This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
File: 78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json)
Hash identifier: VT37RNtEt0sQuwCZ6r2m3CCAoZEMf5A+v0ka3n1bjEc=
Subject key identifier: A6:53:8D:36:82:65:47:55:25:91:18:14:1B:C1:B9:01:09:BF:DB:81
Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
Certificate issuer: /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
Manifest number: 011B
Signing time: Fri 05 Dec 2025 02:51:21 +0000
Manifest this update: Fri 05 Dec 2025 02:51:21 +0000
Manifest next update: Fri 12 Dec 2025 02:51:21 +0000
Files and hashes: 1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: Wxy/cVwlydKCkt7V4xiw2mB6OKPwGjUcWh83mmcSc0k=)
2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: gGWIR4nH/QFD71GxDfh04qRa0gYEVkAhSwx6PRLquIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Validity
Not Before: Dec 5 02:51:21 2025 GMT
Not After : Dec 12 02:51:21 2025 GMT
Subject: CN=693248a9-45ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:2d:55:6b:2d:e0:0b:9c:c8:3d:11:d5:c5:
12:65:e5:3f:5f:81:19:71:b6:f9:b7:72:a6:a4:63:
f7:29:2d:cc:b3:51:46:59:1a:6c:e5:10:6c:ab:33:
32:4e:60:f3:e5:3c:dd:f3:e0:50:0d:61:99:3b:2f:
5a:48:d5:97:81:1f:08:65:22:50:48:b0:ee:a2:7a:
f6:be:f1:8f:e5:ae:24:17:78:79:d5:84:6f:fe:a3:
b6:2a:f0:8c:61:8a:f0:b2:21:1b:34:da:48:47:dc:
de:b5:ea:0b:7b:c7:92:54:7b:ce:5f:85:b9:c9:46:
98:e8:88:9b:1f:57:0e:c3:c9:d2:1e:98:70:1b:95:
61:16:c5:3b:2c:94:9a:6d:7d:67:13:bd:c4:60:c4:
8a:bb:cb:1c:a7:c8:83:ff:00:04:48:ac:d4:5b:fb:
09:03:89:47:74:d2:6e:1b:d4:0b:81:e1:7d:02:b3:
17:1d:a0:d8:18:66:0a:b6:3c:83:d4:58:41:16:56:
df:a8:bd:ad:3a:ce:1f:9e:c6:7a:71:c6:8c:be:ab:
ee:58:53:0c:1c:62:93:e4:9c:3e:c0:27:52:62:30:
b6:2f:3b:4b:9c:2b:5e:17:cc:14:f1:01:10:9d:11:
d0:45:32:9a:a6:df:2f:ee:93:cd:c7:05:45:70:1f:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:53:8D:36:82:65:47:55:25:91:18:14:1B:C1:B9:01:09:BF:DB:81
X509v3 Authority Key Identifier:
keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:4c:7d:3c:c9:08:bd:34:eb:47:33:05:88:e1:f2:0f:89:c1:
00:0f:29:93:17:05:06:ba:af:3a:59:46:a8:1d:7e:04:c5:10:
98:09:ee:68:a9:4d:4d:35:f4:11:4e:1f:e1:d1:58:bd:8b:ae:
16:5e:7e:34:eb:6b:d1:2a:6e:27:7d:80:75:30:9b:4b:7b:82:
6a:ad:3c:c8:28:68:0e:fa:45:96:1c:66:83:f8:db:6e:5e:28:
6f:50:9b:0c:0f:fe:0b:59:01:4f:a5:f8:b9:72:18:2e:97:90:
0f:53:91:ba:39:af:7c:78:fd:5c:f1:72:d3:8d:73:e1:b5:07:
95:08:10:02:b2:d3:6e:85:eb:ea:22:16:86:fa:d5:60:bd:bb:
e8:d5:1b:c0:6e:db:4a:97:b8:bc:d7:50:b5:96:ab:09:bf:d6:
34:c7:1e:bd:ff:cc:23:97:1c:d8:1a:05:8d:23:54:07:82:00:
a8:1c:f7:7c:39:74:79:6f:b6:57:85:4e:fb:be:86:fa:57:f6:
b7:b8:78:ff:ee:f4:0f:b8:bb:8f:6a:5b:75:64:94:de:51:04:
62:df:90:9e:dd:f9:56:38:f2:f8:87:2c:e0:4a:bc:a6:fa:bf:
2e:2f:2a:da:01:47:b7:8b:fc:c8:3e:77:e0:b4:1a:72:4b:1a:
7c:ac:d5:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEIwQ0YxMTAvBgNVBAUTKEVGQzE3QjBEMTExMjZDN0ZBOTQxQkQ0RDBFQ0E3QUEz
OUU5MzQ2QTAwHhcNMjUxMjA1MDI1MTIxWhcNMjUxMjEyMDI1MTIxWjAYMRYwFAYD
VQQDEw02OTMyNDhhOS00NWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqcUtVWst4AucyD0R1cUSZeU/X4EZcbb5t3KmpGP3KS3Ms1FGWRps5RBsqzMy
TmDz5Tzd8+BQDWGZOy9aSNWXgR8IZSJQSLDuonr2vvGP5a4kF3h51YRv/qO2KvCM
YYrwsiEbNNpIR9zeteoLe8eSVHvOX4W5yUaY6IibH1cOw8nSHphwG5VhFsU7LJSa
bX1nE73EYMSKu8scp8iD/wAESKzUW/sJA4lHdNJuG9QLgeF9ArMXHaDYGGYKtjyD
1FhBFlbfqL2tOs4fnsZ6ccaMvqvuWFMMHGKT5Jw+wCdSYjC2LztLnCteF8wU8QEQ
nRHQRTKapt8v7pPNxwVFcB+uPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZTjTaC
ZUdVJZEYFBvBuQEJv9uBMB8GA1UdIwQYMBaAFO/Bew0REmx/qUG9TQ7KeqOek0ag
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjBDRi83RTAxM0NEQTFG
MTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JILXBRYjFORHNwNm81NlRS
cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzc4RjdEUkVTYkgtcFFiMU5Ec3A2bzU2VFJxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjBDRi83RTAxM0NEQTFGMTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JI
LXBRYjFORHNwNm81NlRScUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAATH08yQi9NOtHMwWI4fIPicEADymTFwUGuq86WUaoHX4ExRCYCe5o
qU1NNfQRTh/h0Vi9i64WXn4062vRKm4nfYB1MJtLe4JqrTzIKGgO+kWWHGaD+Ntu
XihvUJsMD/4LWQFPpfi5chgul5APU5G6Oa98eP1c8XLTjXPhtQeVCBACstNuhevq
IhaG+tVgvbvo1RvAbttKl7i811C1lqsJv9Y0xx69/8wjlxzYGgWNI1QHggCoHPd8
OXR5b7ZXhU77vob6V/a3uHj/7vQPuLuPalt1ZJTeUQRi35Ce3flWOPL4hyzgSrym
+r8uLyraAUe3i/zIPnfgtBpySxp8rNVv
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:26:57 2025 by rpki-client