This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft
File: E39piIvunMg7q0H68slC0Qryy2U.mft (raw, json)
Hash identifier: BYlvxJ4DqQnqHmtKerO82IShlz5LDTqBu3SFhzy+l9I=
Subject key identifier: 11:2A:AF:85:F8:A8:22:1A:B8:ED:7A:5B:AF:58:50:A4:6E:B7:9B:71
Authority key identifier: 13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65
Certificate issuer: /CN=A914B30A/serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65
Certificate serial: 04DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft
Manifest number: 04DA
Signing time: Sat 20 Dec 2025 23:02:45 +0000
Manifest this update: Sat 20 Dec 2025 23:02:45 +0000
Manifest next update: Sat 27 Dec 2025 23:02:45 +0000
Files and hashes: 1: E39piIvunMg7q0H68slC0Qryy2U.crl (hash: Rv2E/VBnR3l7CRKkhhFQS6SgHaRTL1v9ULdiCjORbGM=)
2: 279EE41683E111ECBB82F47DC4F9AE02.roa (hash: qE3lLSo7fB7VrFOUOH9TpjKgPsy7cNI6EqgXlJf8kVM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl
rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 23:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1247 (0x4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B30A, serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65
Validity
Not Before: Dec 20 23:02:45 2025 GMT
Not After : Dec 27 23:02:45 2025 GMT
Subject: CN=69472b15-7f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f5:7a:79:68:6c:48:ff:c0:df:9b:14:7f:10:
c6:68:00:6c:ca:20:cd:28:fa:bd:57:68:88:19:26:
d2:df:44:4c:9d:cb:de:b4:e4:c7:0a:79:d2:4a:c8:
45:46:df:48:49:c8:44:7e:3c:39:ab:41:a9:b4:d1:
6e:c6:c6:db:0b:3e:63:55:90:f5:29:8a:97:7d:f2:
47:99:40:80:0b:b2:17:da:c7:88:1b:39:a2:a4:59:
f6:26:8c:1c:5d:14:ed:4a:d2:6b:13:86:16:b9:c0:
6a:15:a1:de:44:35:1a:97:a3:c0:e9:29:57:1b:8e:
60:ca:f9:55:15:3a:61:06:65:99:8b:77:bb:6e:69:
08:b6:a1:bb:1d:a3:8e:bf:1d:2f:e7:b0:65:c8:cc:
9e:d8:c0:3c:5e:63:f7:15:da:8d:67:f4:af:5b:d8:
92:44:e9:76:23:75:ee:9b:61:7e:59:2d:d0:6d:7f:
3f:95:8e:17:9e:5e:72:ed:12:a5:23:10:8f:e7:59:
09:bf:5d:02:89:cd:85:d9:05:7b:2d:92:e5:e1:cc:
b4:1f:fe:56:d8:6c:71:c4:c8:87:3d:32:d8:3c:34:
c1:44:5c:a7:fb:44:a0:09:e9:56:ce:66:a5:f8:5c:
8f:b2:46:ee:c2:bf:b2:73:8f:d9:5c:58:c0:c4:d6:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2A:AF:85:F8:A8:22:1A:B8:ED:7A:5B:AF:58:50:A4:6E:B7:9B:71
X509v3 Authority Key Identifier:
keyid:13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0b:10:15:8c:4e:f5:0f:8d:71:65:f1:ef:1f:30:32:c3:7d:
ab:ec:ca:db:5a:52:06:ae:fd:9a:45:a0:d8:ae:e2:5f:33:09:
87:09:ea:d6:7a:3c:f5:5a:99:be:ec:ef:1a:f1:32:c3:d0:98:
7e:ac:95:90:3e:4f:88:09:dc:4f:6a:e5:d7:83:cc:09:7a:a7:
e4:48:07:77:3f:9b:8e:0a:a8:c9:03:01:2b:7c:14:6d:d7:db:
93:b1:47:90:fa:dd:9c:a8:99:d4:81:ce:0c:9b:ac:a7:6a:cd:
9d:99:2a:3e:a1:f0:e6:ee:fe:d6:67:e4:b7:7a:39:1b:07:86:
7c:1b:9f:b2:50:77:2d:7e:96:ca:62:02:af:cb:cf:8f:a7:65:
3f:c5:26:8d:6c:c6:b6:8f:9c:fe:9d:fc:20:d7:02:3b:02:fe:
d7:a7:3a:23:a1:74:05:87:a3:e8:1f:4e:8a:9f:44:45:93:b1:
ba:07:58:f4:76:9f:19:5d:1f:4d:72:df:14:00:d2:6b:35:b7:
98:57:0e:60:be:33:a1:53:d0:6f:07:1c:80:94:7f:e0:cf:5c:
3a:5f:b0:ae:b8:6c:e7:21:da:cf:38:4d:07:e2:d5:f2:5a:74:
a9:0d:b2:86:3c:81:e6:3a:60:d6:5e:b7:21:3b:f9:25:76:7e:
92:d5:3b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:20:23 2025 by rpki-client