This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
File: VVzqN0EM0oazHxoArfYlPUzgUjI.mft (raw, json)
Hash identifier: y9PluXMdLwkKkwSXrDv4fyFzQJ8acoBwklGEwdGHiD4=
Subject key identifier: 48:62:B4:32:66:13:89:9C:CD:ED:73:DB:FB:7E:C1:12:5F:77:77:98
Authority key identifier: 55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32
Certificate issuer: /CN=A9137522/serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
Certificate serial: 34F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
Manifest number: 34F0
Signing time: Mon 22 Dec 2025 14:56:14 +0000
Manifest this update: Mon 22 Dec 2025 14:56:14 +0000
Manifest next update: Mon 29 Dec 2025 14:56:14 +0000
Files and hashes: 1: VVzqN0EM0oazHxoArfYlPUzgUjI.crl (hash: N2g4sjpt+qsH4wRKywPiRYHyx/IoEm9BMvpk19OnMOI=)
2: FF9802D6FE3911EBBCE1485DC4F9AE02.roa (hash: 568OZFsZ65IljrgEB7BfKeTiUKIZul9sanmI2zkZhwE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl
rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 14:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13558 (0x34f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137522, serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
Validity
Not Before: Dec 22 14:56:14 2025 GMT
Not After : Dec 29 14:56:14 2025 GMT
Subject: CN=69495c0e-2a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:60:b6:bc:6b:7d:bd:78:93:70:23:8a:2c:
c1:12:98:98:f6:67:8d:2d:0e:2e:ec:a3:ee:67:d6:
a9:f0:ba:98:0a:9d:31:e4:43:a3:ab:c5:52:28:13:
b3:e7:61:2b:60:56:2e:b3:5b:f6:cc:b0:e7:55:6c:
e2:9a:3d:2f:b3:06:9d:0d:5d:b3:37:3f:16:13:08:
4d:02:3f:51:bd:1d:48:02:fa:32:18:58:17:23:a7:
63:a9:80:8b:7a:c9:ea:86:35:d4:ff:16:80:85:7c:
3e:21:0c:04:4b:76:45:4a:87:84:fa:7a:c5:14:d0:
c1:01:19:d6:92:35:86:95:3b:1e:b2:4f:d8:c5:03:
4b:84:16:5d:5c:b6:7f:51:bc:5e:d4:91:36:0a:44:
79:5e:f4:23:4f:e2:50:15:67:e3:bf:09:ef:75:f6:
dc:0e:d9:46:24:81:db:53:eb:e3:fb:da:11:82:2c:
02:25:c4:9a:d9:74:af:46:06:bc:b5:16:5f:71:8b:
25:bb:f2:43:a1:b0:fb:95:f3:60:bc:e8:d3:bb:46:
d3:ca:f8:65:9b:f8:a2:c6:ab:d0:b9:4c:3e:53:c6:
28:9c:09:7a:72:48:94:6f:3a:bf:c6:df:7b:fa:d3:
12:7e:0c:76:9f:fa:47:2b:5a:37:b9:89:1d:e8:b3:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:62:B4:32:66:13:89:9C:CD:ED:73:DB:FB:7E:C1:12:5F:77:77:98
X509v3 Authority Key Identifier:
keyid:55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e6:f0:1c:f0:7f:ca:6a:21:fb:9c:e3:19:aa:01:bd:0d:aa:
0a:70:1e:71:7f:e2:e2:66:16:c2:03:24:95:ab:d5:e2:cf:59:
d4:67:42:2b:e3:55:79:f4:63:53:ea:7b:b4:bb:1d:32:81:cc:
03:89:a7:68:37:1f:52:fa:73:6f:3a:86:3b:29:a6:a8:cb:2b:
b9:56:70:2e:d8:04:d6:b0:02:d7:ce:d1:81:b6:d0:f9:9d:4f:
4d:21:7d:c5:04:b1:fb:7f:4f:e6:1f:33:98:be:68:f2:e0:16:
68:1d:b0:98:7f:ac:e8:f9:a2:7e:17:d8:8e:ce:09:ac:f7:f7:
65:c7:c1:2c:03:32:8e:3d:62:7f:3c:33:43:ce:aa:a9:a1:0d:
19:d4:a7:fe:b0:25:6d:e4:88:f9:0e:03:e0:8c:38:ba:53:5d:
af:b0:50:01:a8:c6:d2:93:25:b3:b6:77:68:5b:3e:29:a3:47:
43:da:ad:f5:e1:3f:1e:95:24:10:91:ed:5a:ad:38:47:af:d4:
1d:41:fd:ab:77:90:5b:7b:fe:70:23:8d:95:5c:73:25:fe:bf:
00:e6:dc:13:e3:1f:3d:fc:93:60:df:f1:f8:3b:0b:84:9d:6c:
ae:cc:04:6c:7b:31:fa:09:e1:15:82:72:62:b3:ba:b6:c5:2f:
8c:29:c3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:24 2025 by rpki-client