This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
File: VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json)
Hash identifier: TGsuphRZnc+Z2Rdxjxt5Iz1PXl8o4jeAeVXQQsgRMCE=
Subject key identifier: F0:21:68:7C:B2:3E:0B:AA:8B:53:03:7C:2A:0E:6A:BA:9A:FD:42:3D
Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
Certificate issuer: /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
Manifest number: 010F
Signing time: Tue 23 Dec 2025 03:54:56 +0000
Manifest this update: Tue 23 Dec 2025 03:54:56 +0000
Manifest next update: Tue 30 Dec 2025 03:54:56 +0000
Files and hashes: 1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: eJAVWO21EzaVT3LETDmg23PMEjEmKV8N1TGWs7rpY5A=)
2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: XqPR58WFjxW/r7vrXermk8/pxwRAohdmERUavDiArx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Validity
Not Before: Dec 23 03:54:56 2025 GMT
Not After : Dec 30 03:54:56 2025 GMT
Subject: CN=694a1290-cb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:08:0b:e1:52:e6:df:60:11:28:12:cf:d3:f8:
46:9b:68:24:5e:03:63:15:ce:77:17:3d:fe:48:48:
e6:6c:d8:22:df:f7:b1:6e:db:89:66:f9:02:91:eb:
15:1f:f9:fc:6c:0f:c0:09:7a:04:2c:6f:05:03:3b:
bd:9d:2b:ac:12:75:b3:71:fc:99:e9:bf:7d:06:67:
81:f7:be:c2:f8:30:0a:b3:97:a5:26:49:ca:e5:f0:
3e:34:e5:e8:26:3b:0b:d8:5d:19:46:77:80:16:e9:
49:bf:f7:0b:22:e2:55:2c:6a:f8:a5:fe:50:88:01:
0a:41:6a:93:6a:ad:2a:42:ce:53:78:af:98:62:bf:
86:46:8b:08:4b:9a:d7:bc:60:0b:fb:14:f3:cd:2e:
b1:51:e1:f9:9b:89:28:90:7c:14:71:84:62:95:ea:
19:69:5f:cc:ad:5e:2d:cc:66:57:f3:89:f9:87:31:
01:c0:11:de:f6:c7:03:bf:3b:91:84:4d:6e:83:b7:
54:fe:8b:18:3d:2e:c6:50:61:0a:68:a4:cd:c1:2e:
28:a2:9b:69:59:34:18:26:af:b1:ce:52:9a:39:cd:
76:04:2e:ae:94:db:b0:c2:99:52:d8:78:7a:78:0b:
79:2a:26:62:52:de:56:53:37:67:16:61:92:7b:5f:
05:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:21:68:7C:B2:3E:0B:AA:8B:53:03:7C:2A:0E:6A:BA:9A:FD:42:3D
X509v3 Authority Key Identifier:
keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:ba:a6:7b:2d:5a:2e:ff:f1:5b:7a:98:f8:94:0e:bd:c7:bf:
7f:37:6d:5d:a2:18:7b:93:16:e7:08:15:12:9c:6c:5e:16:3e:
fb:8b:8f:31:b5:40:11:14:5c:94:8e:a5:e1:78:92:ef:ab:36:
ed:38:b4:82:d6:40:2d:61:79:48:9a:dd:62:3a:f3:8e:0d:25:
07:10:12:b2:37:37:2e:54:09:db:b9:24:f7:e5:79:a3:b7:ec:
80:14:c9:a0:7e:3f:ab:94:ab:96:4c:b9:e8:b8:12:bd:52:71:
64:7f:e3:52:7c:b6:bb:12:6d:56:fe:92:e1:ac:64:0e:6f:fb:
6a:02:4d:9e:0f:75:6e:e9:f9:f7:bf:00:be:14:03:a1:50:8a:
f4:c6:3d:da:1f:45:8f:6b:62:55:4f:92:5e:50:6d:e1:09:3a:
c4:92:cc:f0:8e:20:07:89:70:65:4e:b6:9e:d0:32:b9:22:ae:
56:e1:a1:1d:b5:17:a0:c4:83:72:94:ae:65:df:fb:95:34:e6:
f5:1b:ce:eb:45:53:bc:c1:5b:46:e2:54:18:da:ca:de:d9:c0:
db:ab:61:3b:84:2e:30:e1:35:5b:79:50:5d:1e:eb:35:9d:44:
39:be:00:02:c7:8e:c7:ab:cd:cf:92:b0:35:4f:cd:0e:3e:dd:
80:55:6b:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTMzMDMxMTAvBgNVBAUTKDU0N0ExMTBGRjJFM0E0RDQyMDhFQTVCN0MzRTg3MjlB
OUIwRkQ0OUMwHhcNMjUxMjIzMDM1NDU2WhcNMjUxMjMwMDM1NDU2WjAYMRYwFAYD
VQQDDA02OTRhMTI5MC1jYjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4wgL4VLm32ARKBLP0/hGm2gkXgNjFc53Fz3+SEjmbNgi3/exbtuJZvkCkesV
H/n8bA/ACXoELG8FAzu9nSusEnWzcfyZ6b99BmeB977C+DAKs5elJknK5fA+NOXo
JjsL2F0ZRneAFulJv/cLIuJVLGr4pf5QiAEKQWqTaq0qQs5TeK+YYr+GRosIS5rX
vGAL+xTzzS6xUeH5m4kokHwUcYRileoZaV/MrV4tzGZX84n5hzEBwBHe9scDvzuR
hE1ug7dU/osYPS7GUGEKaKTNwS4ooptpWTQYJq+xzlKaOc12BC6ulNuwwplS2Hh6
eAt5KiZiUt5WUzdnFmGSe18FHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAhaHyy
Pguqi1MDfCoOarqa/UI9MB8GA1UdIwQYMBaAFFR6EQ/y46TUII6lt8PocpqbD9Sc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzMwMy83OEE4MUQxMDNG
RTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBOUWdqcVczdy1oeW1wc1Ax
SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZIb1JEX0xqcE5RZ2pxVzN3LWh5bXBzUDFKdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzMwMy83OEE4MUQxMDNGRTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBO
UWdqcVczdy1oeW1wc1AxSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAzuqZ7LVou//Fbepj4lA69x79/N21dohh7kxbnCBUSnGxeFj77i48x
tUARFFyUjqXheJLvqzbtOLSC1kAtYXlImt1iOvOODSUHEBKyNzcuVAnbuST35Xmj
t+yAFMmgfj+rlKuWTLnouBK9UnFkf+NSfLa7Em1W/pLhrGQOb/tqAk2eD3Vu6fn3
vwC+FAOhUIr0xj3aH0WPa2JVT5JeUG3hCTrEkszwjiAHiXBlTrae0DK5Iq5W4aEd
tRegxINylK5l3/uVNOb1G87rRVO8wVtG4lQY2sre2cDbq2E7hC4w4TVbeVBdHus1
nUQ5vgACx47Hq83PkrA1T80OPt2AVWsW
-----END CERTIFICATE-----
Generated at Wed Dec 24 08:47:08 2025 by rpki-client