This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
File: vbEpSPLgeJsV8C1ROboGsjBqKOc.mft (raw, json)
Hash identifier: qb+4Ln5zSyFuJWQ0KHhxWIsXteRWeyD21w7yidNMi/k=
Subject key identifier: 76:98:6A:B7:05:4F:A8:AB:1E:61:90:9C:07:F1:00:AF:C7:45:AD:40
Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
Certificate issuer: /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Certificate serial: 0565
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
Manifest number: 055B
Signing time: Mon 22 Dec 2025 22:30:59 +0000
Manifest this update: Mon 22 Dec 2025 22:30:58 +0000
Manifest next update: Mon 29 Dec 2025 22:30:58 +0000
Files and hashes: 1: vbEpSPLgeJsV8C1ROboGsjBqKOc.crl (hash: Mu0to3csXNur4NQEPGJY6Xrm/ZkQGnnJjwsiNZJ6ReQ=)
2: D575368892D011F0B767031EC4F9AE02.roa (hash: kzLaaICHZkVtnjNMrsdH4mcf3ZHwNLMcESdDt6YjBQg=)
3: 7A93FBCE92CA11F08DC37F48C4F9AE02.roa (hash: 90ZyS4U6Q1wf7JXIDQayibihHgxjqDGULjXEwxSwLJo=)
4: AFB22EC892C211F0A3854712C4F9AE02.roa (hash: 8XhJkYfZtUkquYR5u12lUnek3pRnxzxHWIehQP2S0wo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1381 (0x565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Validity
Not Before: Dec 22 22:30:58 2025 GMT
Not After : Dec 29 22:30:58 2025 GMT
Subject: CN=6949c6a3-5ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:24:26:a9:cf:f6:b8:3c:23:92:f2:a5:02:1b:
93:51:40:d2:31:55:0e:64:d7:bb:89:13:45:37:0b:
15:72:28:a4:b4:69:73:e3:17:c6:4a:5d:8d:fa:95:
2a:96:0b:ee:86:7d:29:9c:ea:76:ce:b5:6f:1c:20:
13:5d:e3:44:59:de:0c:a0:44:86:a2:3e:dc:4b:35:
e9:c6:07:89:f8:25:96:1c:6b:65:be:32:d7:da:97:
ac:19:29:1f:29:c9:bf:bf:b2:4e:3a:70:77:c0:2b:
2a:b4:b4:92:35:fb:54:0e:6c:87:4b:d7:5f:5e:18:
c1:92:4d:f9:a4:b1:52:9e:0b:41:6c:ab:a8:29:ec:
c9:76:0d:97:1c:ab:03:d8:ae:78:58:67:4b:31:cc:
6f:84:39:92:46:79:66:5a:7a:87:cb:22:74:e2:a7:
21:fa:d9:45:a0:34:77:e3:99:1c:1f:94:6b:7a:db:
61:95:bf:d4:44:c4:3d:63:43:fe:80:4a:ee:84:76:
45:2f:d6:73:75:ce:c9:1b:3f:56:a9:1c:43:08:59:
d4:79:23:42:db:23:26:22:76:e6:00:a9:a1:18:50:
90:30:c5:b2:be:5f:82:5d:dd:af:c9:75:39:e0:bf:
50:2a:1e:93:2f:82:fa:96:b6:6e:64:d5:e7:c0:5d:
7e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:98:6A:B7:05:4F:A8:AB:1E:61:90:9C:07:F1:00:AF:C7:45:AD:40
X509v3 Authority Key Identifier:
keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:39:7c:ed:38:7a:a9:78:1f:8b:2f:ec:12:21:68:28:1b:66:
