This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
File: eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft (raw, json)
Hash identifier: zcYGN1zLaK7W1/gcEeRwWGnqDXC0VWT3FigcmgQICFg=
Subject key identifier: B8:E6:3A:59:84:26:AC:4C:8E:9D:4D:54:C9:C9:3A:70:B1:35:52:E3
Authority key identifier: 79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80
Certificate issuer: /CN=A9182B6F/serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
Certificate serial: 0399
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
Manifest number: 0392
Signing time: Fri 26 Dec 2025 23:49:14 +0000
Manifest this update: Fri 26 Dec 2025 23:49:13 +0000
Manifest next update: Fri 02 Jan 2026 23:49:13 +0000
Files and hashes: 1: eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl (hash: R0w9RMKFMQv0XEWzsa1Rrk7S5AnUWTkkRaZ/1/q2mIo=)
2: 681E9EECCAC111ECA0AC3E32C4F9AE02.roa (hash: yx0tgJAxnt6G+jTtg9/EBjHjIHPyHzwd9ZlOS5AoF1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl
rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 23:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921 (0x399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182B6F, serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
Validity
Not Before: Dec 26 23:49:13 2025 GMT
Not After : Jan 2 23:49:13 2026 GMT
Subject: CN=694f1efa-7dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:2d:8b:12:97:16:db:59:e4:d9:18:b6:0e:
41:58:9a:fa:cd:81:0b:00:0b:1c:aa:1e:36:58:3f:
80:6c:60:79:d3:c2:85:ca:d7:a5:a4:ef:5a:51:d6:
9b:9b:93:54:73:7c:4a:d2:32:6f:02:57:dd:34:a2:
3e:89:9b:ad:f7:c8:86:62:30:60:2b:9c:1b:a0:91:
0c:fd:78:c3:c5:5a:0c:2a:76:cd:1a:49:9b:6e:c9:
8a:45:02:8f:12:fa:64:80:d3:3a:66:70:46:90:ee:
b3:a9:69:a2:f2:0c:5b:eb:30:64:05:72:e7:88:2c:
14:4d:82:fd:93:ba:72:ba:9e:c1:da:0f:2f:dc:b6:
e1:b1:83:01:20:ea:56:8a:79:32:72:af:f4:27:96:
3f:b8:20:e5:12:3d:4a:0a:b4:90:30:5d:bf:33:2b:
ba:ed:53:6f:0d:d1:bc:cb:99:94:9d:81:83:4e:bd:
63:00:d8:b7:a5:45:d9:86:5c:4d:e9:6b:d9:15:e0:
b3:4f:ef:5b:47:fe:a7:86:9f:2d:f3:ae:e7:24:ca:
7c:dc:95:7d:80:ba:e2:c1:5e:2d:b1:68:e9:4a:8f:
36:25:ba:1a:85:16:6b:23:29:b8:c4:0c:d8:23:85:
61:0a:5f:96:a4:15:23:be:94:a8:20:76:29:e8:b8:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E6:3A:59:84:26:AC:4C:8E:9D:4D:54:C9:C9:3A:70:B1:35:52:E3
X509v3 Authority Key Identifier:
keyid:79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:78:4d:32:5c:45:a6:77:8c:7f:62:cf:5b:17:d4:46:68:ea:
fd:63:1b:64:5b:ac:9a:6d:bc:1d:6d:00:67:02:11:e2:f9:87:
23:5c:c8:48:3d:57:ae:71:20:42:d4:52:5e:cc:90:39:3c:6a:
3d:70:9f:92:f8:d1:7c:30:45:92:92:6a:4c:e7:bd:56:8a:21:
94:f6:f4:64:ed:b2:08:0d:73:b0:87:c2:b1:14:76:fc:fb:fe:
63:aa:83:65:ab:24:b6:a9:e9:b8:b3:e1:57:2d:0e:fb:1e:2e:
21:02:13:5e:74:56:6a:33:bf:83:d4:39:dd:70:c7:ce:88:46:
75:e6:ff:e4:7c:5f:a1:50:29:c7:b8:b1:a4:a1:1a:d9:59:e3:
48:13:f0:ab:2f:3e:13:d4:bb:fa:1a:02:97:04:62:07:4b:1e:
ea:c5:ee:9b:d7:a4:25:c1:3a:03:c2:ef:92:ca:c3:9c:bf:a3:
70:2d:c3:b6:a5:9b:e8:67:7d:25:ab:1c:c0:f1:27:ff:8c:7b:
7b:0c:1d:84:85:86:e0:6a:72:a4:b5:51:df:c3:18:da:de:c5:
1b:d3:c4:a7:af:b2:67:46:4d:a9:0f:f5:ba:9c:6a:2c:98:67:
bb:31:ae:3c:7c:28:c8:7c:8b:ed:76:54:25:40:0b:55:94:a7:
7e:c9:82:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJCNkYxMTAvBgNVBAUTKDc5NkE0NENGMUI3MEY0QTlGOUU2QTVGRkIwMDlCQjc4
NjBGMzU1ODAwHhcNMjUxMjI2MjM0OTEzWhcNMjYwMTAyMjM0OTEzWjAYMRYwFAYD
VQQDDA02OTRmMWVmYS03ZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzu4tixKXFttZ5NkYtg5BWJr6zYELAAscqh42WD+AbGB508KFytelpO9aUdab
m5NUc3xK0jJvAlfdNKI+iZut98iGYjBgK5wboJEM/XjDxVoMKnbNGkmbbsmKRQKP
EvpkgNM6ZnBGkO6zqWmi8gxb6zBkBXLniCwUTYL9k7pyup7B2g8v3LbhsYMBIOpW
inkycq/0J5Y/uCDlEj1KCrSQMF2/Myu67VNvDdG8y5mUnYGDTr1jANi3pUXZhlxN
6WvZFeCzT+9bR/6nhp8t867nJMp83JV9gLriwV4tsWjpSo82JboahRZrIym4xAzY
I4VhCl+WpBUjvpSoIHYp6Lju6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjmOlmE
JqxMjp1NVMnJOnCxNVLjMB8GA1UdIwQYMBaAFHlqRM8bcPSp+eal/7AJu3hg81WA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkI2Ri9GN0Y5NDc2RUM4
QjAxMUVDQTg4NDc5NDlDNEY5QUUwMi9lV3BFenh0dzlLbjU1cVhfc0FtN2VHRHpW
WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VXcEV6eHR3OUtuNTVxWF9zQW03ZUdEelZZQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MkI2Ri9GN0Y5NDc2RUM4QjAxMUVDQTg4NDc5NDlDNEY5QUUwMi9lV3BFenh0dzlL
bjU1cVhfc0FtN2VHRHpWWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBEeE0yXEWmd4x/Ys9bF9RGaOr9YxtkW6yabbwdbQBnAhHi+YcjXMhI
PVeucSBC1FJezJA5PGo9cJ+S+NF8MEWSkmpM571WiiGU9vRk7bIIDXOwh8KxFHb8
+/5jqoNlqyS2qem4s+FXLQ77Hi4hAhNedFZqM7+D1DndcMfOiEZ15v/kfF+hUCnH
uLGkoRrZWeNIE/CrLz4T1Lv6GgKXBGIHSx7qxe6b16QlwToDwu+SysOcv6NwLcO2
pZvoZ30lqxzA8Sf/jHt7DB2EhYbganKktVHfwxja3sUb08Snr7JnRk2pD/W6nGos
mGe7Ma48fCjIfIvtdlQlQAtVlKd+yYLd
-----END CERTIFICATE-----
Generated at Sat Dec 27 22:33:58 2025 by rpki-client