This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
File: vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft (raw, json)
Hash identifier: NdR3fRF4eZZ6M/OLSovFE+EPWbdpo96K8v4kScbZI2Q=
Subject key identifier: 8B:F3:29:7C:AB:7C:D4:37:D3:B6:74:A2:96:21:D9:97:D5:E3:B1:C8
Authority key identifier: BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
Certificate issuer: /CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
Certificate serial: 0CCA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
Manifest number: 0CB2
Signing time: Wed 24 Dec 2025 18:02:10 +0000
Manifest this update: Wed 24 Dec 2025 18:02:09 +0000
Manifest next update: Wed 31 Dec 2025 18:02:09 +0000
Files and hashes: 1: vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl (hash: SKI24x0FyGQiWCshHspQVMJvUPLJGEOL40wxD84ibeY=)
2: 7035C2E6CF7111F0A638EC6BC4F9AE02.roa (hash: t33RheNvT6AZs0YGzltpL3HsFmPDCdK8QLo3GUeUtsI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl
rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 17:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3274 (0xcca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184569, serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
Validity
Not Before: Dec 24 18:02:09 2025 GMT
Not After : Dec 31 18:02:09 2025 GMT
Subject: CN=694c2aa2-d806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:97:e5:63:85:32:d4:c3:c6:65:92:2a:0d:
1d:2f:1e:a8:34:35:3c:31:62:69:10:99:9f:d0:a4:
ea:76:0b:15:a3:59:b4:7a:74:92:93:ae:64:8c:f3:
fe:4e:67:23:6d:53:97:13:bc:13:75:8f:e4:b3:63:
6e:ee:b7:93:de:2b:da:d6:4d:71:92:fa:6a:88:4e:
72:7a:6f:b9:86:4c:38:3c:d5:70:0d:69:05:8d:28:
28:27:28:1b:5f:de:78:1f:30:73:b9:15:29:cc:18:
ff:33:9a:cd:e9:4e:4f:05:20:f4:f3:e1:0f:9a:4d:
e7:fb:f9:b4:63:c1:7b:59:61:37:b2:1b:88:1d:54:
59:7a:4d:be:fa:e7:68:a3:4a:f6:49:20:0d:6e:5c:
43:7f:f3:0c:a0:d4:eb:95:3e:2f:ba:e3:d2:0f:c0:
35:c1:e6:53:1c:c2:c1:cd:74:f0:56:51:d9:4f:31:
d0:6b:bd:a2:44:70:23:d8:8d:c5:b4:c7:77:07:19:
89:c6:da:5d:8b:81:2d:29:23:78:62:90:6c:73:48:
92:c5:cf:d9:e1:8c:c0:a6:4e:c1:84:f8:d8:7d:27:
9b:b6:be:9b:13:95:fa:b6:84:7c:99:98:72:04:5b:
cf:cb:b1:4e:06:e4:74:9b:09:bc:4b:32:e1:fa:63:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F3:29:7C:AB:7C:D4:37:D3:B6:74:A2:96:21:D9:97:D5:E3:B1:C8
X509v3 Authority Key Identifier:
keyid:BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:89:c0:9c:97:76:fa:65:1d:69:d8:f8:52:49:50:26:90:dc:
9a:ac:1a:04:89:74:b1:76:16:dc:0f:42:f0:e3:af:f9:38:b9:
75:fc:83:67:31:92:3a:f4:2a:b5:cb:43:8b:14:11:09:94:c1:
8c:cd:36:03:31:7a:ad:c2:ba:cb:59:82:e9:a3:76:b3:97:b8:
03:0c:be:0c:00:6f:ad:ee:86:46:07:ab:56:bf:68:e4:44:8a:
01:c7:7d:a4:55:61:52:24:b2:59:b7:72:64:64:09:43:42:3a:
e9:af:fd:bd:85:d5:92:20:d2:ac:ed:24:1b:83:37:79:0b:08:
88:24:cb:29:f6:6c:fa:35:3f:d1:8e:9e:17:0a:47:69:a1:cb:
17:0e:25:a3:8d:0c:4f:75:55:6c:de:fc:6c:25:35:04:4a:d8:
c2:35:bf:87:f8:04:01:98:00:42:de:29:11:63:60:05:b1:14:
a1:70:1d:df:d3:d8:33:00:e1:1e:41:02:f3:7e:55:93:f5:ff:
1a:fe:2c:8f:56:e4:bb:aa:83:81:6b:e2:23:4c:66:f9:a8:3a:
a1:0c:80:20:85:ce:1e:e6:ab:d9:03:69:05:14:2e:4e:39:f7:
d7:aa:c8:02:3c:7d:78:b6:d6:ce:5a:f8:83:c3:b5:05:2d:18:
eb:e8:99:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:31:11 2025 by rpki-client