This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json)
Hash identifier: gRvcyHiMbC7bHadau6iGDZpSvl5/gh3Kg7dchyQR7xo=
Subject key identifier: 96:36:B4:79:20:2B:8D:22:5A:CF:95:09:E6:46:A1:6C:97:2B:E3:FB
Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
Manifest number: BB
Signing time: Wed 31 Dec 2025 05:02:16 +0000
Manifest this update: Wed 31 Dec 2025 05:02:16 +0000
Manifest next update: Wed 07 Jan 2026 05:02:16 +0000
Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: bqbvx1lHl5YrVzisro26eV3PFD5yOatZmzJkeHnTdA0=)
2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: D8sGSIRpeb4KU8twC3M5LxWoSrBlM5fxXQEFrUY0ChI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 05:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Validity
Not Before: Dec 31 05:02:16 2025 GMT
Not After : Jan 7 05:02:16 2026 GMT
Subject: CN=6954ae58-e3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:07:d3:0e:fb:c3:d9:ea:25:ef:69:8f:de:
42:af:4b:14:c2:8a:5e:d8:9b:26:ab:67:18:de:ae:
fe:f0:f8:f1:e1:46:50:88:e9:f2:56:ae:2a:f3:fc:
56:e6:64:57:65:7b:a6:86:a6:ec:63:bf:fa:00:2d:
10:4d:27:3c:14:cc:66:7c:56:52:d0:10:b5:59:1b:
4d:bc:01:9f:fb:64:06:9b:1e:52:83:47:58:0f:d6:
fc:3e:0c:c0:fe:2a:9f:37:db:96:32:a1:08:79:10:
9d:46:71:2e:ae:51:cf:fa:57:c2:07:98:fb:28:e6:
04:ac:00:96:d6:14:d2:d7:a8:f2:4c:62:8d:d3:f3:
15:c3:15:b7:23:f6:ff:6f:9a:60:f2:bb:0e:79:fe:
7a:99:df:9d:ef:ee:09:d5:24:3e:ad:8f:de:6b:e6:
0d:a2:86:ef:2d:ea:39:d9:04:9b:06:42:a1:03:8f:
99:68:b6:76:2f:9a:a4:0c:24:f1:c1:06:45:65:b9:
06:a8:d4:8e:b7:aa:59:b7:28:20:b9:9f:59:6e:e0:
a0:46:1d:c6:40:a8:b2:c1:e5:d6:90:9e:be:c8:5c:
71:31:ca:4a:80:1b:86:c2:38:32:b2:25:a9:db:54:
f4:5c:40:4b:d4:5e:1b:13:a5:90:39:55:4b:f8:49:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:36:B4:79:20:2B:8D:22:5A:CF:95:09:E6:46:A1:6C:97:2B:E3:FB
X509v3 Authority Key Identifier:
keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:22:b2:be:88:8a:ad:0c:81:c5:f6:53:35:c6:cb:b5:86:b3:
cb:23:b7:a6:04:d7:7b:05:4b:c9:89:8b:43:b0:bf:3d:34:13:
a0:c7:94:23:15:5d:8b:38:19:a9:77:48:31:e4:f7:1a:4f:87:
de:79:75:56:10:e1:17:93:d9:23:a1:d8:a6:9d:73:a1:bb:72:
de:bd:42:10:9d:0d:1a:0d:49:12:0b:9d:43:d5:87:3a:bd:95:
ac:25:66:c2:79:4f:5f:b0:01:50:9c:18:e8:17:24:bd:34:4e:
38:e5:61:0c:a8:aa:78:69:87:05:5c:3a:14:fa:4c:a9:f5:bd:
d0:cd:2e:54:ff:b0:0f:e7:82:5d:6f:60:e6:f9:15:1d:b7:9e:
ff:8a:9e:10:e2:ad:ce:7b:b8:be:96:c4:ae:d0:76:87:05:f2:
32:23:ae:d8:72:54:17:fa:b6:8f:d5:6b:87:d0:42:96:70:b2:
51:df:d6:0d:09:2f:63:c2:e7:2d:7e:44:e9:47:e3:39:ff:c3:
43:9b:ef:26:75:e3:09:7e:a2:95:e3:82:a7:2a:55:6a:be:07:
e8:da:b2:c1:f3:12:4b:60:e1:69:43:c1:14:22:9c:06:40:13:
bc:b2:96:66:37:af:be:e4:cb:56:63:9c:4c:90:67:fb:c6:4e:
56:07:d9:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMyMzgxMTAvBgNVBAUTKDEyQTEwMkYwOEVEMTRGNjIzRkE2RTMxREJBQjQ5QTI0
RDFCOUExNTEwHhcNMjUxMjMxMDUwMjE2WhcNMjYwMTA3MDUwMjE2WjAYMRYwFAYD
VQQDDA02OTU0YWU1OC1lM2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmUoH0w77w9nqJe9pj95Cr0sUwope2Jsmq2cY3q7+8Pjx4UZQiOnyVq4q8/xW
5mRXZXumhqbsY7/6AC0QTSc8FMxmfFZS0BC1WRtNvAGf+2QGmx5Sg0dYD9b8PgzA
/iqfN9uWMqEIeRCdRnEurlHP+lfCB5j7KOYErACW1hTS16jyTGKN0/MVwxW3I/b/
b5pg8rsOef56md+d7+4J1SQ+rY/ea+YNoobvLeo52QSbBkKhA4+ZaLZ2L5qkDCTx
wQZFZbkGqNSOt6pZtygguZ9ZbuCgRh3GQKiyweXWkJ6+yFxxMcpKgBuGwjgysiWp
21T0XEBL1F4bE6WQOVVL+Eki5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJY2tHkg
K40iWs+VCeZGoWyXK+P7MB8GA1UdIwQYMBaAFBKhAvCO0U9iP6bjHbq0miTRuaFR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzIzOC9DRDcxN0Q5Q0NC
RjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQySV9wdU1kdXJTYUpORzVv
VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9WRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzIzOC9DRDcxN0Q5Q0NCRjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQy
SV9wdU1kdXJTYUpORzVvVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCIrK+iIqtDIHF9lM1xsu1hrPLI7emBNd7BUvJiYtDsL89NBOgx5Qj
FV2LOBmpd0gx5PcaT4feeXVWEOEXk9kjodimnXOhu3LevUIQnQ0aDUkSC51D1Yc6
vZWsJWbCeU9fsAFQnBjoFyS9NE445WEMqKp4aYcFXDoU+kyp9b3QzS5U/7AP54Jd
b2Dm+RUdt57/ip4Q4q3Oe7i+lsSu0HaHBfIyI67YclQX+raP1WuH0EKWcLJR39YN
CS9jwuctfkTpR+M5/8NDm+8mdeMJfqKV44KnKlVqvgfo2rLB8xJLYOFpQ8EUIpwG
QBO8spZmN6++5MtWY5xMkGf7xk5WB9kP
-----END CERTIFICATE-----
Generated at Thu Jan 1 05:45:32 2026 by rpki-client