This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
File: n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json)
Hash identifier: /WMsW8cbcyz7QXtq8YvpMyzbgs1SaURnKIcQaKs1pfA=
Subject key identifier: 7F:45:B8:24:62:4F:82:B3:8B:8F:54:5A:45:D3:7D:F4:CC:80:D1:0B
Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
Certificate issuer: /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
Manifest number: 0117
Signing time: Fri 05 Dec 2025 02:55:28 +0000
Manifest this update: Fri 05 Dec 2025 02:55:27 +0000
Manifest next update: Fri 12 Dec 2025 02:55:27 +0000
Files and hashes: 1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: fxJW0FSNhL5FlWUrzY3W3+yh8jrUe20ee1RliXWAokM=)
2: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: Lss+xMSjsVW/Iz01A+UAitwGdTNiOgTBuwOADNSWYt0=)
3: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: Uft/wx6+OSudUAkV6haKL8qwseEuVEVTt0nYwgnQ/Yw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Validity
Not Before: Dec 5 02:55:27 2025 GMT
Not After : Dec 12 02:55:27 2025 GMT
Subject: CN=6932499f-0c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ad:61:a4:b8:ef:3b:fa:f5:a3:15:41:1a:36:
cb:0f:ff:57:4e:7c:06:21:67:1c:3e:0f:c2:fd:5a:
2a:65:58:8c:0a:7b:e3:c0:f4:fb:10:b4:32:65:8c:
50:0a:f6:80:0d:57:91:29:a3:bb:49:34:83:36:fd:
06:34:5b:69:f6:4a:23:12:66:f9:38:87:60:0f:d9:
a0:1d:ab:e4:37:80:30:cb:d2:27:c7:be:4f:4c:c0:
b3:3c:40:30:34:3e:f8:66:bc:d9:58:69:38:b2:48:
e6:c8:31:0e:05:d4:48:4d:35:81:6c:e3:44:75:ea:
14:1f:5d:bb:56:b4:13:88:3c:8a:1d:e8:f9:26:91:
3b:fe:f9:c6:d5:f7:da:af:e1:d9:81:ce:04:38:37:
8b:d8:01:11:4a:20:57:67:2f:71:36:33:54:4c:a5:
d4:14:02:e4:5f:14:94:98:b8:1c:33:17:18:5a:63:
3e:7b:84:9c:6a:68:81:04:81:35:e9:50:39:5f:5b:
f9:54:db:67:1b:e3:58:92:44:9d:fd:8c:2f:5b:f9:
b6:1f:22:e6:17:e4:f4:15:71:4a:fc:fc:39:bb:12:
fb:80:12:84:a3:d8:f3:da:98:88:74:fb:d5:c1:66:
b1:e1:aa:d2:de:31:7e:11:09:49:85:13:54:fb:f8:
0b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:45:B8:24:62:4F:82:B3:8B:8F:54:5A:45:D3:7D:F4:CC:80:D1:0B
X509v3 Authority Key Identifier:
keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:78:37:17:ed:2e:7d:d8:b8:b8:6a:0b:68:72:60:09:8e:46:
bb:07:65:76:8e:bb:2b:c8:86:db:63:aa:8f:f5:b1:11:61:1f:
38:54:d9:c7:d4:71:54:a0:ba:e1:38:1b:45:9c:17:51:19:93:
55:46:49:63:8c:29:f2:63:34:01:e0:81:8f:e5:9d:05:53:d3:
8c:f9:17:8c:2e:10:a9:3a:a9:4a:c1:d1:05:4e:10:66:3a:ab:
20:f3:98:2a:52:fa:d3:04:8d:43:c9:65:8c:7e:b2:20:fa:e1:
70:03:5a:d8:d0:12:d0:e4:6f:89:33:c3:b5:14:0f:89:cf:65:
c0:e1:6b:e5:c9:04:09:b8:f2:ab:06:6a:ff:bf:53:a0:bc:3a:
2b:f0:99:77:e4:bc:98:61:d2:75:ca:7e:0b:bb:fa:ee:9a:24:
f7:1d:8f:55:17:6f:ea:79:f6:f4:16:5e:b1:51:0b:5b:4b:19:
a0:5d:ab:70:8c:70:a3:2e:c8:93:5d:5e:cf:75:b1:de:45:0a:
ea:50:18:33:9b:02:18:a8:07:9f:2c:0d:b2:8d:ef:4e:e3:67:
b1:c7:68:9c:fc:95:d8:d4:f7:e2:5f:6b:ab:2d:93:e3:79:4e:
f1:32:31:ae:8d:fd:26:21:1c:2d:0a:55:2e:74:02:4d:77:1a:
58:b2:89:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:52:53 2025 by rpki-client