This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json)
Hash identifier: 1c1wcfzEhTbMFGw4UK+VIttoiZp+A5SwhS2zM+GhhUY=
Subject key identifier: 78:80:94:CD:AB:28:4F:A6:8B:AD:CF:6D:E0:AD:BA:7C:CD:4B:8C:4F
Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
Manifest number: 01AF
Signing time: Thu 18 Dec 2025 15:23:56 +0000
Manifest this update: Thu 18 Dec 2025 15:23:56 +0000
Manifest next update: Thu 25 Dec 2025 15:23:56 +0000
Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: wHcC0jkhWwLWnzuSW9Nc5DHIqFG8Bx9FvHimG9wEcn4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 15:23:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Validity
Not Before: Dec 18 15:23:56 2025 GMT
Not After : Dec 25 15:23:56 2025 GMT
Subject: CN=69441c8c-18e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:fe:95:da:9f:27:84:f3:cb:24:44:ee:00:
fa:1a:37:64:1f:2e:f7:b3:fa:89:2a:6b:e1:cd:79:
ac:c3:31:43:01:71:30:fa:7a:cf:cd:27:71:64:f6:
0d:00:21:ed:83:7c:1a:bf:17:19:06:01:a5:fb:31:
ae:7d:b8:45:1a:2b:70:c8:ce:22:f5:fb:48:16:71:
bc:61:a6:4b:f4:be:02:75:4b:48:c4:10:d7:f2:b4:
e5:7c:af:87:f3:b3:e3:3d:00:f8:ba:05:94:8a:69:
f4:1e:46:de:ed:b2:53:e6:2a:89:9e:bf:ea:ea:20:
f3:d3:e9:d0:a9:c0:95:75:03:d3:99:a7:4c:bc:f8:
85:75:f0:9e:b1:40:45:e4:36:66:76:d7:ac:9d:8f:
d3:c5:14:bb:68:24:82:99:d4:b6:ff:c9:34:d3:67:
36:dd:5a:b5:8f:d2:45:d3:5a:0d:23:e2:47:a6:f1:
fa:49:c5:c1:71:da:a3:38:40:d1:4b:d5:5e:fb:f9:
34:d4:de:60:bc:11:1a:3a:c4:67:10:64:6b:7d:79:
0a:fc:0f:0e:50:0a:e4:ef:fd:21:ba:ab:bc:c3:35:
01:7d:16:8f:7e:f2:7a:20:52:66:2e:3f:70:92:5f:
bf:fe:8b:fb:e8:80:28:37:31:13:93:e1:7c:ed:93:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:80:94:CD:AB:28:4F:A6:8B:AD:CF:6D:E0:AD:BA:7C:CD:4B:8C:4F
X509v3 Authority Key Identifier:
keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:dd:47:93:87:5d:0c:44:17:e5:bf:14:00:57:9b:da:31:00:
27:b4:12:00:2a:8a:2f:6d:3c:83:65:93:38:07:6c:67:1d:67:
89:74:6d:a5:99:03:24:79:86:50:88:ba:87:34:aa:44:15:f9:
7d:20:f8:80:95:48:ed:85:b1:d3:80:21:e2:f6:21:eb:01:c7:
6f:37:83:d7:5f:c3:fa:93:d7:d6:82:77:c2:76:ff:77:31:90:
75:4a:b0:e8:5c:95:b5:1b:83:66:de:2b:e8:74:83:62:c5:ee:
cc:f8:94:4e:8b:8f:6b:74:17:91:e4:98:c3:7e:62:c7:8e:24:
7e:30:6c:3d:bc:0b:9f:08:f5:7b:b1:8b:1e:42:73:63:52:28:
28:96:78:79:ce:b7:0f:89:47:62:8b:f4:11:f3:b0:15:54:e0:
36:5e:52:f3:d3:ae:e4:ac:46:a1:a8:75:eb:23:af:09:49:ba:
59:f1:2d:e4:3d:08:5c:2a:4f:12:16:cd:bf:8c:14:71:d1:db:
3d:fe:e6:98:85:1d:69:21:c6:17:e7:ca:42:fc:04:0d:aa:dd:
ef:2a:f9:cd:dc:19:03:39:dc:c3:5e:f5:0d:9b:8c:62:9e:bf:
f2:63:df:d7:38:d6:c7:08:da:4e:4b:33:01:46:17:f2:8b:ed:
ab:b6:d1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:54:38 2025 by rpki-client