This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
File: EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json)
Hash identifier: +j+sfGjBoj3n8PteMoA2n7dd+1pMJFBmqT3BlxLLj6E=
Subject key identifier: 6A:FD:07:2F:00:56:5F:0C:8C:74:B6:61:DB:58:7B:B5:D8:32:D4:67
Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
Manifest number: 0195
Signing time: Fri 19 Dec 2025 02:37:15 +0000
Manifest this update: Fri 19 Dec 2025 02:37:15 +0000
Manifest next update: Fri 26 Dec 2025 02:37:15 +0000
Files and hashes: 1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: 0Ay9LYm5UuLRuqFDSTwXf4sFUAUF+wg/3e8829DBAN0=)
2: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: FqhwzXNHRNY+XCePlaMxiVUp2AFCJ34p2xGpiCoaVzQ=)
3: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: 9LMpSs1G6DRXbhafQQ/fnV5UTQZp+aLbxUXgbbTPxiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:37:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Validity
Not Before: Dec 19 02:37:15 2025 GMT
Not After : Dec 26 02:37:15 2025 GMT
Subject: CN=6944ba5b-59e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:51:e1:36:04:a1:aa:c3:ca:e7:b1:90:e7:
e6:6b:5c:92:9d:bb:f3:f8:31:5d:62:da:96:14:21:
d7:3f:39:67:76:df:fd:1a:02:04:47:fa:f8:62:e5:
d1:62:36:36:95:30:d7:e8:f5:b0:04:0b:b9:b0:41:
bf:73:6f:bc:0a:91:4b:d6:2e:e4:f1:c2:a1:5e:c5:
a5:7f:ab:29:6c:66:ba:e3:fb:b2:c1:ee:85:a5:7b:
f2:4e:8c:c1:95:a1:24:a2:0c:26:a7:a8:2c:91:26:
1f:6c:1e:e9:09:e4:7b:3c:20:45:01:0f:94:b8:b6:
3f:e4:0b:83:37:3d:98:ca:8d:5b:69:e7:5e:93:79:
9d:d3:12:0a:e8:91:12:38:d0:57:fe:9a:bf:dd:99:
51:4c:52:67:5d:be:37:f7:77:e2:d1:c9:5e:51:ae:
4b:ed:eb:43:aa:02:73:b6:fa:2a:6e:f1:12:59:93:
ef:c1:49:cf:ca:cd:d8:7d:4c:e6:d5:cd:ca:a8:1a:
e5:68:a6:45:1d:fd:56:6a:e1:5f:64:8c:96:8c:10:
7a:63:44:33:15:d5:56:d8:3f:ef:da:72:b6:e4:ab:
2d:86:9a:20:3f:5e:e4:cf:d3:cf:b0:b2:5c:68:8b:
29:89:3a:c5:75:20:79:4c:c4:7c:a7:22:c5:b9:7a:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FD:07:2F:00:56:5F:0C:8C:74:B6:61:DB:58:7B:B5:D8:32:D4:67
X509v3 Authority Key Identifier:
keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:5c:d6:50:03:7a:d9:cc:17:ba:2a:00:40:fe:db:8a:cc:cb:
12:0b:2e:65:29:47:f3:8a:cd:b0:ff:64:2a:58:a2:7a:ad:c8:
f6:60:35:bd:2f:d4:d7:d1:86:dd:18:b5:c6:d9:14:1b:f3:86:
ad:ef:78:45:51:7d:93:e1:03:2a:57:48:3c:83:fa:f8:34:e8:
2c:82:c1:6e:84:2a:e9:eb:27:87:4a:d9:97:b7:35:c9:82:42:
ef:20:b3:f5:2a:06:85:5c:16:7c:5e:85:c5:cf:38:da:ca:5f:
af:b8:f6:05:24:a0:0d:43:f4:4a:d3:d4:ad:ed:30:92:55:71:
59:9c:a4:8c:d2:6a:f4:a8:05:4c:c7:b5:8c:af:fe:c9:16:4e:
3d:7f:f6:81:c9:4d:35:f2:6c:fa:b8:e6:62:56:0c:1e:ae:25:
aa:2e:17:ba:02:35:1b:61:2f:b1:c1:3b:c3:68:52:21:db:f3:
85:ab:5a:ee:83:ae:4a:cb:28:43:85:87:4c:f5:68:2b:f5:3d:
d1:10:a1:30:d7:b4:8f:51:a7:90:63:58:f4:19:e1:7a:fa:be:
22:cf:05:30:11:50:29:e7:9d:70:3e:2f:93:aa:de:fa:40:92:
cf:0f:30:73:2c:1f:3f:85:fc:d7:71:32:e9:8d:dd:49:fe:5e:
d1:ad:f6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:34 2025 by rpki-client