This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft
File: VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft (raw, json)
Hash identifier: 25oOBAWVITMn2ASrW3mGmORxOcfAD4owyHCbMa9dzGY=
Subject key identifier: D8:9D:A2:C7:F6:6A:14:7D:BA:12:A0:FC:C5:16:7C:F2:75:6A:72:BA
Authority key identifier: 54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9
Certificate issuer: /CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9
Certificate serial: 0152
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft
Manifest number: 014F
Signing time: Fri 19 Dec 2025 03:24:52 +0000
Manifest this update: Fri 19 Dec 2025 03:24:52 +0000
Manifest next update: Fri 26 Dec 2025 03:24:52 +0000
Files and hashes: 1: VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl (hash: 3eeis+5Q8kSXHapFnx44PJVp+kS4UdjcFJe/N8bLEkc=)
2: 2C06DFA22C4C11EFB6974530C4F9AE02.roa (hash: x0R7/aV5SAgSCY1aeBWFVSWK6YKsQh3+SMh4O+dO85w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl
rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 03:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DAC0, serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9
Validity
Not Before: Dec 19 03:24:52 2025 GMT
Not After : Dec 26 03:24:52 2025 GMT
Subject: CN=6944c584-beca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:90:2d:29:b0:09:5b:d4:4a:b4:12:7d:46:
b1:93:6b:8d:4b:0b:90:11:b4:34:c7:37:26:62:9f:
18:68:89:2b:5a:2e:41:04:ea:e4:14:2c:67:76:0d:
ad:cf:f2:3f:f9:6a:58:5b:0f:37:68:e5:2f:52:73:
e8:5c:b2:68:a0:77:dd:5b:88:ad:81:05:a1:1b:0a:
40:3e:7a:a4:75:d4:22:2f:77:57:70:71:65:d8:74:
76:c7:d4:99:3a:a9:4a:cb:2d:74:3a:84:fa:f7:dd:
fb:df:09:73:28:c7:be:ec:ce:e5:56:27:58:ce:b2:
fb:72:3f:e2:8d:ef:f9:8f:93:4d:c6:24:73:f9:f3:
9c:87:72:9b:84:7f:61:ca:07:f5:d9:4d:17:94:e4:
34:ff:5f:56:84:e1:b3:1f:9a:4d:00:04:6a:49:9a:
bf:34:47:93:0a:d6:2f:37:66:9b:03:98:c2:54:d5:
ff:95:6a:e1:18:35:8d:30:7f:22:23:36:ec:67:ed:
e2:d7:01:b3:da:9d:b4:59:1f:b5:87:e6:d0:66:54:
ce:92:12:d7:ea:a8:74:7f:29:02:e6:48:a1:0b:47:
07:67:ff:6f:cc:7d:eb:d5:fd:52:dc:7e:c1:51:03:
b8:10:a1:ca:9c:98:dd:b9:92:95:89:54:f0:01:15:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9D:A2:C7:F6:6A:14:7D:BA:12:A0:FC:C5:16:7C:F2:75:6A:72:BA
X509v3 Authority Key Identifier:
keyid:54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:87:d4:f4:19:7a:ff:68:2a:91:17:51:d0:aa:52:99:85:b5:
e0:ee:9b:c2:42:a4:e1:0b:ff:c4:77:ee:65:cc:2a:a1:2f:30:
d0:c5:86:0b:85:f6:6a:d7:68:b5:41:1a:e7:2b:49:88:85:67:
49:43:4c:33:c7:be:62:3e:f9:7e:a9:8c:e3:21:24:7e:77:17:
b5:9a:eb:c2:d8:81:bd:44:48:83:44:be:51:7b:00:0a:d0:64:
96:bb:cb:c1:f4:63:78:c3:21:0d:70:6b:02:0f:c4:90:48:cd:
2a:e5:07:6b:ab:96:0a:b0:49:5c:d0:4a:38:b9:db:28:b4:dd:
4e:2c:c0:94:7a:65:2c:6a:db:de:c0:d3:f4:48:a3:41:3d:02:
d0:3c:e9:ec:34:33:65:13:06:d4:51:6c:bc:c6:a5:9a:a9:90:
a9:68:83:83:fe:1d:db:f7:e7:87:dd:1a:60:c7:b2:28:53:c9:
d2:1d:91:3d:16:5e:10:db:d4:cb:b7:a2:6b:c7:16:62:b0:b9:
f6:6a:64:f1:d6:10:f6:b8:f4:c7:ae:fb:52:a3:93:49:38:e1:
ce:a5:73:8b:31:75:dc:76:72:cb:a5:1d:a7:f4:bf:a3:d3:59:
69:9c:38:56:ee:f5:10:55:04:a2:04:f9:f9:e7:8a:37:03:32:
65:ee:58:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:36:46 2025 by rpki-client