This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
File: vTfx1AdHvmxfXGujMH32Vgq2gaM.mft (raw, json)
Hash identifier: 1QDK+LtTBVCdfdpSoNQUhrc5R3MB7tmLfckBDYBtqps=
Subject key identifier: 26:EF:70:04:0E:A6:BF:22:7F:90:63:23:D5:E9:95:9E:61:AA:5B:2F
Authority key identifier: BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3
Certificate issuer: /CN=A91817E6/serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
Manifest number: 0B7F
Signing time: Mon 22 Dec 2025 19:36:54 +0000
Manifest this update: Mon 22 Dec 2025 19:36:53 +0000
Manifest next update: Mon 29 Dec 2025 19:36:53 +0000
Files and hashes: 1: vTfx1AdHvmxfXGujMH32Vgq2gaM.crl (hash: L32c7UiHD3sq9ESB5ij21ZP4bMQF4Ywnw4EhDK9atMY=)
2: 28C454FCB41211EF8D2EC946C4F9AE02.roa (hash: A1jEmvYmaWLQVLC3lKrKCjgOEWn5/laaNWB/FSQRMc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl
rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:36:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91817E6, serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
Validity
Not Before: Dec 22 19:36:53 2025 GMT
Not After : Dec 29 19:36:53 2025 GMT
Subject: CN=69499dd6-aa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:65:c4:93:33:a1:13:b4:7e:45:ef:d5:1b:
c7:81:8c:67:44:ce:21:94:f7:fd:2e:29:f8:c5:c8:
a9:7d:c7:71:e4:d5:d1:d2:9f:19:6d:a1:e9:31:c1:
fa:f2:e6:01:f3:d9:d0:6b:98:8b:a6:de:6f:07:de:
ef:0f:ed:a4:c6:21:89:7a:21:a2:48:77:5a:1d:fc:
c0:7b:51:62:83:c9:98:02:59:fc:2e:fc:80:bd:6d:
c9:55:c4:a2:61:84:b2:1e:56:5e:0f:bc:67:31:18:
53:a3:50:0b:a5:ef:fe:3a:04:28:1f:24:fc:e2:b4:
0d:dc:d9:8b:81:54:c6:2b:38:d9:ea:e3:71:ed:c7:
78:00:27:42:9a:d4:52:b4:2d:f7:2c:b8:f3:ff:ee:
3e:62:ab:d3:e4:e5:3b:a6:11:66:4f:a0:94:45:1e:
23:98:4b:18:3f:a3:62:83:c1:47:64:f4:3c:06:40:
d7:25:d7:9e:80:69:cf:3b:fd:8a:87:f2:07:1e:03:
66:b3:1b:04:72:be:e8:e0:89:b7:03:a5:ae:0b:fa:
c9:0a:40:77:c9:03:1e:da:36:1f:6f:34:02:2e:ae:
48:e4:73:00:34:e3:72:ca:38:1c:e9:9a:e9:f4:e4:
ef:dd:0c:d4:ae:45:b5:14:59:0e:06:9c:52:41:ad:
ef:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EF:70:04:0E:A6:BF:22:7F:90:63:23:D5:E9:95:9E:61:AA:5B:2F
X509v3 Authority Key Identifier:
keyid:BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:d9:7e:a6:8f:c4:50:85:83:3c:70:58:47:ae:10:c8:91:88:
14:b7:72:f7:f1:8f:66:ca:6f:7a:2e:6b:40:ab:a8:57:a1:23:
a0:ca:0e:6e:4f:e8:0f:08:ac:41:ab:be:fc:25:08:35:8e:e5:
b3:94:08:0e:ec:57:43:8f:1a:be:7f:2f:a5:fb:bb:38:02:36:
c6:53:35:13:02:bd:0e:27:94:0f:25:41:a0:66:5c:de:76:5b:
4a:f3:54:a1:93:62:ac:c9:9e:69:5b:37:37:1f:f0:7c:5c:d4:
2a:81:58:39:fc:f7:9d:be:fe:9f:44:61:e8:53:c6:c3:78:84:
1c:79:c0:0b:90:99:5c:3c:77:d7:25:6e:02:08:2f:40:3d:fc:
12:53:67:cc:e8:3b:5d:8b:a0:05:52:33:03:89:a7:35:8e:3b:
e0:7a:8c:13:f8:8b:4c:4e:6c:3c:10:d4:21:d3:5e:3e:36:dd:
91:31:d3:70:08:7f:51:eb:63:b5:b7:fb:6d:8a:99:49:54:b5:
53:bc:e5:c4:25:00:ef:b6:f7:15:10:79:cc:5a:de:a9:1e:5d:
42:04:2f:80:19:30:a4:ab:f7:ca:35:0f:f0:d9:f8:da:e2:8a:
2e:75:76:10:a6:6a:e2:8a:d4:91:c0:20:af:27:d7:45:f9:ee:
48:78:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:58 2025 by rpki-client