This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
File: ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json)
Hash identifier: VGrLbwQVeJZt8d5n+iBEEN1zHVcQC/NL2MYbQci3blQ=
Subject key identifier: 10:0A:F2:F6:B2:B9:61:14:7E:23:6C:BC:88:91:10:3E:4D:1D:5D:EF
Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2
Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
Certificate serial: 0B69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
Manifest number: 0B59
Signing time: Wed 31 Dec 2025 18:56:15 +0000
Manifest this update: Wed 31 Dec 2025 18:56:15 +0000
Manifest next update: Wed 07 Jan 2026 18:56:15 +0000
Files and hashes: 1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: JurJFkUBS8unAG/bMUkiN7G2RSwF28jHS4Gc+ggkYvE=)
2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: 01LuquJzODASdx7lUWZKvuNgawIkxSts2x99z+OLQA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl
rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 18:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2921 (0xb69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
Validity
Not Before: Dec 31 18:56:15 2025 GMT
Not After : Jan 7 18:56:15 2026 GMT
Subject: CN=695571cf-9a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bc:29:9b:51:a2:0d:61:39:f8:69:60:5b:98:
49:5f:81:b9:7b:dc:bc:4d:e5:d3:b4:27:a9:0f:4c:
d5:7d:20:46:a2:66:2b:b8:15:ea:de:73:f2:e7:c3:
7f:d5:ab:c3:ef:65:54:e7:2a:c6:82:15:14:2f:f2:
c4:2b:6b:b0:2a:b1:90:51:3b:46:f9:12:9f:2e:1e:
df:85:79:3a:42:44:55:44:53:81:9b:18:ef:ee:45:
94:11:19:95:65:de:fc:5b:18:0c:e4:69:f3:2a:fd:
81:d2:0f:4e:1c:bb:0d:3a:61:b9:8d:e0:39:90:d7:
86:7d:ab:24:d6:34:63:9a:28:e8:b9:8d:79:96:d3:
c6:59:03:5f:d8:a9:8c:d3:2d:92:0c:43:69:84:98:
f7:c8:fb:4f:71:07:43:34:bc:fb:88:41:76:2d:ff:
d8:c8:47:2d:83:4b:f8:1f:da:3d:ec:b4:29:4b:4a:
81:0a:19:6a:dd:4c:ab:f8:dd:5d:b8:38:d4:8e:05:
fb:22:c2:5a:21:f2:e7:c6:06:16:b7:db:e2:1d:bf:
bc:f9:fa:ae:68:3a:a5:d9:97:b4:52:85:12:fa:4b:
52:79:09:29:f7:e8:23:00:1a:ec:49:85:b2:5c:67:
50:29:a7:f4:eb:84:17:95:a0:93:47:15:c2:51:37:
03:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0A:F2:F6:B2:B9:61:14:7E:23:6C:BC:88:91:10:3E:4D:1D:5D:EF
X509v3 Authority Key Identifier:
keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:90:19:40:ee:2e:38:8b:e6:07:33:98:69:bc:df:c3:da:06:
a3:82:2c:b8:02:34:b3:e6:28:20:ec:4d:e4:14:8c:8a:4e:15:
dd:d7:bd:74:6d:2c:0c:5a:9f:56:b7:1e:8d:06:6b:48:41:e0:
f6:fc:b2:76:86:74:40:83:1c:9f:65:0b:65:3b:e6:03:49:f9:
f4:40:7d:a4:1d:46:f3:5a:b0:48:01:8c:94:65:c0:90:cf:26:
47:a3:7c:16:00:d5:82:3e:48:08:ad:72:40:5d:08:76:75:84:
ff:b2:93:2e:7d:33:97:b3:ab:91:e7:f4:45:26:e2:08:4e:32:
d5:68:6a:f0:6e:d1:27:d7:9d:17:4b:25:36:a8:14:b2:71:35:
f4:25:a7:54:a8:9b:a1:92:e9:ce:b1:50:b6:24:12:f8:7b:f5:
9b:05:cc:67:31:82:38:51:de:a8:f2:43:ed:da:53:ef:cc:5d:
c5:99:e4:fa:5a:2d:77:3f:a9:0d:d6:66:a6:c4:81:1b:01:69:
6f:e5:3b:a4:82:0d:be:90:a9:e3:5b:cd:bc:35:93:f9:4d:01:
8c:75:5d:fd:73:3e:10:3a:f5:7d:cb:b7:a5:5a:29:da:47:1a:
a8:0a:e1:95:6f:54:0c:31:bb:9a:da:88:41:ec:76:7a:e8:96:
f0:ef:bd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 11:04:23 2026 by rpki-client