This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
File: p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json)
Hash identifier: BVz+n2cF3EaqVSdWdeavwNS6pYTxt/+MGsiosEQRCrc=
Subject key identifier: 67:DE:26:3B:03:CE:00:32:8E:2C:2F:FA:8B:CF:02:B0:29:67:4A:78
Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
Certificate issuer: /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
Manifest number: 011E
Signing time: Sun 07 Dec 2025 03:04:18 +0000
Manifest this update: Sun 07 Dec 2025 03:04:18 +0000
Manifest next update: Sun 14 Dec 2025 03:04:18 +0000
Files and hashes: 1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: +MXAsN2lVDjPvRMLkTgErl4ZuWI7/pAVtgoiwhK3KSo=)
2: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: Jf2arvBq83FoSm5BKtxRrGvm4pEMUSYC+oIeuz2JcN8=)
3: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QIMDScliq15LdkPQsPXmCzkeCzTbM6NI7el8bqF5qD8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 03:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Validity
Not Before: Dec 7 03:04:18 2025 GMT
Not After : Dec 14 03:04:18 2025 GMT
Subject: CN=6934eeb2-36e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:45:59:0d:30:ea:75:b0:45:d3:1b:bc:6d:
c4:97:85:0d:a6:18:d8:cc:33:ea:e5:80:19:ba:38:
d4:76:9c:27:4c:ad:ad:87:07:15:55:d2:52:8e:db:
34:49:f7:97:58:19:aa:e5:d1:98:32:50:2e:8e:75:
19:15:9d:cd:5f:11:42:6e:2a:e2:72:6d:85:ac:84:
57:98:17:79:26:2d:07:94:4c:3e:be:1d:11:f6:be:
2e:3e:0b:99:9e:4a:42:34:3a:b9:c6:0a:8e:64:fc:
3a:54:be:97:45:68:06:0b:1a:a4:d5:9f:44:74:d8:
48:88:f5:bd:f7:b5:3d:df:4e:5b:1f:fd:84:f4:98:
df:3e:17:91:c2:a0:ae:24:41:ea:cb:15:57:6f:af:
f2:38:12:45:e9:d1:87:ac:db:9c:a5:f1:59:7e:13:
6b:f2:f5:dc:ee:87:8a:c9:ad:50:80:6b:7b:3d:52:
c0:d3:4e:bc:2e:be:1e:66:37:31:fa:13:3a:0a:28:
03:64:cc:ff:8f:1e:9f:68:40:93:ef:8e:99:c4:1b:
16:be:58:44:9b:0d:54:63:83:1d:4e:cd:8b:fa:b2:
10:a2:23:f2:a7:9a:8f:1b:bc:4d:4a:e0:c1:84:0a:
28:09:9f:6a:7c:d1:ba:e4:5a:b1:71:b0:1d:8b:17:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DE:26:3B:03:CE:00:32:8E:2C:2F:FA:8B:CF:02:B0:29:67:4A:78
X509v3 Authority Key Identifier:
keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:82:e6:60:c9:d7:67:09:84:ed:d7:b3:a3:71:9d:b0:fd:a0:
78:60:43:a1:94:f2:bf:c6:0e:47:26:22:29:ce:6d:32:d0:04:
ec:73:3a:60:93:a2:0e:83:34:f4:ac:af:12:3b:08:96:6f:3a:
50:9a:35:fe:66:2a:00:5e:97:6c:a4:57:a6:6b:f3:8f:9a:a8:
2e:55:39:11:73:c6:8c:7d:d0:28:9f:98:06:69:f5:c7:be:99:
e8:62:92:3a:cf:8f:44:8e:c9:4f:45:1e:c1:59:14:b8:c3:e2:
21:ad:8a:ab:2d:36:78:18:ee:ea:2a:6f:6d:6b:ba:5b:40:68:
75:27:21:55:2e:ae:5c:01:fc:63:db:54:29:ff:8f:e1:86:92:
90:57:45:88:ff:14:61:b3:5d:e9:3c:fa:7d:1c:b5:90:c7:e6:
f0:5f:45:01:5b:07:22:1e:5f:9b:00:63:f9:5c:51:72:b9:a4:
1a:9b:d6:d7:59:89:03:41:d8:a0:4c:64:25:d7:6c:ac:b0:b1:
c3:b9:72:00:bd:a1:e9:da:09:5d:58:46:74:c4:ab:26:71:e8:
48:62:47:16:2b:87:cc:4f:c5:4e:47:9a:98:24:22:b6:14:73:
a4:ec:7f:ca:26:d3:e1:9e:15:81:f0:f5:58:aa:e2:51:8c:6c:
47:63:ac:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 03:58:57 2025 by rpki-client