This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft
File: VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json)
Hash identifier: hxbEeVBi9aYKHt7U3q/j04wmsRB43Gw2bmudioimknI=
Subject key identifier: 58:99:53:B2:24:76:6B:99:D9:18:6B:EC:7F:F8:36:FD:45:5C:EC:32
Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78
Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678
Certificate serial: 0D75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft
Manifest number: 0D6B
Signing time: Mon 22 Dec 2025 17:36:52 +0000
Manifest this update: Mon 22 Dec 2025 17:36:52 +0000
Manifest next update: Mon 29 Dec 2025 17:36:52 +0000
Files and hashes: 1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: 3ZjfsKOALClgERqd2DQ6ZqDLvB4e0cV+05MHFYi2+Ps=)
2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: 9FxIJk5By9GC/1mM3LBBThqiUIJi3J3T7y2yMdVI55E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl
rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 17:36:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3445 (0xd75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B624E, serialNumber=54244F645DEA0D509668580D138E825279FB5678
Validity
Not Before: Dec 22 17:36:52 2025 GMT
Not After : Dec 29 17:36:52 2025 GMT
Subject: CN=694981b4-0d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:75:b6:b5:48:cf:be:3b:df:75:b8:0b:f8:
13:74:f0:0a:ae:d8:30:37:24:3b:67:8d:86:e9:78:
b5:91:8e:a3:9e:ff:81:4b:7d:9b:bc:2a:18:3b:17:
2d:79:23:85:1c:da:44:ae:46:16:df:b2:60:54:69:
bc:cb:d5:c3:71:7d:6a:b0:6c:54:55:a7:03:e6:13:
93:ae:5d:25:95:28:4d:de:43:55:0c:a2:2a:c9:12:
64:99:70:68:36:83:31:82:8d:21:13:f3:82:42:f0:
98:63:c1:f8:25:f6:37:54:d4:98:0a:95:a0:6a:ec:
c2:a5:bf:3c:4b:f0:12:97:d6:03:b3:bc:ba:11:38:
7c:f6:73:db:60:52:14:18:08:53:17:79:9a:d5:4d:
f0:51:51:eb:1a:ac:ba:72:69:e2:e1:b0:d7:86:40:
2d:5a:f7:e4:3d:e6:fd:17:dd:e2:79:d7:ef:b6:9e:
ef:25:50:1e:44:0f:5f:9e:a0:15:d9:ca:ba:e1:28:
50:47:56:03:b9:ec:f3:60:be:31:56:4f:ce:8b:93:
f6:2f:74:26:01:c1:7c:2e:b4:47:a0:3b:4d:28:d5:
e2:19:ea:78:b4:8e:bc:02:88:c8:64:cd:78:e5:1b:
bd:0f:f0:b2:fa:47:0b:76:80:62:db:98:75:9b:fc:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:99:53:B2:24:76:6B:99:D9:18:6B:EC:7F:F8:36:FD:45:5C:EC:32
X509v3 Authority Key Identifier:
keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:45:ee:25:c4:bf:ef:d7:b8:22:5f:58:6d:18:ac:ff:02:69:
49:21:99:08:70:4d:63:a7:a0:22:b0:b8:3a:ad:cb:d1:9b:52:
11:5a:c9:aa:37:e1:04:ed:46:22:85:b7:d9:93:c4:0a:0d:af:
64:38:a7:61:43:b9:f9:ce:29:47:df:db:ca:73:ab:45:63:53:
39:2e:e6:d4:c9:bb:45:9b:87:8c:68:c0:dc:94:25:c2:b5:db:
fe:46:22:5b:38:41:0f:ba:e6:35:46:8a:6f:a7:b0:71:2f:87:
9b:a5:60:0b:21:68:5f:05:aa:61:03:0a:df:50:cd:10:68:dc:
6a:e8:1c:d4:d8:5a:38:94:35:8e:04:c4:0c:45:33:1d:fd:d7:
ce:36:c6:3e:43:b2:80:fb:f3:1f:f3:84:05:28:3a:df:23:47:
c6:ea:d6:a6:e9:d1:c8:fb:b2:40:b9:62:a3:c9:ac:dd:1b:ee:
fd:29:6a:20:6c:d7:49:89:44:60:66:ea:72:1e:aa:e6:dc:8e:
e0:3f:e6:af:93:eb:32:6b:33:56:71:30:c2:13:01:bf:1d:b5:
4b:9d:22:a4:26:ce:e1:b1:2d:d4:fa:1c:72:26:91:bd:86:13:
0e:d3:23:f7:13:fd:ea:ba:2d:66:eb:35:94:bc:eb:40:ea:ba:
05:6c:64:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy
NzlGQjU2NzgwHhcNMjUxMjIyMTczNjUyWhcNMjUxMjI5MTczNjUyWjAYMRYwFAYD
VQQDDA02OTQ5ODFiNC0wZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA00x1trVIz74733W4C/gTdPAKrtgwNyQ7Z42G6Xi1kY6jnv+BS32bvCoYOxct
eSOFHNpErkYW37JgVGm8y9XDcX1qsGxUVacD5hOTrl0llShN3kNVDKIqyRJkmXBo
NoMxgo0hE/OCQvCYY8H4JfY3VNSYCpWgauzCpb88S/ASl9YDs7y6ETh89nPbYFIU
GAhTF3ma1U3wUVHrGqy6cmni4bDXhkAtWvfkPeb9F93iedfvtp7vJVAeRA9fnqAV
2cq64ShQR1YDuezzYL4xVk/Oi5P2L3QmAcF8LrRHoDtNKNXiGep4tI68AojIZM14
5Ru9D/Cy+kcLdoBi25h1m/xccwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiZU7Ik
dmuZ2Rhr7H/4Nv1FXOwyMB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw
M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW
bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjI0RS9CRDk1QzM4RUUwM0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURW
Q1dhRmdORTQ2Q1VubjdWbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAvRe4lxL/v17giX1htGKz/AmlJIZkIcE1jp6AisLg6rcvRm1IRWsmq
N+EE7UYihbfZk8QKDa9kOKdhQ7n5zilH39vKc6tFY1M5LubUybtFm4eMaMDclCXC
tdv+RiJbOEEPuuY1Ropvp7BxL4ebpWALIWhfBaphAwrfUM0QaNxq6BzU2Fo4lDWO
BMQMRTMd/dfONsY+Q7KA+/Mf84QFKDrfI0fG6tam6dHI+7JAuWKjyazdG+79KWog
bNdJiURgZupyHqrm3I7gP+avk+syazNWcTDCEwG/HbVLnSKkJs7hsS3U+hxyJpG9
hhMO0yP3E/3qui1m6zWUvOtA6roFbGSu
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:13:49 2025 by rpki-client