This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft
File: tN_eECSMkMVYSwFupua0nnge2CA.mft (raw, json)
Hash identifier: sw3pp4JOqEK8pIn9MtoTdihbWFO3w8KoMJVJgZ6OpJg=
Subject key identifier: 40:0D:23:5C:27:47:81:09:79:70:12:2B:32:D3:F4:5F:21:98:97:B1
Authority key identifier: B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20
Certificate issuer: /CN=A9174A5B/serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820
Certificate serial: 06FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft
Manifest number: 06F5
Signing time: Thu 18 Dec 2025 21:21:51 +0000
Manifest this update: Thu 18 Dec 2025 21:21:51 +0000
Manifest next update: Thu 25 Dec 2025 21:21:51 +0000
Files and hashes: 1: tN_eECSMkMVYSwFupua0nnge2CA.crl (hash: 8w7cxep7xO8kOV/XuHUmFoluqmn1kGRBIB4KyqWZHqs=)
2: 9E9FA4C40AB011EC8906F464C4F9AE02.roa (hash: y+B4buIfbruqaejaK6x75+RSn7pa5KBjABUZlRGt/q8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl
rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:21:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174A5B, serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820
Validity
Not Before: Dec 18 21:21:51 2025 GMT
Not After : Dec 25 21:21:51 2025 GMT
Subject: CN=6944706f-9e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:f7:7a:bb:d6:40:2b:91:64:15:9f:c0:03:
31:e1:48:6f:78:81:d4:2d:ed:f5:a2:d9:ee:ee:79:
50:81:dc:d5:37:83:78:35:d4:f1:53:85:b2:32:f2:
c7:5f:96:2a:f1:7b:af:f6:6c:16:5e:e4:42:0c:d5:
ee:12:8c:a1:7c:26:ee:91:14:4d:98:12:4e:e4:ab:
5d:39:15:59:6d:f3:cd:c4:07:07:36:1c:28:ca:ce:
e2:f9:41:3c:dd:34:03:b0:7a:2c:4d:15:c4:3d:24:
39:00:e4:b1:50:ea:95:a1:02:31:b0:5b:8b:4a:47:
4b:d1:69:9e:19:65:73:56:d2:f4:81:9e:3d:15:e4:
63:76:29:8d:cc:95:e9:9d:47:10:77:22:16:1b:fb:
ca:5e:69:7b:e3:ee:b3:aa:57:d4:b3:03:18:29:d8:
46:04:12:65:a6:37:cb:e1:b0:ea:a6:21:5a:30:68:
82:77:a4:db:ea:d2:8f:45:0a:de:d0:f9:86:43:e9:
82:61:7f:42:bb:51:59:aa:d4:28:68:e2:90:1a:28:
12:0f:06:8b:7b:88:05:90:42:74:c5:dc:e4:9e:37:
69:f6:fa:08:aa:f2:35:30:60:81:13:f1:51:58:a6:
65:dc:db:45:cc:9e:d2:09:a9:5d:35:f0:03:8d:70:
87:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0D:23:5C:27:47:81:09:79:70:12:2B:32:D3:F4:5F:21:98:97:B1
X509v3 Authority Key Identifier:
keyid:B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e2:9c:2b:d6:e7:67:b4:11:c6:ab:10:2d:23:59:23:1a:08:
c1:f4:a5:92:67:c0:e2:39:af:75:01:a9:cb:29:42:41:9e:22:
b3:78:51:34:51:67:aa:9a:b4:63:c7:d2:c4:67:e2:02:d7:d8:
46:d6:d2:86:68:0d:2c:9f:bf:4a:56:ff:f4:d4:ff:4f:84:7c:
df:85:e6:53:a2:29:6f:5b:96:7e:73:d2:45:3c:39:8f:65:c9:
7c:58:8d:a4:d2:98:62:54:90:d3:30:21:5d:3e:b2:3b:5c:c1:
81:ed:be:f5:9f:f0:38:f8:67:c0:a8:39:67:a9:ca:57:9f:c4:
6a:4c:c2:8d:ac:d7:8d:17:62:61:5e:31:02:63:cb:87:f5:2b:
5a:02:80:c0:3d:2e:1d:b5:15:83:56:3b:45:68:71:c8:25:23:
e5:ef:a5:6c:91:b9:10:e1:ea:63:b1:3c:a4:9f:fa:7d:47:8a:
09:0f:c9:92:00:54:57:9e:7f:d4:53:a2:e0:e8:cf:af:ce:e6:
02:b7:3e:94:cf:e2:7d:5d:ba:5d:94:91:7e:9e:31:49:4a:96:
8e:d6:e6:ef:5d:f6:f6:38:8b:2d:81:37:83:51:33:3d:6a:dc:
65:33:00:9f:8c:11:51:7d:08:ea:f0:23:cd:b9:21:41:03:c0:
b2:91:4d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:30 2025 by rpki-client