This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
File: eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json)
Hash identifier: L0ySjfP7s42++ZvoQIs457RcjPaeH7HtnacSdmLvRZc=
Subject key identifier: 05:BE:3A:73:BA:C5:80:62:4D:15:F6:C1:9E:25:CA:08:59:4E:D2:15
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial: 354D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
Manifest number: 351E
Signing time: Thu 18 Dec 2025 14:30:36 +0000
Manifest this update: Thu 18 Dec 2025 14:30:35 +0000
Manifest next update: Thu 25 Dec 2025 14:30:35 +0000
Files and hashes: 1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: ewcPMSXTnpyAirQF0nB8MuahmkwMsP7/y9FRC5KW2Ic=)
2: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: sRvMLmzA3faCvCgnj9Kc1Nyq/athaxPg1qdQG6qTSjA=)
3: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: CUUb/coZVwybMNB3Q6DnZxhNxSXx7mieErXaIHIRyww=)
4: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: pLIkppbdFI2Dvba2mWRCPANXKzDe4Q3IfvnPWtwGOsc=)
5: D230A150840E11EFB3D1036BC4F9AE02.roa (hash: gkYrWkhbDnSZnPzaW3pf3edvz0FUTHjNjGt5hZNgUcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13645 (0x354d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Validity
Not Before: Dec 18 14:30:35 2025 GMT
Not After : Dec 25 14:30:35 2025 GMT
Subject: CN=6944100b-5559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:04:b6:22:c7:68:9d:06:95:2a:19:27:8a:98:
84:59:1b:be:a2:2c:95:14:76:f5:8f:38:09:c6:d4:
ee:ef:84:bc:31:9a:71:82:d9:2d:b9:63:46:bc:6c:
68:36:ff:56:3d:90:65:6e:fe:50:d2:84:14:e4:6a:
c0:cc:eb:76:23:93:99:20:03:b7:40:38:b8:3f:ec:
b4:e6:20:e9:bd:16:5c:0c:54:e1:a4:ed:52:39:88:
6c:49:21:90:a5:06:74:8d:73:c3:44:78:72:6b:f4:
4d:d2:09:b2:8d:22:6a:52:60:f5:70:3d:e5:fc:58:
4c:6c:44:a6:76:ec:34:6b:1b:af:01:4d:4f:e6:2d:
bb:5f:92:16:d0:21:b6:55:59:0d:9e:d3:16:e3:83:
9c:93:05:94:cc:0e:82:a0:18:55:2b:f0:06:0d:22:
b3:4b:10:0d:8d:f8:5b:4a:f7:cb:3e:5d:4a:a5:45:
c1:15:c2:37:3c:70:cd:84:11:ca:dc:6f:99:c0:d6:
bc:6b:87:ac:4a:19:66:b9:fc:81:2f:20:0c:35:5e:
de:6a:0c:cb:8a:2a:99:38:93:37:1b:62:3d:2a:5c:
06:b2:1b:36:48:5f:cd:e2:8e:b9:25:51:bb:8d:00:
49:1d:3a:ca:27:c2:67:43:72:ad:f5:6b:e8:73:cd:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BE:3A:73:BA:C5:80:62:4D:15:F6:C1:9E:25:CA:08:59:4E:D2:15
X509v3 Authority Key Identifier:
keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:16:a9:09:4c:60:55:82:46:68:53:88:d7:3f:0e:5a:f9:61:
18:14:f8:28:4f:c7:3f:08:69:ce:5f:ca:23:a0:53:53:d0:cd:
36:17:dd:a1:50:a1:66:47:8e:26:a9:06:e4:fc:ab:fa:73:1c:
0a:28:35:4a:63:fa:5b:3d:e7:6e:27:49:de:61:3e:6a:93:96:
a7:0e:28:9d:38:09:51:06:be:40:f5:e1:fc:61:8c:a7:44:66:
71:d0:9b:72:2c:c3:a2:76:43:71:c6:51:e1:b8:d4:c9:10:d1:
b8:84:5f:bd:e8:3e:0e:3b:ce:1c:1e:4a:e9:9c:6b:8c:8c:ff:
89:2e:65:cd:7b:c0:85:1f:50:d6:80:dd:fc:55:86:ee:a0:88:
f5:31:1e:66:63:cf:bd:61:39:d8:46:73:7f:ff:7e:bc:79:4d:
1e:42:35:ef:e7:6d:11:93:64:f8:7a:f1:39:df:13:58:68:21:
80:7e:72:d0:c1:32:97:26:af:00:2e:e7:20:84:7b:37:32:f4:
df:93:2d:72:b3:ae:2d:7b:96:ae:58:9d:f4:8c:53:b1:0e:c7:
31:dc:d4:25:ff:86:05:52:10:9a:ed:71:44:bb:3f:86:93:67:
1f:3b:64:72:b3:06:a0:16:82:32:5f:d6:6e:79:28:e0:ef:82:
6d:60:55:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:44 2025 by rpki-client