b3:ff:5c:ec:11:3f:1c:da:3a:
c8:fe:27:c4:00:72:42:7d:cb:46:56:18:25:50:9a:
f2:36:99:45:cd:60:9d:7d:d6:e3:a0:50:d2:d8:17:
fc:da:16:10:9e:75:e0:55:ce:90:20:8c:94:a2:02:
e9:45:d3:09:c2:ea:9f:ca:03:67:8e:29:45:de:e0:
05:ff:8e:09:2b:5c:29:97:36:66:fb:6c:5b:69:b6:
5d:0c:fe:0d:a1:c1:5e:a0:31:7a:4a:c7:46:9c:6e:
3c:6f:2c:ea:b0:89:08:82:68:2a:6e:ce:ad:77:fc:
f7:fc:ba:74:14:bb:bc:df:1d:3c:10:7a:76:77:cc:
d6:1f:1d:0f:aa:63:2e:53:65:18:16:22:c8:02:33:
24:cf:46:1a:a3:8f:53:68:4e:7f:a5:eb:41:01:02:
fe:48:02:ba:b8:d1:11:77:e6:db:0c:b4:ec:54:fa:
d8:fd:c6:6d:22:9e:2d:ed:ba:74:47:7b:c1:c4:37:
0f:60:23:11:8a:d7:a6:91:62:08:ad:29:25:60:a8:
80:ff:38:ea:b9:0d:0e:98:39:09:33:30:8a:13:48:
1d:79:56:60:7b:a5:65:79:b1:d0:07:f1:61:c7:03:
a8:76:5a:36:b5:6d:22:98:ec:40:e0:c8:88:a5:5a:
3a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:45:53:B8:67:0C:C9:2F:7B:92:19:02:E1:87:35:B7:D5:1C:45:A6
X509v3 Authority Key Identifier:
keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3a:03:d4:f3:90:47:d4:14:a4:53:ed:73:ca:fe:ee:31:ce:
f7:30:74:45:79:dc:bb:b2:5b:60:8f:b1:e0:de:0b:ce:69:ee:
34:bb:b8:12:04:8c:1e:0b:52:3f:9a:3b:d1:bf:cc:c5:fa:96:
24:2d:47:54:36:aa:5f:ac:d7:da:6b:03:42:00:73:45:a3:9c:
82:9b:b6:b4:8d:23:d8:57:05:ca:2d:d5:fe:65:ed:6a:64:f9:
88:79:d2:af:0b:6d:c3:38:e1:51:5e:bd:8b:86:26:b2:e5:e1:
7c:94:bd:39:29:fb:ac:a6:3e:8f:d5:a1:5b:75:94:bc:8b:b2:
da:14:77:09:01:ff:34:48:a7:7f:6a:0c:48:4f:aa:de:86:e4:
72:40:64:ef:2a:1d:dc:fd:73:14:b3:3c:de:13:1b:e4:85:26:
69:ab:0c:cd:0b:58:21:54:06:3b:88:3c:4c:2f:1b:c7:65:3f:
fd:10:13:32:17:98:02:8f:03:26:eb:95:50:f0:21:81:e6:7b:
fa:db:1f:08:20:6f:4c:18:79:c3:ed:22:97:2a:a4:d5:9b:74:
be:83:2a:05:c1:9d:5a:6a:fc:19:56:ed:ce:f6:43:62:fe:d3:
a1:e3:63:e6:a3:a8:4c:84:33:76:c1:f4:a3:0e:fc:1d:0f:48:
8a:16:f4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:10:39 2025 by rpki-client