This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
File: VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json)
Hash identifier: jDB2de7H3I/R58dpZHdGRjCLpdqR0Z3WplOHY6J+B4c=
Subject key identifier: 14:D5:97:98:E1:7C:81:21:8D:25:77:F1:E9:5D:27:FC:C1:3F:89:88
Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
Manifest number: 72
Signing time: Tue 23 Dec 2025 05:45:15 +0000
Manifest this update: Tue 23 Dec 2025 05:45:15 +0000
Manifest next update: Tue 30 Dec 2025 05:45:15 +0000
Files and hashes: 1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: oUWIX+Il6y1/9e+ppSoIsOT6aK8JQHYAhlZFEI0NpR8=)
2: 8F8A915C590C11F0AC0A3639C4F9AE02.roa (hash: 65bo4JvkKG1LiWSEJwhJil93bHGvwvvTBpuZe2kaGMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Validity
Not Before: Dec 23 05:45:15 2025 GMT
Not After : Dec 30 05:45:15 2025 GMT
Subject: CN=694a2c6b-87cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:b5:63:4a:85:38:a3:bb:18:19:a6:c6:e7:
67:38:50:1c:8e:ac:f3:65:bc:47:4e:d9:a1:ba:79:
70:a4:b8:28:b3:20:60:a7:74:5f:07:c4:e9:66:00:
dc:2d:84:af:27:40:7c:e2:fb:c6:e9:2f:6d:6c:95:
5a:33:95:3d:ae:4a:f4:88:44:74:0e:ee:30:be:98:
18:ce:93:cc:81:73:0f:b8:d3:3f:68:6c:8c:9c:2f:
d8:32:ee:6a:11:b4:a9:25:64:a0:a6:21:5e:62:0f:
a8:47:41:9d:e3:09:be:4c:21:6c:b7:33:cb:c3:ff:
2c:fe:04:78:94:58:ae:8d:dc:bd:fb:1a:28:dd:88:
b1:f4:a2:e2:0c:e6:36:92:e6:e9:68:cd:19:67:db:
4d:e6:c9:c7:1f:08:04:24:57:df:a2:dc:84:1d:47:
e0:38:9b:81:86:7e:57:ef:bf:bf:0c:d3:98:54:18:
c6:2b:a0:77:91:5c:90:c8:ee:fc:67:aa:fc:1e:7e:
0d:bb:1e:35:2e:aa:b8:f7:81:07:a7:1b:28:ad:4a:
02:22:65:62:5e:d7:81:fc:b3:93:30:b5:64:61:2e:
a9:d9:ad:a3:7a:b8:f8:fa:c4:05:a0:8f:e3:6c:0d:
ba:22:d0:aa:1b:dc:3d:fa:25:d7:df:56:85:72:24:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D5:97:98:E1:7C:81:21:8D:25:77:F1:E9:5D:27:FC:C1:3F:89:88
X509v3 Authority Key Identifier:
keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0c:1a:bb:86:01:4b:d4:e5:b4:b9:15:15:0e:a1:99:bd:95:
83:4b:6f:f6:d9:92:03:73:b7:ed:98:c2:38:4c:19:55:cb:c8:
72:61:5a:da:8e:e8:98:db:ff:64:7f:fa:13:1b:d9:8e:77:0f:
f3:37:ac:eb:1f:9e:5a:ea:07:70:d4:b4:f2:96:58:d4:f9:de:
72:74:ad:9a:95:0d:60:27:06:97:d3:f7:c7:24:2b:11:43:6a:
3a:9c:46:7b:b9:a8:85:ba:4c:83:5f:4a:34:61:81:6c:df:2b:
3d:4a:2e:7c:38:18:c1:33:87:18:ed:a5:ed:b0:23:b9:7d:b7:
58:b3:f3:e1:cb:67:ad:1d:59:af:be:0e:68:e5:c6:50:e6:c6:
bf:72:04:4e:9b:da:04:cd:4e:6a:8b:34:ef:2a:a0:96:82:1d:
cd:3c:f1:50:c7:6b:a1:93:e7:bb:48:f3:19:d3:05:45:04:64:
d3:8a:32:d5:e4:f0:63:f3:f7:89:2f:a3:c5:3e:80:18:1d:53:
87:8c:ca:9a:23:65:50:22:d8:88:24:53:09:6b:7e:53:3c:f8:
64:9f:0f:d5:24:54:fe:53:b7:cd:0d:34:7a:59:3b:1f:94:6f:
7d:ad:e2:4e:15:f3:0f:99:5e:de:a5:d1:16:dc:7e:2e:c5:d8:
ab:03:f7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:33:23 2025 by rpki-client