58:29:8e:3c:0d:ac:7b:c9:2d:bd:da:d4:03:40:b9:59:3b:6c:
ec:60:ff:23:70:79:8e:aa:40:3e:66:7c:22:e8:1f:55:81:0a:
ed:9b:6e:1d:db:62:4d:df:fd:74:36:28:71:30:e2:f2:78:cb:
30:9f:b4:45:af:4f:33:ed:37:93:f5:a2:2a:aa:f2:a9:a4:ff:
a4:94:a0:97:05:39:4f:80:74:ca:77:8d:3f:5f:25:dc:c1:3c:
5a:c1:06:9e:24:e4:64:92:15:bd:f2:91:18:5a:3d:5c:85:e9:
e1:29:ac:68:fd:b0:1d:fe:38:d4:fd:4c:8c:72:8c:e4:00:38:
8d:3e:02:0d:61:b3:10:81:ee:dd:60:ce:ac:52:59:97:b8:c5:
39:53:e4:74:b8:74:28:49:66:bc:50:31:10:3b:cf:a2:8a:be:
4c:32:5c:03:9c:30:2c:67:01:6c:ad:9d:75:ba:a6:0d:fe:d5:
d6:34:12:3a:fe:66:ef:ca:0c:e2:0c:42:b5:6d:e8:92:82:03:
e6:0e:d2:67:f0:ae:bc:58:9f:46:f0:13:49:df:0d:81:7b:36:
ed:3a:ce:5a:26:4a:3a:d6:47:b3:54:f5:29:e7:10:db:b0:3c:
7b:d9:21:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ5RjkxMTAvBgNVBAUTKEJEQjEyOTQ4RjJFMDc4OUIxNUYwMkQ1MTM5QkEwNkIy
MzA2QTI4RTcwHhcNMjUxMjIyMjIzMDU4WhcNMjUxMjI5MjIzMDU4WjAYMRYwFAYD
VQQDDA02OTQ5YzZhMy01ZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3iQmqc/2uDwjkvKlAhuTUUDSMVUOZNe7iRNFNwsVciiktGlz4xfGSl2N+pUq
lgvuhn0pnOp2zrVvHCATXeNEWd4MoESGoj7cSzXpxgeJ+CWWHGtlvjLX2pesGSkf
Kcm/v7JOOnB3wCsqtLSSNftUDmyHS9dfXhjBkk35pLFSngtBbKuoKezJdg2XHKsD
2K54WGdLMcxvhDmSRnlmWnqHyyJ04qch+tlFoDR345kcH5Rretthlb/URMQ9Y0P+
gEruhHZFL9Zzdc7JGz9WqRxDCFnUeSNC2yMmInbmAKmhGFCQMMWyvl+CXd2vyXU5
4L9QKh6TL4L6lrZuZNXnwF1+pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHaYarcF
T6irHmGQnAfxAK/HRa1AMB8GA1UdIwQYMBaAFL2xKUjy4HibFfAtUTm6BrIwaijn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDlGOS82QzY5MkFGNDE0
RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VKc1Y4QzFST2JvR3NqQnFL
T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZiRXBTUExnZUpzVjhDMVJPYm9Hc2pCcUtPYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDlGOS82QzY5MkFGNDE0RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VK
c1Y4QzFST2JvR3NqQnFLT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCBOXztOHqpeB+LL+wSIWgoG2ZYKY48Dax7yS292tQDQLlZO2zsYP8j
cHmOqkA+Znwi6B9VgQrtm24d22JN3/10NihxMOLyeMswn7RFr08z7TeT9aIqqvKp
pP+klKCXBTlPgHTKd40/XyXcwTxawQaeJORkkhW98pEYWj1chenhKaxo/bAd/jjU
/UyMcozkADiNPgINYbMQge7dYM6sUlmXuMU5U+R0uHQoSWa8UDEQO8+iir5MMlwD
nDAsZwFsrZ11uqYN/tXWNBI6/mbvygziDEK1beiSggPmDtJn8K68WJ9G8BNJ3w2B
ezbtOs5aJko61kezVPUp5xDbsDx72SHA
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:48:43 2025 by rpki-client