This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
File: eiygmoVxKbGAQoJJIxJDPat15sI.mft (raw, json)
Hash identifier: oRht2zwHbDPd5Qtvorn/Lngj9MqVkZij7RIiySasoTA=
Subject key identifier: 05:47:4D:46:E5:21:62:45:F2:99:B5:4B:27:6C:C1:32:B7:A7:9C:A2
Authority key identifier: 7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2
Certificate issuer: /CN=A9112571/serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
Manifest number: 024A
Signing time: Sun 21 Dec 2025 01:02:04 +0000
Manifest this update: Sun 21 Dec 2025 01:02:04 +0000
Manifest next update: Sun 28 Dec 2025 01:02:04 +0000
Files and hashes: 1: eiygmoVxKbGAQoJJIxJDPat15sI.crl (hash: hivIV5xdxcPxdRpw1onoi7+dfQdbqPmVRTBLpet7zmo=)
2: ECDFCD86656711EDBED7F511C4F9AE02.roa (hash: 8GAnqF7qkvBcRLnOyvdfMkTZTaujvV44HcYbxiEDYyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl
rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 01:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112571, serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
Validity
Not Before: Dec 21 01:02:04 2025 GMT
Not After : Dec 28 01:02:04 2025 GMT
Subject: CN=6947470c-8875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:96:62:a8:b4:43:8b:1e:e3:53:23:70:56:08:
19:7a:7d:d3:07:7e:87:22:51:0f:1f:a5:46:29:b6:
c9:4e:ca:12:0e:b9:1f:29:e0:95:78:e0:26:ea:25:
04:53:1f:da:ab:1b:7d:cf:aa:ac:00:84:0e:df:0f:
24:f1:c3:07:d3:fd:24:d5:a3:9c:ba:fb:fb:fb:02:
e9:70:35:96:ce:64:8d:a1:56:a7:99:f4:74:48:91:
89:33:7a:57:c3:82:77:8e:92:22:13:c5:d0:b1:4a:
02:cc:0c:1a:48:c1:3b:6b:98:81:3f:02:eb:3f:34:
6c:8a:d6:53:b0:e2:6e:62:88:8e:90:75:30:11:80:
97:0e:07:90:3b:a9:f5:10:c3:fa:d1:bb:c9:4c:cc:
29:91:60:6d:2d:fd:99:50:97:b8:20:f1:8d:90:1a:
5b:e2:b9:e4:12:96:46:5e:83:85:72:a4:7c:24:99:
8d:da:38:2d:51:52:a5:70:4a:d5:11:72:df:f5:f8:
af:47:cc:24:1a:90:64:0e:20:14:bc:f1:59:f7:d8:
21:c6:92:9a:66:4f:51:96:4f:43:26:19:3d:17:3e:
bd:b8:a9:a2:29:eb:25:77:10:cc:0b:ae:21:bd:c6:
b6:47:1b:8d:c0:da:ba:6d:a6:18:0b:0e:47:f4:75:
b1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:47:4D:46:E5:21:62:45:F2:99:B5:4B:27:6C:C1:32:B7:A7:9C:A2
X509v3 Authority Key Identifier:
keyid:7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:6b:e3:bb:32:94:98:e4:db:23:55:35:5d:76:3f:f3:82:01:
e6:d7:93:6f:63:67:7b:91:62:52:9d:f9:cf:bf:c8:06:0d:63:
c8:c8:a5:62:7d:dc:28:68:6b:2e:ee:7a:08:fe:09:67:90:f9:
a3:8d:60:40:ef:9b:09:b3:e5:02:c5:10:bc:ba:df:a9:cd:ee:
b7:c7:eb:05:7b:77:85:3d:61:16:13:b7:c7:32:de:27:a9:a5:
ec:db:8f:8e:8c:4e:e0:bd:60:cd:cd:0b:1c:44:73:10:cf:b0:
4a:cb:66:2d:c7:ca:f5:aa:62:6b:2d:0b:ca:68:2c:10:2a:21:
ab:59:c3:25:ce:ec:a7:5e:7f:7f:02:59:34:6d:b7:5d:fc:ce:
0d:c8:91:3a:14:c5:fa:bc:4d:db:15:6b:ff:0c:47:93:f2:6c:
d5:c0:f8:cd:ad:33:e0:2b:32:eb:8a:24:41:46:a7:5a:7b:31:
11:27:f7:ae:19:26:b3:d1:51:8f:40:2f:61:9e:97:ed:5b:95:
92:90:27:bf:a3:b2:8c:b1:66:43:97:c9:6d:c0:04:4c:f7:ea:
39:da:4f:ab:68:44:3f:97:f7:5f:be:86:07:21:e6:6c:bb:fe:
d2:73:13:ef:b8:ee:30:52:8b:3e:39:4e:07:e7:31:be:48:24:
c4:a1:34:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 21:34:32 2025 by rpki-client