This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
File: e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft (raw, json)
Hash identifier: W66p4+gKanGGVDWgdILpDAk7FGH4XoIn2OoKdHrQb+Q=
Subject key identifier: 80:0D:C0:5E:E6:D0:6F:F4:29:D6:B9:91:88:BB:BE:16:E9:67:85:F3
Authority key identifier: 7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97
Certificate issuer: /CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897
Certificate serial: 07E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
Manifest number: 07D4
Signing time: Thu 18 Dec 2025 20:50:36 +0000
Manifest this update: Thu 18 Dec 2025 20:50:36 +0000
Manifest next update: Thu 25 Dec 2025 20:50:36 +0000
Files and hashes: 1: e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl (hash: +bxGYCBd2TV+27BNnFJCaIv+6mZO3GsBbAxrTjw1XjY=)
2: FAFC712C485611EDB713C522C4F9AE02.roa (hash: fq5HCtnKfkn7/JuyPv2TRFDGy6fu3YXaJZP30LJYt74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl
rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2023 (0x7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115964, serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897
Validity
Not Before: Dec 18 20:50:36 2025 GMT
Not After : Dec 25 20:50:36 2025 GMT
Subject: CN=6944691c-c672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:9e:fa:44:e1:5e:5d:eb:1c:51:37:a6:7f:
42:f0:10:76:9e:1a:34:58:e9:05:51:71:4f:42:30:
65:15:e2:a8:9e:5f:8c:9d:4c:01:64:e2:9d:74:53:
37:27:99:fe:11:cd:19:b7:a2:ca:38:9a:9b:89:52:
ce:0f:33:a9:5c:0d:b5:6a:cc:a1:1a:56:6a:09:bb:
0b:51:01:1d:3a:b3:c3:f7:14:db:7d:a3:27:6b:78:
13:ea:4a:02:47:af:56:cc:9f:01:e1:1a:48:91:1b:
ca:ea:87:67:03:43:43:02:59:cf:08:72:6f:1f:eb:
cd:78:ac:07:e1:27:11:f9:a2:21:cd:0f:ec:31:30:
6e:6d:9f:21:6d:29:bb:a5:b2:10:af:da:f6:71:c3:
99:f7:1b:d7:bb:16:83:fd:2b:aa:b3:44:ac:4e:ab:
81:5d:9c:0d:58:d1:cb:f3:cb:b6:db:89:fd:d6:d1:
e2:49:22:70:c0:f0:3f:bc:1b:43:69:ad:aa:cc:53:
1c:ec:3c:00:23:64:cf:30:27:65:64:6f:6e:c1:c0:
6e:47:3f:74:7c:9e:3e:20:e5:3f:d9:22:d4:60:df:
de:73:28:b0:54:55:82:dc:5e:7f:0b:96:b0:80:e7:
d5:f9:cd:11:3e:bf:2f:c6:ae:81:62:b4:ac:fd:26:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0D:C0:5E:E6:D0:6F:F4:29:D6:B9:91:88:BB:BE:16:E9:67:85:F3
X509v3 Authority Key Identifier:
keyid:7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0f:7f:34:d6:b7:2f:de:ea:09:09:38:73:bc:ea:b3:f2:a5:
e8:58:e3:ce:00:14:6f:85:bc:72:64:5c:57:35:67:97:6d:26:
88:63:19:fc:04:c3:0b:c3:00:ed:e3:ca:5f:a3:d4:65:a8:d5:
db:66:42:6f:dd:7e:0a:da:f3:13:94:9c:e5:61:88:51:56:e6:
8b:55:d3:a2:61:34:a6:ba:60:dc:3c:83:1f:b4:6d:85:5c:19:
70:c6:a9:97:ff:a6:f4:a8:56:14:1f:a1:8c:6c:31:2f:1f:ab:
b5:7a:48:48:47:a3:3d:71:20:73:b9:fc:76:3d:24:e3:8f:fd:
33:25:35:3a:7e:87:11:98:91:d7:41:a1:7c:ab:48:28:63:6e:
96:51:44:57:38:b4:56:cf:41:07:99:d1:e1:f1:3e:f5:1f:6e:
ef:9e:b2:7e:21:2b:f1:d1:b2:c0:6b:be:2e:32:b1:d3:19:93:
4f:47:f8:96:7a:9f:13:82:b7:0e:77:5a:02:24:9d:07:03:ae:
b3:5e:38:e5:cc:ad:57:94:71:59:a1:5d:b3:23:e9:28:79:ac:
c7:55:49:fd:85:62:de:43:41:71:74:6b:8a:dc:9f:e0:1f:a9:
0f:67:94:2a:74:79:df:43:b7:d3:42:06:11:f3:95:0c:df:c3:
84:23:89:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTU5NjQxMTAvBgNVBAUTKDdCNzIxMzg4RkQxM0U4QUU0M0M5N0YwMzAxOTgxRDIy
OTJDODg4OTcwHhcNMjUxMjE4MjA1MDM2WhcNMjUxMjI1MjA1MDM2WjAYMRYwFAYD
VQQDDA02OTQ0NjkxYy1jNjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Q6e+kThXl3rHFE3pn9C8BB2nho0WOkFUXFPQjBlFeKonl+MnUwBZOKddFM3
J5n+Ec0Zt6LKOJqbiVLODzOpXA21asyhGlZqCbsLUQEdOrPD9xTbfaMna3gT6koC
R69WzJ8B4RpIkRvK6odnA0NDAlnPCHJvH+vNeKwH4ScR+aIhzQ/sMTBubZ8hbSm7
pbIQr9r2ccOZ9xvXuxaD/Suqs0SsTquBXZwNWNHL88u224n91tHiSSJwwPA/vBtD
aa2qzFMc7DwAI2TPMCdlZG9uwcBuRz90fJ4+IOU/2SLUYN/ecyiwVFWC3F5/C5aw
gOfV+c0RPr8vxq6BYrSs/SYCkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIANwF7m
0G/0Kda5kYi7vhbpZ4XzMB8GA1UdIwQYMBaAFHtyE4j9E+iuQ8l/AwGYHSKSyIiX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTk2NC9FRkMyQ0NCQzI3
MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZLNUR5WDhEQVpnZElwTElp
SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2UzSVRpUDBUNks1RHlYOERBWmdkSXBMSWlKYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NTk2NC9FRkMyQ0NCQzI3MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZL
NUR5WDhEQVpnZElwTElpSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtD3801rcv3uoJCThzvOqz8qXoWOPOABRvhbxyZFxXNWeXbSaIYxn8
BMMLwwDt48pfo9RlqNXbZkJv3X4K2vMTlJzlYYhRVuaLVdOiYTSmumDcPIMftG2F
XBlwxqmX/6b0qFYUH6GMbDEvH6u1ekhIR6M9cSBzufx2PSTjj/0zJTU6focRmJHX
QaF8q0goY26WUURXOLRWz0EHmdHh8T71H27vnrJ+ISvx0bLAa74uMrHTGZNPR/iW
ep8TgrcOd1oCJJ0HA66zXjjlzK1XlHFZoV2zI+koeazHVUn9hWLeQ0FxdGuK3J/g
H6kPZ5QqdHnfQ7fTQgYR85UM38OEI4kW
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:55:01 2025 by rpki-client