This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
File: p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json)
Hash identifier: qxxg8LvkHhFPrPCHkmTqs8ZL2FJ4F8JXpTXkVAmEJBA=
Subject key identifier: 1B:77:73:B0:39:64:B7:86:1A:F9:11:D2:A2:E3:75:52:08:76:BC:3C
Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
Certificate issuer: /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
Manifest number: 011D
Signing time: Fri 05 Dec 2025 02:50:51 +0000
Manifest this update: Fri 05 Dec 2025 02:50:50 +0000
Manifest next update: Fri 12 Dec 2025 02:50:50 +0000
Files and hashes: 1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: EittlXLE11nV+4DPKmQKnT9Lw8bExqmHRXjpeH5Q6lo=)
2: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: Jf2arvBq83FoSm5BKtxRrGvm4pEMUSYC+oIeuz2JcN8=)
3: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QIMDScliq15LdkPQsPXmCzkeCzTbM6NI7el8bqF5qD8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Validity
Not Before: Dec 5 02:50:50 2025 GMT
Not After : Dec 12 02:50:50 2025 GMT
Subject: CN=6932488b-51e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:f5:76:50:a0:f4:87:0a:de:27:77:a7:34:
27:b0:b2:5e:e5:60:e7:31:a2:df:4d:d4:da:81:46:
97:2a:81:e8:a0:46:78:08:75:bc:b9:27:1a:39:41:
18:a2:8c:77:c7:7d:51:c8:d8:de:52:e6:d6:99:42:
df:ad:1f:81:05:61:4e:17:91:bd:66:4c:08:2e:23:
28:fc:f0:b1:34:e9:d3:5b:65:a6:5f:9d:f2:2e:c5:
33:76:87:8e:a6:a0:1b:2a:17:20:73:c4:7f:69:80:
40:6f:0d:7e:50:11:69:55:b3:3f:1c:33:02:b5:97:
dc:22:92:d9:44:bb:2b:89:a3:d3:22:78:7d:9e:68:
7e:51:81:62:c4:f2:26:b4:5b:f8:b4:af:b0:50:21:
55:a1:c0:e0:c4:5d:19:a2:de:19:78:db:0e:4c:1b:
ba:29:33:89:7c:d7:8d:18:1b:61:cb:0b:59:7d:87:
27:50:16:a5:7e:fc:e7:c5:02:cf:0e:fb:1e:8d:b6:
dc:97:ce:ba:ff:d5:4d:de:a7:01:f3:9d:de:b1:a2:
68:91:b3:c2:86:57:65:c4:55:1d:ae:ca:e8:77:c7:
3c:c6:82:54:6b:89:37:f4:71:39:70:4e:6f:3c:7e:
af:81:7d:8c:c0:c2:e4:0c:f2:57:26:b3:9f:71:fe:
a0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:77:73:B0:39:64:B7:86:1A:F9:11:D2:A2:E3:75:52:08:76:BC:3C
X509v3 Authority Key Identifier:
keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:06:fc:a6:20:9e:b0:7b:b4:bf:74:f6:36:bc:58:ae:bf:8d:
7f:dd:59:ef:ae:33:eb:8f:8d:c2:aa:52:3e:d0:7c:fc:9f:b0:
bf:79:48:4a:43:7d:09:44:81:8b:ca:4b:44:00:6a:1e:dc:bc:
de:cf:42:c9:4e:3f:06:04:39:47:36:4b:9e:33:08:69:81:fb:
3e:c6:36:03:2b:5d:eb:ba:f1:22:7e:6b:47:5b:90:a4:b3:9e:
41:6d:cd:56:4e:0b:06:fa:da:a0:a0:0b:e4:5d:ef:cd:e1:77:
51:6d:c5:97:db:b6:17:24:c8:70:8c:e2:df:b1:0b:5c:5b:5f:
b0:c4:f0:41:2a:66:9c:8a:b3:3e:1d:3e:f6:7b:ad:e3:27:6b:
63:85:fa:61:61:61:bf:e0:18:9e:3d:8b:38:96:c2:ee:d0:9e:
42:e4:a6:c4:de:2e:29:09:ed:b0:bd:5c:73:cc:76:35:86:0f:
b6:3a:0a:2b:92:c4:13:c8:55:5a:81:ae:d7:2c:eb:7d:38:23:
b0:9a:35:88:dc:5a:4b:43:70:4e:9f:6b:e7:01:57:3f:30:95:
bd:ed:67:21:0b:dc:2b:e6:52:84:8e:35:ba:7a:28:16:53:e9:
82:46:7e:e1:34:84:d9:74:f0:7b:0a:e4:1e:36:95:ec:d3:6c:
39:59:74:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:38:48 2025 by rpki-client