This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
File: EpTEi8aWr-ggvRWC80NnutqwJDI.mft (raw, json)
Hash identifier: mm9i5RICNCNbmpnFKiP7JOhMBu3OsBpw+EAgnhik1x4=
Subject key identifier: 1A:95:81:ED:08:34:0A:50:F6:DC:A4:60:61:AA:DF:CB:63:07:AC:8A
Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
Certificate issuer: /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Certificate serial: 04DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
Manifest number: 04D4
Signing time: Tue 30 Dec 2025 22:59:30 +0000
Manifest this update: Tue 30 Dec 2025 22:59:30 +0000
Manifest next update: Tue 06 Jan 2026 22:59:30 +0000
Files and hashes: 1: EpTEi8aWr-ggvRWC80NnutqwJDI.crl (hash: rfG8plx12BJzSfLIpPnkP1wK1juppBhCLWRWET/EWHc=)
2: 2A84118CE0A311EC9CF2B738C4F9AE02.roa (hash: m8kc5pmxyNUtzE4T6XJqZukX44I+76FHWWNgV7rp9ww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Jan 2026 22:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1245 (0x4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117817, serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Validity
Not Before: Dec 30 22:59:30 2025 GMT
Not After : Jan 6 22:59:30 2026 GMT
Subject: CN=69545952-26e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:f9:5b:f2:49:59:26:18:00:3e:a0:6e:d4:
41:98:b4:fb:b9:63:10:8f:ee:a4:fb:09:04:13:ee:
0e:cd:13:b9:c3:44:42:8b:6b:23:69:e4:67:65:32:
42:26:28:7e:7c:32:d2:84:a1:82:0d:bc:0c:a5:73:
e0:c6:eb:ed:9f:82:71:55:59:a9:5e:ce:57:33:3b:
52:3a:82:3e:ea:5c:bf:35:22:a5:e3:55:4a:a4:3d:
2b:46:ae:c7:15:77:8a:21:be:5e:e1:29:5d:2b:f3:
1b:c4:93:c2:44:3d:26:54:5f:f8:03:53:65:bd:1d:
9d:89:c6:ed:62:d5:9c:72:d5:ca:83:ef:a0:f6:61:
75:d4:e1:c0:98:37:60:6c:78:0f:6e:89:cf:3c:9d:
49:b5:f1:4b:d8:5f:94:fa:98:a1:98:f6:37:95:6e:
03:ce:61:bd:5a:9b:c2:01:63:86:f6:0b:75:15:3e:
5f:28:d6:1d:0a:da:a2:44:ce:b7:51:02:25:89:06:
69:c2:bf:66:41:ec:a0:ea:b8:03:f8:21:1c:75:00:
c4:a5:39:18:95:12:ba:9c:8b:14:50:12:6b:da:f0:
9a:74:e0:6e:53:b0:12:85:a6:dd:b4:0b:ea:d8:4f:
6a:a4:2d:e2:bb:da:08:5f:43:5f:98:28:bd:ad:a7:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:95:81:ED:08:34:0A:50:F6:DC:A4:60:61:AA:DF:CB:63:07:AC:8A
X509v3 Authority Key Identifier:
keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:7e:8e:1b:06:3c:47:b4:75:69:0c:e3:69:87:eb:76:5a:e4:
68:22:6a:8d:6b:74:e5:86:e5:3f:7d:f4:eb:13:c1:74:7e:6e:
6e:3d:1e:db:58:ac:bf:be:38:c3:86:3e:25:a2:04:da:a5:e5:
a4:8d:fa:83:e1:b2:fa:5c:3f:be:f6:bf:72:23:d9:6c:3c:b8:
f6:85:44:ca:aa:60:a6:7a:e8:da:aa:70:6d:58:7b:17:59:13:
dd:d4:af:0c:03:90:55:64:f2:b2:97:31:69:b5:1a:ee:61:fb:
da:a7:b0:36:e9:90:6a:67:2d:7b:48:42:8b:51:c7:86:30:2e:
c5:28:20:4a:8e:3b:ae:97:2a:5d:9c:30:dd:e0:95:0a:9e:4f:
5f:91:22:66:55:d3:8a:ff:af:d5:0e:89:56:65:b3:59:6f:46:
3b:20:75:e0:1a:b1:0b:c4:fb:28:0b:ba:38:0d:20:6f:9b:37:
2f:ce:e2:2e:51:9a:6a:2c:9a:84:a8:55:ef:df:22:4c:95:40:
49:29:96:12:33:fd:2c:4f:34:fd:94:99:53:c8:39:f4:92:5a:
56:9b:f8:5a:41:45:11:22:40:b9:4a:e7:3a:25:a6:24:e4:8b:
79:53:39:cd:7f:d1:28:41:de:27:88:66:10:04:1d:9c:74:4e:
c7:d4:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 05:56:04 2025 by rpki-client