This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
File: T_VN6rrUlFWSUQEqpawiKVDLJh4.mft (raw, json)
Hash identifier: nd2JXXhvGQdCk1WkCgEn5PEHgiCslrqGOHm4oSQEcZs=
Subject key identifier: C5:95:9D:B0:67:60:FF:2C:AC:68:15:CF:73:02:67:A7:77:34:4B:32
Authority key identifier: 4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E
Certificate issuer: /CN=A91B38F5/serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
Manifest number: 90
Signing time: Tue 23 Dec 2025 05:26:25 +0000
Manifest this update: Tue 23 Dec 2025 05:26:25 +0000
Manifest next update: Tue 30 Dec 2025 05:26:25 +0000
Files and hashes: 1: T_VN6rrUlFWSUQEqpawiKVDLJh4.crl (hash: VjOa/EWR7gQaSd4HKjl5fxHNYPh094WBpdUJjPk/gxw=)
2: B66603C6025C11F0BDF41912C4F9AE02.roa (hash: H2+Ddkh87XoYI/8vzCTZnxyRNxL5o9son0tiMIrsX2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl
rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B38F5, serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E
Validity
Not Before: Dec 23 05:26:25 2025 GMT
Not After : Dec 30 05:26:25 2025 GMT
Subject: CN=694a2801-0226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:80:9f:1b:29:f8:1a:e3:2a:12:43:5f:b8:
3d:d2:ea:1f:1e:3a:8f:3b:17:52:ba:5c:0c:50:13:
50:80:b8:2e:fd:e3:2b:84:0b:91:6d:cf:4f:36:52:
18:5b:96:25:cb:fb:1c:e1:42:a0:07:81:d4:ce:b1:
db:54:9e:88:b1:9d:6b:c9:ce:d3:97:ae:68:45:9c:
fa:b3:df:67:eb:b0:5a:a8:25:9d:81:8c:6e:a7:76:
b4:83:e7:13:c6:5c:dc:5d:ce:4c:b0:b3:21:81:96:
8d:0a:6e:2d:76:5b:31:78:91:dd:55:11:60:5b:53:
53:bd:b4:2d:ef:25:0b:17:a4:9a:94:e3:c9:63:b4:
26:48:d8:2a:84:12:c5:2a:40:e9:9b:9a:78:05:ea:
b0:92:40:4d:70:d1:e1:9b:93:7e:b9:5a:01:71:90:
10:a5:06:79:be:a5:c0:3d:8d:13:56:d0:13:f8:2d:
22:28:42:67:62:eb:f4:a0:c8:0e:96:db:fb:46:27:
a2:5b:2c:1b:1d:57:e8:33:71:82:37:25:ca:90:38:
a7:c9:6f:35:85:25:95:0b:dc:02:5d:d9:ca:e6:7c:
7f:ba:d7:34:3a:fb:da:9c:b5:1b:c9:4a:01:0f:9b:
28:19:8f:e7:85:e0:d7:a7:a3:ec:7c:aa:79:58:f9:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:95:9D:B0:67:60:FF:2C:AC:68:15:CF:73:02:67:A7:77:34:4B:32
X509v3 Authority Key Identifier:
keyid:4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:15:51:0a:e1:66:44:68:3e:79:21:dc:b3:64:a3:fe:27:78:
9f:ca:56:ca:2a:b9:80:53:b4:4a:d2:e0:19:f7:5c:b2:7c:49:
9a:5b:9c:d4:5b:73:97:c6:62:e6:72:b2:3e:9e:2f:80:89:55:
0e:68:84:8f:63:e0:d5:9b:3b:e7:d9:54:9d:0e:d9:04:f9:be:
4c:24:f7:86:d9:37:cc:9e:cb:ed:44:d1:39:ec:ea:dc:2f:fd:
30:ab:2e:65:a5:fb:49:a1:3e:3e:89:7a:5c:5a:3f:c6:1e:8e:
01:41:3e:33:97:ef:01:71:0d:8b:77:30:61:0d:1f:23:04:e3:
22:21:14:fd:b8:ca:a5:73:d7:1b:30:a6:e0:a2:77:6a:e2:b7:
3b:33:b8:0c:4b:67:fd:8b:d7:a0:5e:99:9c:54:e1:14:13:09:
8e:ad:49:4a:c0:ef:a0:c9:a1:5e:6a:66:b0:3c:e2:fd:2d:ff:
62:8c:58:3c:d0:16:6e:c8:96:70:f8:7a:d4:6b:6f:17:4b:55:
4d:b8:3c:07:fd:c9:6f:fc:38:91:c0:e7:9a:d8:e5:d2:e0:6b:
5d:3c:92:48:0b:84:ad:fb:1a:f8:1c:96:b5:f5:85:52:f8:f0:
38:15:52:74:b0:01:fe:66:56:cc:28:ca:6e:3d:14:de:04:3e:
29:7d:d1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:43 2025 by rpki-client