This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json)
Hash identifier: ecC7jIdH7CS1XRWE9IjHeQgZypYQSsVwUxRji3a8ivM=
Subject key identifier: 0C:D1:95:3A:A9:1E:B3:D8:48:22:1A:EA:BB:2D:56:BF:78:08:44:5A
Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Certificate serial: 01CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
Manifest number: 01C2
Signing time: Sun 21 Dec 2025 02:19:08 +0000
Manifest this update: Sun 21 Dec 2025 02:19:08 +0000
Manifest next update: Sun 28 Dec 2025 02:19:08 +0000
Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: gyr5PWqvLG8kUdByuVmxmG5dILzyu8rCVdDA4lSgSYc=)
2: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: inmnpyaDxDWlLYNelzuadkNEoddsaWxx/qXH6LYAyxA=)
3: EF15AC2A9EB611F09A08B07EC4F9AE02.roa (hash: W2GUCwLH1zO0HSDwZ2rzdxgCK5Z2LezwQn+GLI/pJ/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Validity
Not Before: Dec 21 02:19:08 2025 GMT
Not After : Dec 28 02:19:08 2025 GMT
Subject: CN=6947591c-389b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:88:5d:0c:04:93:75:0e:5d:8c:2d:67:68:53:
06:2c:5a:56:9e:e0:f8:7a:cc:cc:1a:2b:d7:93:88:
00:78:ac:7a:8d:ab:c7:f8:d6:63:c3:85:b0:61:60:
10:24:88:4a:47:52:5f:57:bc:e6:99:6b:fc:b7:a9:
91:0d:82:11:21:9b:7b:57:fd:c1:6c:a4:5c:7b:1a:
46:95:cc:6a:f9:46:ee:57:64:ae:c3:f8:37:48:42:
4a:f8:95:10:f0:d8:18:af:83:93:33:f7:ce:b4:a6:
9b:6d:4c:35:e1:6d:fd:dd:58:85:8a:37:1b:d5:65:
c4:7d:82:f5:23:06:c3:c5:11:88:60:79:02:6a:6b:
23:d0:fe:c9:8d:2a:fc:18:e7:f0:67:41:b1:93:30:
1f:04:98:40:58:74:0b:a8:79:28:9e:86:9c:7c:4d:
45:ab:e8:f6:33:d4:60:14:d4:6d:11:bc:5e:1a:a8:
e3:8d:dd:15:67:0d:fd:16:7d:60:dc:8c:3e:84:a0:
47:77:85:57:97:3a:32:3c:31:68:b1:a2:4d:b7:4d:
40:c4:78:ac:d6:63:44:43:b3:8c:ad:be:a9:39:81:
6a:81:8b:c7:6e:48:b9:d8:35:78:91:4a:a7:c3:09:
bd:46:ee:84:0a:b6:2c:43:bb:79:b7:ef:36:17:b0:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D1:95:3A:A9:1E:B3:D8:48:22:1A:EA:BB:2D:56:BF:78:08:44:5A
X509v3 Authority Key Identifier:
keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0b:5e:e2:9a:63:f9:84:ad:c9:b1:3f:b1:48:e9:57:48:34:
ac:93:9d:58:c8:2c:ce:c0:5e:a3:bc:7b:88:43:4e:a1:69:35:
fe:08:8b:15:7f:cd:aa:6a:59:2c:f8:0d:46:43:aa:34:f3:94:
49:08:ec:a9:f2:ba:fa:9a:63:e1:23:09:a8:96:90:0b:ec:5f:
4e:13:77:36:55:26:24:b9:27:ae:55:77:97:18:c2:9a:59:c1:
63:de:c5:4d:5b:32:e9:d4:72:c9:bf:be:91:6b:ea:e6:44:1a:
2d:82:55:d1:10:09:f5:7d:f8:e8:90:dc:4a:64:35:8c:2a:f3:
dd:97:b4:88:72:cd:6d:e8:93:1f:a7:c8:96:f2:4e:25:6b:f3:
b4:dd:42:89:a3:c8:7d:a3:39:c3:24:a2:b6:2b:7a:1a:d0:30:
99:5b:61:bd:fb:39:21:d9:e3:dd:92:95:79:0c:f0:91:0c:bf:
5f:c2:7e:8b:49:94:36:57:e1:14:26:cc:cf:b7:6a:42:12:86:
d9:26:59:9c:d7:64:e1:0e:38:27:5d:1d:1c:25:a1:df:7f:6b:
6d:16:13:80:63:c6:20:5a:45:66:46:bc:39:31:fb:b5:53:93:
f1:2f:ba:98:c1:1c:e4:70:2a:6e:78:83:17:ca:63:3c:c0:9a:
67:18:b5:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyRjkxMTAvBgNVBAUTKEJFNjM0MUE3Q0MwQ0EwRjZDMUExNUUwNDY2RUM3MTU1
QjgyODNDOUQwHhcNMjUxMjIxMDIxOTA4WhcNMjUxMjI4MDIxOTA4WjAYMRYwFAYD
VQQDDA02OTQ3NTkxYy0zODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA54hdDASTdQ5djC1naFMGLFpWnuD4eszMGivXk4gAeKx6javH+NZjw4WwYWAQ
JIhKR1JfV7zmmWv8t6mRDYIRIZt7V/3BbKRcexpGlcxq+UbuV2Suw/g3SEJK+JUQ
8NgYr4OTM/fOtKabbUw14W393ViFijcb1WXEfYL1IwbDxRGIYHkCamsj0P7JjSr8
GOfwZ0GxkzAfBJhAWHQLqHkonoacfE1Fq+j2M9RgFNRtEbxeGqjjjd0VZw39Fn1g
3Iw+hKBHd4VXlzoyPDFosaJNt01AxHis1mNEQ7OMrb6pOYFqgYvHbki52DV4kUqn
wwm9Ru6ECrYsQ7t5t+82F7BMSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzRlTqp
HrPYSCIa6rstVr94CERaMB8GA1UdIwQYMBaAFL5jQafMDKD2waFeBGbscVW4KDyd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGOS80RTYwOUE3MjNC
N0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9QYkJvVjRFWnV4eFZiZ29Q
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZtTkJwOHdNb1BiQm9WNEVadXh4VmJnb1BKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjJGOS80RTYwOUE3MjNCN0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9Q
YkJvVjRFWnV4eFZiZ29QSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAvC17immP5hK3JsT+xSOlXSDSsk51YyCzOwF6jvHuIQ06haTX+CIsV
f82qalks+A1GQ6o085RJCOyp8rr6mmPhIwmolpAL7F9OE3c2VSYkuSeuVXeXGMKa
WcFj3sVNWzLp1HLJv76Ra+rmRBotglXREAn1ffjokNxKZDWMKvPdl7SIcs1t6JMf
p8iW8k4la/O03UKJo8h9oznDJKK2K3oa0DCZW2G9+zkh2ePdkpV5DPCRDL9fwn6L
SZQ2V+EUJszPt2pCEobZJlmc12ThDjgnXR0cJaHff2ttFhOAY8YgWkVmRrw5Mfu1
U5PxL7qYwRzkcCpueIMXymM8wJpnGLUo
-----END CERTIFICATE-----
Generated at Mon Dec 22 13:16:00 2025 by rpki-client