This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
File: pibNzbdx6WVebpGhxy0S-1fRxOg.mft (raw, json)
Hash identifier: rNC3VZnA5Ppde1JWJrpMdkUMbCU+k7xhP2oLQTF9rmc=
Subject key identifier: C1:49:9B:76:8E:8C:D0:1A:58:4A:F5:FC:42:3A:A8:A6:F8:0C:32:A3
Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8
Certificate issuer: /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8
Certificate serial: 04FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
Manifest number: 04F2
Signing time: Thu 04 Dec 2025 22:17:58 +0000
Manifest this update: Thu 04 Dec 2025 22:17:58 +0000
Manifest next update: Thu 11 Dec 2025 22:17:58 +0000
Files and hashes: 1: pibNzbdx6WVebpGhxy0S-1fRxOg.crl (hash: kqsAcXtk0yO2/3iQGkKi36T1tLS+e70lHHd3mxrM2dA=)
2: CB56435E3C5311EC81D0DB48C4F9AE02.roa (hash: Ev++x624cT4RveaW6MjuuztzlLqpsfCU1GHY6FW0OBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl
rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1274 (0x4fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C7B1, serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8
Validity
Not Before: Dec 4 22:17:58 2025 GMT
Not After : Dec 11 22:17:58 2025 GMT
Subject: CN=69320896-331d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:eb:0b:55:7d:66:b6:a2:51:77:c1:5b:52:
2e:84:34:89:0b:ad:55:24:ce:0e:4e:28:00:2c:06:
8b:59:83:9f:83:6c:b0:a7:f2:42:10:c3:f2:bb:88:
e0:a1:10:10:63:d7:13:04:a0:a8:1e:c0:67:6b:09:
7c:61:71:cd:d4:ab:65:2f:2f:b8:41:a1:5e:d0:33:
22:fe:83:6c:d5:30:57:1d:52:41:8d:8a:e4:48:3e:
5c:fe:b1:94:b9:d7:95:ac:cc:79:4c:4f:c5:fe:fa:
a3:75:b4:a5:0c:0d:4e:6c:ee:9e:5f:98:d0:6b:36:
7e:2c:8b:01:e7:d7:eb:43:69:80:c7:01:3f:13:fc:
a6:75:ae:89:bb:c5:a5:25:1f:a1:06:82:88:1f:ae:
65:9d:df:62:b2:01:a3:40:5a:ac:8c:36:ae:fc:e1:
7d:95:0b:1c:87:ae:9e:6e:9d:b7:0b:63:5c:fa:42:
5f:60:1d:1b:41:9d:39:dd:0b:ca:9e:96:fb:f7:8b:
ec:4a:e9:12:a5:f8:91:67:e5:2c:56:d6:00:85:a0:
eb:6a:9b:cd:6f:bc:02:36:9f:6b:81:cf:c6:9d:8f:
df:eb:b2:12:84:4a:b6:e3:5f:be:49:b8:27:fc:b8:
9a:a4:59:98:ca:e2:7c:d8:a0:0d:49:ec:d2:61:a2:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:49:9B:76:8E:8C:D0:1A:58:4A:F5:FC:42:3A:A8:A6:F8:0C:32:A3
X509v3 Authority Key Identifier:
keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:df:f3:1b:a2:f5:bd:a1:e7:bb:11:94:63:da:31:68:31:9a:
12:25:b4:e6:69:1d:01:99:90:c5:4e:41:48:bf:51:ba:0b:03:
52:5f:54:66:1f:42:bf:0d:44:c1:1d:d2:9b:a5:10:13:10:05:
41:6b:ac:39:56:7e:f0:3d:17:c8:54:03:fa:9d:6d:bc:8e:bb:
94:a9:bd:2b:0a:80:d6:29:7e:ae:7e:46:b6:06:78:86:c5:16:
5d:50:e4:3a:db:42:ba:06:73:bf:00:05:48:f8:c2:64:a0:ec:
c4:0b:2a:92:03:3b:a9:d1:9f:69:e9:fd:7b:9b:de:af:54:44:
41:3a:d4:65:9f:25:5a:7e:90:d5:3a:de:ff:57:27:8d:4d:0c:
92:5a:5a:02:75:d9:0a:ee:6c:3d:90:50:25:20:e0:fa:67:36:
14:e0:d1:d0:2e:9d:7e:3d:9c:6f:4b:12:ce:81:a3:19:2d:35:
70:f1:86:8b:e1:d1:c3:3a:c5:59:1f:05:42:e6:c9:d6:31:0c:
47:79:91:6a:a8:fa:31:a3:91:b0:01:c8:90:14:5e:4c:d0:33:
06:c1:0a:82:28:25:37:0e:3c:d1:56:dd:38:dc:89:a6:d1:1b:
4d:80:4c:d6:9d:1c:bd:8a:6e:ef:61:ae:a8:35:43:60:d4:d6:
5d:43:5e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:16:22 2025 by rpki-client