This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
File: pibNzbdx6WVebpGhxy0S-1fRxOg.mft (raw, json)
Hash identifier: 3YZN00qupPHNhiqf7DjfycKmYso09o9jc1coj0WzpEw=
Subject key identifier: E2:24:E7:3C:D8:7A:A6:BF:3B:20:E1:F8:C2:16:50:74:9A:C8:6E:7F
Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8
Certificate issuer: /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8
Certificate serial: 0503
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
Manifest number: 04FB
Signing time: Mon 22 Dec 2025 22:48:12 +0000
Manifest this update: Mon 22 Dec 2025 22:48:12 +0000
Manifest next update: Mon 29 Dec 2025 22:48:12 +0000
Files and hashes: 1: pibNzbdx6WVebpGhxy0S-1fRxOg.crl (hash: jQ9221gE6kKOZ2IWfvismQRb2alVUzwszhSb9eFbFC4=)
2: CB56435E3C5311EC81D0DB48C4F9AE02.roa (hash: Ev++x624cT4RveaW6MjuuztzlLqpsfCU1GHY6FW0OBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl
rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1283 (0x503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C7B1, serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8
Validity
Not Before: Dec 22 22:48:12 2025 GMT
Not After : Dec 29 22:48:12 2025 GMT
Subject: CN=6949caac-a6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:1d:13:18:6b:95:b1:cd:db:28:a9:82:78:
68:e6:18:87:db:1c:15:55:4e:d6:79:54:92:2b:47:
75:02:59:f6:ad:f2:64:2a:28:12:35:2d:9f:cc:36:
93:3d:84:af:f3:f3:75:aa:ce:d1:0c:f7:1b:3d:ca:
4b:11:85:1f:0d:59:95:b0:b4:5a:be:a7:47:d7:a9:
f9:16:1f:0c:a6:98:08:c8:49:2b:6d:eb:f2:0d:6f:
88:6a:cb:47:c0:23:25:03:1c:3d:cb:6a:7d:21:d7:
3b:e9:00:c0:4d:d3:47:d7:18:92:10:89:4e:05:65:
85:78:b6:b6:43:31:b0:dc:ec:0e:95:ae:10:eb:2c:
c1:6f:29:4b:cc:86:07:d1:37:56:d7:bb:87:64:a7:
04:f1:2c:b4:4e:74:5b:33:85:a0:47:6f:39:7b:c8:
ed:09:03:ad:21:8e:07:c4:be:8c:e0:67:68:2e:8d:
7e:79:ea:33:4a:1f:95:0c:50:41:bb:2b:77:69:dd:
83:70:6b:54:b0:02:29:f0:43:6e:45:55:fc:7e:03:
b7:13:d8:7b:6d:42:ab:cc:5b:23:fc:37:4c:83:41:
c2:7d:8f:87:4b:0b:da:98:c2:cd:ac:e1:99:4e:01:
d6:93:c7:08:18:d3:8b:74:d5:6a:4f:e9:16:38:1d:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:24:E7:3C:D8:7A:A6:BF:3B:20:E1:F8:C2:16:50:74:9A:C8:6E:7F
X509v3 Authority Key Identifier:
keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:49:38:2c:6f:41:27:25:88:ad:d4:ed:6b:e8:a6:7b:56:aa:
e9:1c:14:5f:e0:d5:08:6d:fd:5c:2b:27:1c:f0:6e:32:bf:d2:
fc:ba:28:af:a0:db:62:b1:e4:34:2a:a8:e9:c2:a5:35:4b:dd:
96:d1:73:a6:f8:21:a9:b4:c1:e8:35:9a:9c:5a:20:12:e6:16:
9d:95:f2:bb:bf:2f:f0:3f:bf:37:fb:ea:ac:1a:e9:e0:91:e0:
18:47:7b:28:ed:a2:4a:26:b2:9c:2e:13:95:91:5e:f8:6f:89:
22:9f:cb:0c:53:95:08:60:5e:11:d3:a1:af:ff:00:82:7b:6c:
ae:11:1c:dd:df:cd:a2:f4:55:08:77:dd:9d:3d:c4:2d:94:36:
f9:c5:89:eb:a2:f0:f0:24:8a:96:22:a2:d5:20:d7:a0:34:bf:
dd:ae:73:ea:f5:c8:2f:5d:ef:6a:dc:32:3b:fd:07:2b:38:0d:
a9:b0:61:e9:d5:9f:fc:3e:85:27:e4:90:6b:ba:3d:35:42:5a:
46:8f:6f:dd:d4:93:ef:34:19:14:a5:78:0f:46:e1:ca:80:a2:
ec:50:e9:7c:a4:3b:0b:2a:3f:62:5c:9a:6d:a9:c7:df:d7:cf:
cb:29:03:df:c4:e5:28:c5:af:6b:73:1e:1f:72:92:17:dc:67:
5e:06:55:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:44 2025 by rpki-client