This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
File: vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json)
Hash identifier: JlDMJ2xpEZCn6H/RL5mLeDhgoqF2szQmGRKplmbTqfc=
Subject key identifier: 3B:B8:6D:C4:CB:25:C0:DD:33:50:A3:33:87:8B:46:5F:E8:BF:D5:22
Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF
Certificate issuer: /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
Certificate serial: 0C98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
Manifest number: 0C91
Signing time: Mon 22 Dec 2025 18:01:14 +0000
Manifest this update: Mon 22 Dec 2025 18:01:13 +0000
Manifest next update: Mon 29 Dec 2025 18:01:13 +0000
Files and hashes: 1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: imnVRodsFqpXFCBdWovnErufSJYk1UzS7V7led/c5U0=)
2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: sizu4+OIZ/A8x9uQpAud/O4xnlom/Pk+/kkVVxPExzE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl
rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3224 (0xc98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACC41, serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
Validity
Not Before: Dec 22 18:01:13 2025 GMT
Not After : Dec 29 18:01:13 2025 GMT
Subject: CN=6949876a-da13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:70:6a:ce:e2:e1:95:d8:54:78:e5:32:a2:
0f:ec:c4:c2:e1:f4:f0:4c:77:f0:90:34:1b:0a:52:
37:73:3e:2c:d8:2b:07:4f:5d:51:50:84:c7:fb:3f:
d0:a6:24:73:93:00:3a:83:ae:35:92:29:9f:47:4d:
fb:b9:df:0c:7c:c2:29:3f:62:a3:7d:28:8a:25:be:
0c:6f:3e:e5:7d:51:d0:26:28:53:88:a6:e6:14:ba:
95:bb:c0:45:7b:6d:f2:f7:c3:a7:3c:98:44:c6:8e:
91:1d:7a:10:45:6e:d1:a1:90:ba:17:da:25:ec:40:
7c:1f:61:ab:d1:e8:92:25:75:60:ff:0f:c6:28:3d:
c3:c5:75:7a:fc:16:77:08:7b:21:ca:69:58:93:0d:
c3:5c:93:da:23:78:71:44:d9:3d:81:a2:c2:c5:85:
b8:77:cb:dd:a6:0a:79:5e:23:61:88:22:9f:b4:74:
e7:91:6b:41:66:88:49:4b:6c:68:00:0a:13:cd:7c:
f9:ad:e1:13:71:7e:a3:b2:2e:7f:a2:d7:5f:c3:21:
22:d1:f5:f7:2b:a1:e1:64:ab:f4:6f:a5:5f:7d:2b:
5a:85:76:93:a3:76:b6:25:9f:f5:1a:11:21:d6:27:
ad:64:0c:b9:21:5b:ce:68:a3:54:65:e2:70:aa:90:
aa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B8:6D:C4:CB:25:C0:DD:33:50:A3:33:87:8B:46:5F:E8:BF:D5:22
X509v3 Authority Key Identifier:
keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:6a:3b:a4:d4:35:58:2e:d2:71:8f:76:08:f3:74:d8:a2:a3:
7a:71:1a:d1:9a:25:28:f8:bf:69:0f:96:71:5e:92:be:3d:59:
40:c2:ba:be:27:3f:ef:47:c0:0e:5b:f8:f8:d1:9a:8c:c1:bc:
14:b2:39:68:55:9b:a3:44:21:ea:12:7f:48:7b:92:55:f8:d8:
29:8d:4f:e5:fb:d8:27:fd:6b:de:5b:f0:e1:60:8a:8d:12:4f:
e4:45:5d:31:4e:05:3c:6c:a0:63:ad:d2:2d:bc:da:88:7e:73:
d6:50:39:09:ec:bc:0e:7a:95:77:48:c6:4a:de:b0:a7:13:fc:
a0:20:ce:85:62:82:ca:19:12:83:ab:46:30:d5:82:08:f5:03:
7a:78:0a:bb:fd:3d:db:0f:28:fe:c5:33:e9:8b:cb:36:02:b9:
41:0b:c1:44:1f:9b:50:a2:0d:6c:56:12:41:29:2b:2f:76:74:
49:33:2c:c5:52:c9:b2:8f:51:14:69:c6:96:bd:2e:b0:17:17:
33:ca:bb:91:b5:96:01:1c:a7:82:65:0e:80:51:62:4e:e2:d8:
cf:fe:c2:d4:d0:10:50:bb:97:9b:e0:c0:47:fb:d3:33:51:b3:
c3:b5:e6:46:00:d7:38:00:4c:d7:0b:1f:eb:29:09:4b:ca:3a:
40:d7:ef:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUNDNDExMTAvBgNVBAUTKEJERDVFQjE1NjMzODM5M0Q3NDREQUUyRkM1MzJENTgz
MkJDNzg1QkYwHhcNMjUxMjIyMTgwMTEzWhcNMjUxMjI5MTgwMTEzWjAYMRYwFAYD
VQQDDA02OTQ5ODc2YS1kYTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzOhwas7i4ZXYVHjlMqIP7MTC4fTwTHfwkDQbClI3cz4s2CsHT11RUITH+z/Q
piRzkwA6g641kimfR037ud8MfMIpP2KjfSiKJb4Mbz7lfVHQJihTiKbmFLqVu8BF
e23y98OnPJhExo6RHXoQRW7RoZC6F9ol7EB8H2Gr0eiSJXVg/w/GKD3DxXV6/BZ3
CHshymlYkw3DXJPaI3hxRNk9gaLCxYW4d8vdpgp5XiNhiCKftHTnkWtBZohJS2xo
AAoTzXz5reETcX6jsi5/otdfwyEi0fX3K6HhZKv0b6VffStahXaTo3a2JZ/1GhEh
1ietZAy5IVvOaKNUZeJwqpCqHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDu4bcTL
JcDdM1CjM4eLRl/ov9UiMB8GA1UdIwQYMBaAFL3V6xVjODk9dE2uL8Uy1YMrx4W/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0M0MS9FNkJBNTQ0ODA5
RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9UMTBUYTR2eFRMVmd5dkho
YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZkWHJGV000T1QxMFRhNHZ4VExWZ3l2SGhiOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Q0M0MS9FNkJBNTQ0ODA5RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9U
MTBUYTR2eFRMVmd5dkhoYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAWajuk1DVYLtJxj3YI83TYoqN6cRrRmiUo+L9pD5ZxXpK+PVlAwrq+
Jz/vR8AOW/j40ZqMwbwUsjloVZujRCHqEn9Ie5JV+NgpjU/l+9gn/WveW/DhYIqN
Ek/kRV0xTgU8bKBjrdItvNqIfnPWUDkJ7LwOepV3SMZK3rCnE/ygIM6FYoLKGRKD
q0Yw1YII9QN6eAq7/T3bDyj+xTPpi8s2ArlBC8FEH5tQog1sVhJBKSsvdnRJMyzF
Usmyj1EUacaWvS6wFxczyruRtZYBHKeCZQ6AUWJO4tjP/sLU0BBQu5eb4MBH+9Mz
UbPDteZGANc4AEzXCx/rKQlLyjpA1+93
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:52 2025 by rpki-client