This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json)
Hash identifier: fLPl24TSuBHqgEPhbToCHghi3TJxZgM9CCnnnGVJ0+s=
Subject key identifier: 87:E2:BA:D1:F7:1E:73:56:E7:19:5B:0F:D0:71:27:80:51:DC:AB:5A
Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Certificate serial: 01B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
Manifest number: 01B4
Signing time: Sun 28 Dec 2025 15:19:14 +0000
Manifest this update: Sun 28 Dec 2025 15:19:14 +0000
Manifest next update: Sun 04 Jan 2026 15:19:14 +0000
Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: D/GFSpAhNLqbo32bxWyZ6sGgQeky3f7GS1Po2vwBYIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 15:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Validity
Not Before: Dec 28 15:19:14 2025 GMT
Not After : Jan 4 15:19:14 2026 GMT
Subject: CN=69514a72-b957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d0:34:71:05:d1:82:e1:8b:8e:d5:fc:2a:ad:
14:f6:58:26:a7:41:b5:22:80:74:bb:f0:db:8b:02:
50:7b:df:07:82:d4:b9:15:6d:2c:45:0c:9f:20:0b:
d4:b7:76:ab:c3:cc:d5:04:3a:35:6e:c7:24:fc:ec:
a7:42:82:5c:32:94:b1:91:aa:c1:9b:28:79:86:99:
b0:1b:00:01:7a:65:a2:4c:a4:30:81:1e:8a:d0:e8:
b3:55:99:7e:c4:36:68:35:0c:6d:4c:d0:4c:d2:5c:
ea:61:95:64:8b:71:23:17:40:a9:15:7c:47:ef:00:
5a:04:0f:b3:5d:fb:bc:be:1a:fa:42:6d:ca:d3:d0:
1e:3f:97:21:42:fb:9a:4e:8a:ef:b2:ef:50:b5:96:
28:a7:e6:29:e5:79:e7:1c:01:79:d7:0e:db:b4:88:
73:dd:3a:7f:70:bf:df:2c:e2:fb:67:ca:f8:43:75:
ff:2d:31:fc:25:fa:5b:df:6a:7d:4f:1e:58:f5:4b:
4c:3c:93:af:eb:a7:b9:b4:2b:e0:81:a6:e7:5c:bb:
0c:76:0b:59:f5:9c:4e:3e:92:ae:90:13:73:dd:62:
35:73:ea:00:c7:c6:d1:48:33:2d:19:f0:b5:de:d4:
70:79:5b:a3:bf:a1:70:39:7a:fe:d0:ae:e4:4c:49:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E2:BA:D1:F7:1E:73:56:E7:19:5B:0F:D0:71:27:80:51:DC:AB:5A
X509v3 Authority Key Identifier:
keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:61:46:c2:64:88:8e:b5:66:5d:99:fd:ab:d6:38:ef:91:58:
0a:fd:a4:2a:ba:76:06:68:14:d1:7d:8d:e1:31:32:83:6c:a4:
3c:f3:79:ce:79:58:78:e0:93:d1:f7:41:64:f8:da:03:81:79:
a3:ee:63:e6:d9:1a:07:db:56:0c:58:5b:8a:b8:b2:69:17:ac:
29:12:81:fc:77:ee:cc:69:79:54:d0:b0:4d:eb:bc:da:e9:04:
42:22:f4:98:49:9a:70:f0:a8:ad:4e:71:51:d1:6e:ce:2b:df:
8a:1d:90:b3:c1:21:ef:9f:86:aa:cb:09:72:5e:a4:91:32:44:
67:10:04:38:7b:a5:0d:ca:9e:88:88:a9:b1:38:37:92:af:d8:
ed:24:7f:4f:b2:69:31:43:ec:a2:84:07:9e:05:4d:67:f3:59:
9a:89:37:c8:9e:15:68:44:a9:51:7b:ac:ae:c8:bc:fd:85:df:
4c:6b:54:64:e3:a9:1c:54:e8:83:c0:80:06:ea:24:53:b7:87:
c3:75:69:a3:0a:56:f0:2c:e4:cf:44:fa:aa:a1:24:6b:57:dc:
35:01:80:55:bd:77:15:c7:f7:6c:12:3b:70:41:02:5b:17:48:
ff:02:df:d6:5c:00:8a:c7:80:dd:40:bf:28:b5:fc:fb:01:02:
8f:e8:de:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 14:55:29 2025 by rpki-client