This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft
File: tEoweljCbW-uB_4_KF7Wo4K0y0M.mft (raw, json)
Hash identifier: H6/GdAaCYrFYU8i+2BYoRy5opLrAFTzpi85Yl2y1jV0=
Subject key identifier: 7F:46:08:A7:7F:32:2D:26:F1:54:D2:1E:1F:2E:1E:43:B1:58:3E:B3
Authority key identifier: B4:4A:30:7A:58:C2:6D:6F:AE:07:FE:3F:28:5E:D6:A3:82:B4:CB:43
Certificate issuer: /CN=A9165CEF/serialNumber=B44A307A58C26D6FAE07FE3F285ED6A382B4CB43
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft
Manifest number: 01A7
Signing time: Sun 21 Dec 2025 02:30:36 +0000
Manifest this update: Sun 21 Dec 2025 02:30:35 +0000
Manifest next update: Sun 28 Dec 2025 02:30:35 +0000
Files and hashes: 1: tEoweljCbW-uB_4_KF7Wo4K0y0M.crl (hash: rqLTE5EwLNFMzTbPc0tKBI/1jXypvvxRUw0NsLMvN7E=)
2: CC954D50577211EEA63EF217C4F9AE02.roa (hash: G/lc0ZJgssXnnKfa+ln20gT1bMCoGUtTDqNS7CqtsRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.crl
rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165CEF, serialNumber=B44A307A58C26D6FAE07FE3F285ED6A382B4CB43
Validity
Not Before: Dec 21 02:30:35 2025 GMT
Not After : Dec 28 02:30:35 2025 GMT
Subject: CN=69475bcb-bc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:68:0e:33:a0:b1:ef:0b:9a:15:5d:26:8b:1c:
23:8d:54:7d:26:c4:b6:62:d1:b8:bd:a1:1c:00:1d:
ab:88:36:53:28:0f:94:02:b4:f6:cb:63:f5:80:96:
fb:94:0f:8e:51:84:d4:c1:21:60:2d:41:f6:3f:0e:
ca:e1:54:98:f4:3b:94:9d:6e:f5:df:90:0d:de:bf:
f9:06:58:d8:58:25:bc:64:3f:77:e2:48:e9:84:80:
cb:ca:3c:f3:0e:43:a9:fc:1b:a8:63:25:1c:a8:32:
78:17:f2:48:98:e9:4c:cf:cf:af:75:9d:e4:f8:56:
7f:c7:15:52:24:65:1f:38:26:01:fa:8a:94:13:0a:
39:2d:10:d7:5a:29:24:f4:7f:f8:48:0b:82:d4:e2:
6f:a9:4f:2c:dc:87:92:ab:be:d5:db:e2:64:f8:ba:
a0:55:3b:68:24:af:a6:87:3c:81:5b:2d:73:c9:8f:
49:53:7f:13:17:68:aa:8a:f3:35:8f:f9:58:aa:0c:
9f:a3:1d:d5:51:f9:bc:86:73:c5:a0:ce:51:06:f3:
0f:c3:78:00:f4:c8:c3:ea:0b:fc:64:2f:48:0b:40:
9d:58:ec:13:9a:40:7a:ac:7f:ea:14:b4:ce:56:49:
ca:8f:15:5b:00:0d:e3:1b:ff:5a:fd:2f:50:e2:9e:
54:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:46:08:A7:7F:32:2D:26:F1:54:D2:1E:1F:2E:1E:43:B1:58:3E:B3
X509v3 Authority Key Identifier:
keyid:B4:4A:30:7A:58:C2:6D:6F:AE:07:FE:3F:28:5E:D6:A3:82:B4:CB:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:36:cf:21:99:a1:e4:dc:63:ce:61:30:71:e1:9d:64:5c:1a:
de:00:15:ef:86:18:7e:4f:99:f5:31:8a:7f:cf:29:f6:4c:b6:
f6:9b:cc:ad:54:4f:7f:1b:c5:7c:7c:e9:22:e4:74:00:fb:ae:
1f:65:92:d4:aa:1d:ca:64:5a:80:0d:fe:0c:66:9d:8d:30:14:
2b:c0:90:c4:2c:5b:9a:a1:ef:65:bd:df:d8:94:82:2d:54:c5:
2e:30:9a:b4:3f:6e:f2:e8:f6:7b:7b:ac:a2:a9:9e:e8:25:40:
07:0d:2c:0c:ae:88:ad:e9:66:9b:dc:2c:70:2a:55:90:52:d4:
f0:4a:42:b2:24:b4:8b:f8:28:63:a3:54:b6:7c:d8:db:90:5e:
c4:b5:c9:10:8f:fb:89:3f:41:37:d7:c0:e6:8e:e4:8c:90:8c:
fd:95:00:c4:bb:04:30:b3:b2:45:2b:5d:aa:e2:36:11:a5:54:
7b:9c:2d:d1:1c:96:2e:9c:98:f2:7c:bc:42:79:b4:65:5c:76:
71:aa:7d:5a:09:8a:7f:df:44:ff:d1:83:72:9e:a2:10:84:f0:
2c:59:7b:f6:c9:04:4a:c2:98:ee:15:6f:ca:15:bc:ee:fa:bf:
12:da:18:e4:62:c8:ac:b1:c7:08:e9:98:61:c7:75:4d:a6:a2:
d8:4c:05:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:10:20 2025 by rpki-client