This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
File: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft (raw, json)
Hash identifier: 0ufQPpGyqz/Ek0EXEO9BK3B7e8TD/buhlrivc2hnvew=
Subject key identifier: 8C:43:33:D3:7F:AF:6B:96:4C:10:5B:D0:D4:6E:17:23:5E:2E:97:C6
Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04
Certificate issuer: /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
Certificate serial: 0A88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
Manifest number: 0A75
Signing time: Wed 10 Dec 2025 18:44:02 +0000
Manifest this update: Wed 10 Dec 2025 18:44:01 +0000
Manifest next update: Wed 17 Dec 2025 18:44:01 +0000
Files and hashes: 1: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl (hash: R67J4NB347S65VKZ9cjg6CPmHZTiRgTMHB1f5zl6bpY=)
2: F94FA23C92F211EC8D04F649C4F9AE02.roa (hash: DROILj1BwyjxRZ/+rF2KA3dKpZPUrELvcEb3dM0Qp7U=)
3: F61F817C9B3B11EBA5C76B80C4F9AE02.roa (hash: zc4cHjOXUtulolit5W5JS6fmyA0a1J1yq4iXu5YdjfI=)
4: 6897409A73E811EA93705B7CC4F9AE02.roa (hash: gUFANucoHRujP4j5Puno+323S2mO6+VcvY0hxTT5wug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl
rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 18:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2696 (0xa88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
Validity
Not Before: Dec 10 18:44:01 2025 GMT
Not After : Dec 17 18:44:01 2025 GMT
Subject: CN=6939bf72-4c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:00:82:b9:e4:75:ed:00:1b:c2:66:ce:3a:
8c:8b:2b:52:61:69:0a:4d:14:c1:25:06:5c:ee:97:
cb:6f:51:24:a6:3e:0f:4a:4f:24:38:be:53:ab:c2:
c6:a3:08:e2:51:62:92:39:39:8d:13:fd:4b:1a:16:
03:b8:25:68:da:1f:15:ff:d7:1f:e7:38:cd:c9:41:
c4:4b:78:1c:97:33:4e:6f:4d:79:15:f6:f6:28:1b:
a8:6b:02:21:e3:8a:bc:10:60:b1:19:72:1f:c3:34:
1b:35:d8:a7:50:b1:80:b7:53:1b:b3:f8:6f:10:0c:
3f:29:60:02:14:6e:ff:04:7b:75:a0:b9:10:9a:fa:
db:26:ea:7f:1a:5c:de:c6:29:b2:70:d0:04:e5:94:
c0:4b:83:7f:ef:bb:02:c1:40:36:34:7b:27:ca:58:
a5:cd:2c:35:49:06:aa:ae:0d:dd:0e:ea:37:46:9c:
23:fe:71:cf:bd:d1:86:2b:c8:17:6b:51:90:9a:96:
f0:c0:ac:4a:70:5c:63:e5:eb:a9:63:2b:24:cb:53:
7f:39:50:af:57:88:5c:ea:f6:ae:c2:67:dc:f1:a6:
26:92:d0:5d:c0:94:2f:f7:6a:49:f8:5d:87:0d:da:
09:1c:45:6b:4a:92:a8:48:92:0c:ef:a2:03:0c:56:
94:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:43:33:D3:7F:AF:6B:96:4C:10:5B:D0:D4:6E:17:23:5E:2E:97:C6
X509v3 Authority Key Identifier:
keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:01:e4:bd:70:9c:5e:a1:dc:43:08:ff:55:b3:95:31:60:69:
2a:32:7d:3d:a7:d3:7b:2a:6b:c1:0c:42:db:99:b0:7e:0b:eb:
e4:7c:ed:5b:d4:33:4a:a9:20:d8:69:83:5c:c3:25:2f:0a:9f:
e8:9e:2c:a8:37:7f:d2:83:c4:95:5e:70:72:cd:db:95:dc:fe:
79:b4:8c:cc:2f:72:56:e2:9d:08:96:a1:b5:c4:da:b2:54:8d:
61:f2:dc:d6:73:94:43:aa:1a:42:77:31:3f:9e:ad:f1:8e:13:
d8:92:9f:b9:08:8a:20:3c:3a:70:38:b9:0c:a8:e7:df:18:ab:
1c:79:22:1c:ee:50:49:d3:a6:71:47:61:61:e7:01:34:38:0c:
e4:d5:cc:f0:ba:92:62:f2:7d:e2:a7:7c:8c:38:37:41:fa:29:
5e:61:bb:4d:dc:29:88:fd:8e:b6:61:2c:7c:02:a3:c6:18:8e:
ef:95:e5:ca:de:c0:3e:a8:da:30:d9:3d:9f:43:60:39:ad:c8:
07:dc:73:9f:9e:1f:af:15:46:aa:a4:a7:c2:4d:24:22:28:9a:
03:d5:00:bf:50:fa:0e:79:ad:77:23:4b:c7:0f:63:31:a0:53:
d7:26:51:04:67:7b:8c:85:4a:38:bb:58:b3:6f:e8:78:e5:e2:
45:9f:9b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:53:45 2025 by rpki-client