This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
File: vwxRAalGDasWiyHwJOMMiVoCjEI.mft (raw, json)
Hash identifier: IxfiOgr6RWVa3sqsjeSLmaCtjmoyNz7R/nTKqUszsH8=
Subject key identifier: 03:06:D3:1D:47:A2:4D:19:86:2E:E6:DB:3B:62:78:21:5A:E6:FE:EB
Authority key identifier: BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42
Certificate issuer: /CN=A9180307/serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
Certificate serial: 0570
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
Manifest number: 056A
Signing time: Mon 22 Dec 2025 22:28:50 +0000
Manifest this update: Mon 22 Dec 2025 22:28:49 +0000
Manifest next update: Mon 29 Dec 2025 22:28:49 +0000
Files and hashes: 1: vwxRAalGDasWiyHwJOMMiVoCjEI.crl (hash: akkca+gWOgUf5PI3LWMeLke896xtdOlg4vZFg7u0tl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl
rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392 (0x570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180307, serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
Validity
Not Before: Dec 22 22:28:49 2025 GMT
Not After : Dec 29 22:28:49 2025 GMT
Subject: CN=6949c622-6ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:dc:4b:ec:b1:4c:b5:21:c6:0e:7c:b3:34:
62:e8:66:cf:ac:07:7e:9a:ba:92:98:b8:a7:5f:74:
cf:cf:ba:6d:b9:36:69:6a:28:91:12:4e:2a:a8:71:
e2:21:cd:f4:fa:1e:3e:41:8d:55:76:a0:11:7b:79:
a9:88:32:d3:dc:d2:c1:89:83:7c:52:f2:18:a8:64:
f9:ed:85:30:d3:bc:2e:b6:87:05:d0:8e:5e:bf:3e:
30:3f:7c:54:81:3e:fe:d8:a3:80:0e:45:98:00:47:
25:a6:39:2d:bf:c0:05:93:85:0f:8c:8f:47:5b:fc:
7d:db:7b:56:3c:c8:42:44:16:76:34:64:d0:c3:f5:
cd:9f:71:b7:67:6d:c4:92:85:eb:f5:bd:cd:66:eb:
38:4b:45:e4:2a:60:24:34:d5:0d:98:5f:79:5b:90:
e2:8f:13:97:ba:d1:1d:27:91:db:11:5e:2f:58:dd:
d6:d4:34:7a:2a:65:ff:08:f6:c1:1c:d5:97:8f:76:
a5:b9:50:ca:5e:c3:b9:2f:9d:d4:19:75:f1:b5:f1:
2a:51:6d:7d:34:8c:4b:89:d4:82:fd:33:43:bf:7d:
fd:e8:0b:d4:ea:cd:7a:a3:ff:5d:07:c2:e3:0b:4f:
07:91:12:72:d1:95:05:05:ff:a9:b1:5f:c6:97:e0:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:06:D3:1D:47:A2:4D:19:86:2E:E6:DB:3B:62:78:21:5A:E6:FE:EB
X509v3 Authority Key Identifier:
keyid:BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a1:9c:28:c0:ab:ac:c5:e8:7c:ee:04:a1:c8:07:e0:b1:15:
35:b2:67:01:84:cf:fb:05:ed:30:c3:10:1e:3c:ff:2d:2d:e6:
bf:6b:de:a3:62:59:4a:40:d0:a6:d5:9c:3d:59:f0:ef:37:cd:
45:9d:52:0c:38:92:b9:32:f5:52:2e:7d:ef:f2:ac:3e:16:3b:
15:a4:94:d6:df:6b:b7:7e:34:47:ac:9a:32:80:a1:fc:1e:bb:
ec:1f:70:7d:fb:e8:83:ab:24:f6:74:90:0f:75:01:5e:24:27:
d0:4e:2e:2b:3e:fa:31:00:0e:e3:92:a3:a1:c1:0b:7f:52:4d:
a1:cf:ab:30:f7:9c:65:7d:56:fa:e6:6e:ec:b8:30:02:5e:96:
f5:73:8d:b5:70:a9:47:b7:a0:f3:26:1e:b8:e6:3b:e8:ed:ac:
30:32:f3:ef:67:40:b6:82:d7:4b:b1:2f:b7:56:5c:d5:66:47:
59:d9:76:fc:ac:47:9c:f5:45:3d:49:a9:2b:ae:03:3a:8a:18:
09:56:4d:c6:85:a1:98:72:42:33:7d:3f:96:76:9e:45:63:5e:
9a:9a:5e:99:f4:0b:b5:dd:b8:24:17:3d:03:7c:6a:63:a8:f6:
60:96:c4:8b:f8:03:15:88:54:f0:6a:5c:3c:c5:d2:1a:53:cb:
4b:b3:f2:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzMDcxMTAvBgNVBAUTKEJGMEM1MTAxQTk0NjBEQUIxNjhCMjFGMDI0RTMwQzg5
NUEwMjhDNDIwHhcNMjUxMjIyMjIyODQ5WhcNMjUxMjI5MjIyODQ5WjAYMRYwFAYD
VQQDDA02OTQ5YzYyMi02YmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugvcS+yxTLUhxg58szRi6GbPrAd+mrqSmLinX3TPz7ptuTZpaiiREk4qqHHi
Ic30+h4+QY1VdqARe3mpiDLT3NLBiYN8UvIYqGT57YUw07wutocF0I5evz4wP3xU
gT7+2KOADkWYAEclpjktv8AFk4UPjI9HW/x923tWPMhCRBZ2NGTQw/XNn3G3Z23E
koXr9b3NZus4S0XkKmAkNNUNmF95W5DijxOXutEdJ5HbEV4vWN3W1DR6KmX/CPbB
HNWXj3aluVDKXsO5L53UGXXxtfEqUW19NIxLidSC/TNDv3396AvU6s16o/9dB8Lj
C08HkRJy0ZUFBf+psV/Gl+DPdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMG0x1H
ok0Zhi7m2ztieCFa5v7rMB8GA1UdIwQYMBaAFL8MUQGpRg2rFosh8CTjDIlaAoxC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMwNy9BOUE4MTlGMjBF
REMxMUVDOURDQ0MxNTVDNEY5QUUwMi92d3hSQWFsR0Rhc1dpeUh3Sk9NTWlWb0Nq
RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Z3eFJBYWxHRGFzV2l5SHdKT01NaVZvQ2pFSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDMwNy9BOUE4MTlGMjBFREMxMUVDOURDQ0MxNTVDNEY5QUUwMi92d3hSQWFsR0Rh
c1dpeUh3Sk9NTWlWb0NqRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBtoZwowKusxeh87gShyAfgsRU1smcBhM/7Be0wwxAePP8tLea/a96j
YllKQNCm1Zw9WfDvN81FnVIMOJK5MvVSLn3v8qw+FjsVpJTW32u3fjRHrJoygKH8
HrvsH3B9++iDqyT2dJAPdQFeJCfQTi4rPvoxAA7jkqOhwQt/Uk2hz6sw95xlfVb6
5m7suDACXpb1c421cKlHt6DzJh645jvo7awwMvPvZ0C2gtdLsS+3VlzVZkdZ2Xb8
rEec9UU9SakrrgM6ihgJVk3GhaGYckIzfT+Wdp5FY16aml6Z9Au13bgkFz0DfGpj
qPZglsSL+AMViFTwalw8xdIaU8tLs/I/
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:46 2025 by rpki-client