This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
File: VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft (raw, json)
Hash identifier: M0mI3kOc7Zo6gFjt2g2xBria3FWU3CirFPVQClTy8EY=
Subject key identifier: 83:E5:FF:CD:1D:C3:FE:A0:CF:D4:58:91:72:3B:09:57:F3:D4:1E:4E
Authority key identifier: 54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D
Certificate issuer: /CN=A912F62D/serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
Manifest number: A2
Signing time: Tue 23 Dec 2025 05:15:34 +0000
Manifest this update: Tue 23 Dec 2025 05:15:33 +0000
Manifest next update: Tue 30 Dec 2025 05:15:33 +0000
Files and hashes: 1: VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl (hash: kQYSL/+FLJwZ+9bA7C0C4PefPDqIaPx5A2CDaDYpRvg=)
2: 6DAFB1EAEA7E11EF93A91726C4F9AE02.roa (hash: RGby5CWUvljyTQmbtKXFF+09T5sv2LL/jpj1mhUT/QE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl
rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:15:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F62D, serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
Validity
Not Before: Dec 23 05:15:33 2025 GMT
Not After : Dec 30 05:15:33 2025 GMT
Subject: CN=694a2576-ff35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:bd:d7:9e:82:e7:26:6b:2c:10:6e:6d:81:
e3:92:f6:76:ac:8b:6c:20:34:be:d0:5d:53:6e:bb:
ee:07:43:48:69:18:5c:65:0a:45:86:c6:52:7c:16:
ba:37:5a:40:45:44:bf:81:27:25:fb:a1:88:a2:77:
31:11:73:ca:2e:6f:c5:2f:ae:7f:69:68:2c:65:cf:
2c:0d:ee:97:36:8c:6f:fa:9a:09:11:5c:92:c5:c3:
c9:84:85:e8:27:6f:fc:d2:57:f3:03:7d:89:25:b7:
7c:1b:de:6a:fe:1b:d5:bc:ac:ed:4d:cc:36:2d:3a:
d6:51:42:f1:73:b4:4b:cd:32:ba:40:f3:a5:d4:6c:
53:ff:45:a6:8b:08:6c:ab:9f:e1:8d:34:c9:98:c4:
fa:1f:eb:51:ca:f6:0b:5b:53:b5:61:c3:89:9f:23:
5c:0a:91:52:9d:b5:09:7b:4e:c3:20:07:e1:00:26:
75:8e:af:45:a4:04:f3:8b:25:93:bd:24:23:96:f2:
59:8d:42:63:fe:41:d2:68:c1:1a:38:4e:c9:3b:49:
6f:2c:30:06:c0:bb:41:10:4c:e4:b1:74:71:2a:e6:
7c:f9:2d:e4:43:2d:a9:cf:be:b4:7e:d6:a0:2e:68:
2b:52:c5:21:44:eb:0c:e2:37:6e:b8:a8:56:9e:1b:
cb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E5:FF:CD:1D:C3:FE:A0:CF:D4:58:91:72:3B:09:57:F3:D4:1E:4E
X509v3 Authority Key Identifier:
keyid:54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2c:64:0e:b6:0a:84:d7:61:d0:cf:75:92:ad:d0:64:96:1d:
38:3f:5a:3b:f3:1d:16:c7:0d:c8:38:3f:21:9d:0f:33:ce:9b:
20:3e:9b:4a:82:f0:91:8a:b2:c9:83:0f:0d:a8:29:14:48:b5:
6c:86:9b:db:42:b9:eb:f7:a9:f9:55:36:58:6d:e5:95:68:41:
dc:a7:59:77:19:f9:6e:5c:13:a6:0c:09:a6:1f:12:47:a8:16:
2f:f6:26:a3:4f:6f:43:ac:8d:5c:54:a7:d9:ff:06:be:70:3c:
b0:ec:aa:a4:6f:75:7e:a1:78:73:8e:4b:2d:a4:b8:6c:7a:3b:
aa:25:3a:fc:f6:dc:7b:ac:3d:36:ec:6c:b1:5c:f1:87:51:13:
14:ed:21:54:0e:c3:83:18:95:7b:7e:59:60:9c:a4:53:15:9c:
c4:39:35:f0:fa:32:03:e2:49:64:53:4d:66:68:7c:b4:48:30:
46:15:11:e6:2f:df:e3:cb:78:e1:fd:d3:22:5d:9b:8d:88:cf:
52:5a:b4:c6:b1:99:02:89:7c:f5:ac:cc:93:8a:d6:ba:27:a0:
7a:6d:b6:c6:4a:1e:d5:7d:f9:3d:99:d9:b1:a0:87:a4:d5:91:
a5:4e:ca:0e:33:fb:95:5d:1c:b2:5f:20:83:c2:3e:3b:f1:9d:
30:ae:78:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:24 2025 by rpki-client