This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft
File: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft (raw, json)
Hash identifier: lFtcMBXVGYcqQG4aMheJWl9pchMwYL++7+7792944GU=
Subject key identifier: 8F:B4:F3:E9:37:EB:E7:7C:1B:D5:17:37:AB:16:CE:6D:4C:47:75:93
Authority key identifier: 78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4
Certificate issuer: /CN=A9163824/serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4
Certificate serial: 266D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft
Manifest number: 2DD2
Signing time: Thu 18 Dec 2025 15:37:43 +0000
Manifest this update: Thu 18 Dec 2025 15:37:43 +0000
Manifest next update: Thu 25 Dec 2025 15:37:43 +0000
Files and hashes: 1: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl (hash: i8crJ8Zam4bBo8RwgdBtrfLJsQCUJmlsZnOHQN4dmnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl
rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 15:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9837 (0x266d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163824, serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4
Validity
Not Before: Dec 18 15:37:43 2025 GMT
Not After : Dec 25 15:37:43 2025 GMT
Subject: CN=69441fc7-726c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:d5:dc:8f:2d:3e:c9:f2:13:cc:ef:4d:7f:
e4:6c:06:b6:4c:ad:4d:e5:f3:c5:8d:1f:98:eb:9e:
f4:12:2a:4d:e0:04:ae:d2:c7:e4:7b:5b:f5:f6:6f:
66:a0:81:8e:c7:e1:83:fc:6f:57:b8:3b:51:c6:8c:
dc:9d:ef:62:bd:02:dc:7e:70:a0:cf:bb:fc:8e:54:
37:0b:d2:20:41:a6:65:54:39:3a:b0:b9:08:9a:75:
d0:7f:88:40:30:1a:76:59:3f:52:ca:b8:23:53:be:
1b:45:c6:ec:56:5d:8c:46:7b:f5:ab:17:cd:eb:1b:
80:83:0b:f9:de:58:99:76:ec:6c:2a:81:d6:5c:d5:
65:e7:10:ac:f7:77:11:c6:35:fd:12:81:87:7a:48:
3b:26:83:5f:aa:69:0b:57:d5:b1:00:49:d5:a8:35:
53:ce:13:fc:81:2e:51:c8:34:0a:33:f0:84:9e:5b:
24:ea:32:97:28:86:da:d8:f2:99:4e:c7:0b:a6:63:
b3:b6:85:92:02:7e:0a:be:ca:1b:83:7e:60:e8:72:
87:fb:11:17:88:0f:90:3b:d6:ce:0b:2b:81:7d:7f:
72:9f:45:af:72:de:61:34:5d:2b:b2:be:21:63:75:
59:0e:1c:84:98:39:62:ac:80:be:f9:b7:16:a2:b4:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B4:F3:E9:37:EB:E7:7C:1B:D5:17:37:AB:16:CE:6D:4C:47:75:93
X509v3 Authority Key Identifier:
keyid:78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:09:93:40:66:cb:e0:37:a9:78:c1:df:4d:99:68:75:d1:53:
7a:fe:18:c7:af:b3:b2:18:d0:96:8e:c3:ef:bf:ae:2b:73:f0:
f9:d0:a7:15:e8:74:2d:e8:69:cf:ec:0d:cd:21:9f:98:b6:90:
85:fb:55:2c:26:c5:19:84:b9:ac:19:c8:98:7b:f3:c0:5d:7e:
f0:c3:93:4b:4c:a4:c3:d9:4f:a1:13:01:73:65:d4:73:b8:e3:
7b:3f:bd:79:e9:f0:4a:e4:8c:a7:0b:a4:9d:08:19:8b:9e:3e:
26:3b:7f:42:0e:20:90:87:00:a7:6c:c1:d1:a9:47:f4:7a:f3:
6d:ed:1c:61:58:78:53:12:f1:16:fa:d1:11:79:10:f1:0a:4e:
33:8b:e7:36:51:59:85:b9:39:b2:39:48:18:83:42:e5:dd:01:
bb:20:7b:5a:7b:13:59:37:ce:5d:cc:71:77:84:9c:c4:b4:13:
4f:f7:7a:0a:57:c8:b0:f2:1d:fb:22:87:8b:49:1f:e0:93:95:
59:bd:b0:a5:68:bf:5e:fd:8e:36:cc:5c:c8:26:0b:1f:f2:a7:
61:da:1f:cc:fb:9a:ad:ec:78:b7:b5:30:7a:6e:6f:43:f8:01:
3e:cd:fa:f4:a7:d3:00:95:81:63:19:ec:fb:7c:a4:51:01:af:
96:af:c4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:03:59 2025 by rpki-client