This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
File: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft (raw, json)
Hash identifier: U82TMgIQD3LqiD8FEpAMpeTqx8qHyrfPhFDGrVvJi2k=
Subject key identifier: 33:A4:67:B5:93:61:CF:1F:38:5C:2D:54:7E:A9:8E:2B:1F:56:60:7C
Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F
Certificate issuer: /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F
Certificate serial: 0374
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
Manifest number: 0362
Signing time: Sat 27 Dec 2025 00:00:16 +0000
Manifest this update: Sat 27 Dec 2025 00:00:15 +0000
Manifest next update: Sat 03 Jan 2026 00:00:15 +0000
Files and hashes: 1: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl (hash: 6POFkUvZCtF+PWpHz3g/1Hn5wUdfVqgC7qkiLAqX7wA=)
2: 4D6093C2EAD711ECBF99921CC4F9AE02.roa (hash: xiPrPMHOIHm8UBSboZ4b2XrL9xz0B9904AKtlAJGxpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl
rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884 (0x374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E2CC, serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F
Validity
Not Before: Dec 27 00:00:15 2025 GMT
Not After : Jan 3 00:00:15 2026 GMT
Subject: CN=694f2190-c182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:0f:83:16:b8:74:d1:6c:f3:f0:2c:40:8a:
05:bf:a5:e3:7a:12:bb:4e:48:31:03:1c:aa:2f:22:
f3:77:f6:16:7b:4b:43:26:6d:6e:5c:41:91:6c:53:
7e:8b:9d:a0:30:a7:1c:1f:11:9e:67:9f:fb:52:78:
69:5a:02:30:65:37:00:77:a2:66:cf:b0:2c:24:f3:
6a:5b:c9:27:00:87:e8:32:b8:0e:8b:03:58:fb:43:
98:e9:f3:9b:c3:66:d3:db:f4:10:01:cb:dc:3b:d6:
8a:75:7e:dc:40:79:56:8f:77:6c:f9:66:ee:07:6f:
f8:ba:cd:ab:67:0d:93:aa:1a:0c:d0:e0:2e:68:98:
8b:79:58:ba:ca:bf:ce:1e:1a:3f:64:2b:61:c6:7d:
e5:28:d0:c3:3a:19:3a:1b:f9:cd:84:7e:3d:95:f0:
b7:e4:c6:0c:25:9e:ec:c2:44:43:cf:a5:73:18:4d:
f5:17:6f:b5:da:6f:ec:89:cf:78:3f:81:15:79:bc:
aa:40:e5:f2:d2:87:89:54:dd:86:0e:ff:66:4a:01:
20:86:84:64:cc:2f:92:12:ae:21:24:4d:7d:0a:e1:
db:38:90:1d:1e:78:66:45:7b:b8:9c:c0:6c:11:c6:
70:94:28:5a:bf:f4:fa:89:b6:7e:54:de:f6:12:c5:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A4:67:B5:93:61:CF:1F:38:5C:2D:54:7E:A9:8E:2B:1F:56:60:7C
X509v3 Authority Key Identifier:
keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e1:d6:ee:ba:60:66:1a:99:d6:e6:e9:c1:e8:bc:5e:e1:09:
44:46:8c:91:6f:f3:02:9b:8b:01:9d:a2:c3:39:c7:22:62:03:
98:48:66:fa:1d:46:89:b9:0d:fd:5f:5f:db:c3:62:f8:58:74:
8a:61:fd:84:3a:eb:74:e8:24:fe:35:89:db:c3:62:81:cf:bb:
1e:7c:68:52:06:67:1b:1b:c7:cb:a9:b5:ee:ee:1d:ea:6f:c6:
21:3b:6e:d6:50:fe:63:ce:07:c1:23:52:d5:35:81:38:09:18:
c3:0b:45:af:ab:c6:08:56:6e:77:be:d7:c3:9b:26:b1:72:bd:
2e:e2:76:e1:47:f0:45:5c:5f:0a:49:65:43:b4:13:8d:d7:2a:
32:18:00:c4:7e:62:d4:10:28:fc:62:82:cb:4c:58:40:27:34:
4a:f7:c5:2e:ed:70:55:52:59:65:69:e6:91:25:3e:de:19:db:
39:82:f3:69:3a:6b:98:f0:40:08:bb:26:bb:04:b5:c3:d5:4e:
e2:70:92:95:89:7d:96:2e:2c:ca:cf:61:d1:d1:28:a7:df:d5:
17:63:e4:dd:ae:f0:e5:9e:c1:ca:e2:e5:c7:85:a7:71:0b:21:
cd:15:8b:3a:81:8f:b2:14:8d:05:46:48:8b:cc:5f:f2:3c:53:
5d:80:a7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 19:12:16 2025 by rpki-client