This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
File: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft (raw, json)
Hash identifier: 3rg9mVLInngLZA0ODvyTK38wVg3Y2wa2DLR8v1EbS08=
Subject key identifier: 06:5A:5C:F4:3F:BE:AD:D6:B4:30:50:40:68:40:AB:C6:21:BF:6B:5C
Authority key identifier: BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
Certificate issuer: /CN=A91C612E/serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
Manifest number: 140F
Signing time: Thu 18 Dec 2025 18:12:23 +0000
Manifest this update: Thu 18 Dec 2025 18:12:23 +0000
Manifest next update: Thu 25 Dec 2025 18:12:23 +0000
Files and hashes: 1: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl (hash: owVn/1bqeYtTo/873LH7LkRDAgzdUKRH1/u1l6T4Dmw=)
2: 46090834705811F099A0C739C4F9AE02.roa (hash: 91h+0MKmxTQw+EKZwCvLFi01zzuUTUbrMhsMmvqjr8Q=)
3: 7C0FB3666B7F11F0A9B64752C4F9AE02.roa (hash: AJvVHLLVI0k0xrsfIwNqKfZq9YBrWgoFRJ5kItU0vtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 18:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C612E, serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Validity
Not Before: Dec 18 18:12:23 2025 GMT
Not After : Dec 25 18:12:23 2025 GMT
Subject: CN=69444407-f22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:ff:71:3e:71:27:9d:6e:7e:2b:8e:aa:9d:
54:88:af:fe:2c:20:e7:c9:44:f0:00:44:d8:1f:67:
91:87:c2:d5:49:1e:d4:04:6c:49:8c:7d:69:0e:18:
42:a0:31:f5:44:d8:98:67:68:0b:a2:02:32:ac:19:
f3:65:ef:44:05:3c:c2:85:1e:00:63:9e:ec:12:9c:
ea:7e:ab:df:38:1b:b7:c0:f8:28:1a:5f:c8:11:a8:
b0:7b:c6:65:f5:6e:2c:c3:76:6e:79:66:65:01:60:
1d:32:da:9f:32:11:b3:c6:cc:cd:98:84:1c:ee:e6:
8d:3b:97:f5:de:fd:c0:ad:1e:14:44:57:c7:f3:fc:
73:5d:16:5b:1e:ac:45:fe:77:bf:cc:1b:bb:2b:47:
2e:86:59:23:7f:e0:c8:46:6a:57:c8:df:1c:2a:81:
57:b0:5b:21:07:f1:9d:02:25:f4:0d:38:34:cc:f1:
b6:ab:cc:1c:ce:9e:92:21:5b:86:60:33:a6:c9:fb:
05:57:bf:6b:12:b3:aa:5b:04:cb:23:de:b9:40:df:
fb:39:08:ad:d5:1a:ce:1b:94:d5:ca:23:c0:61:a2:
f9:50:14:53:3c:35:ed:04:f6:fa:79:04:4c:df:29:
bf:aa:77:25:da:30:1e:6e:fb:46:08:23:a7:cf:89:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5A:5C:F4:3F:BE:AD:D6:B4:30:50:40:68:40:AB:C6:21:BF:6B:5C
X509v3 Authority Key Identifier:
keyid:BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0c:7c:3e:08:d8:bc:6d:ba:32:7a:55:66:e7:d6:f5:4a:fb:
d7:a1:96:6d:99:3d:c5:bd:cf:43:59:e9:6e:61:1a:07:b9:16:
78:f5:15:a9:d3:9d:56:ef:1c:c1:0b:18:31:f8:1a:5b:5a:38:
21:f6:b0:78:45:db:94:e9:73:cf:85:83:43:0b:6a:20:c8:1b:
39:f3:95:e6:3a:8b:ce:1d:b6:22:9c:69:c6:0e:ec:47:76:ed:
3e:c0:4f:60:60:7f:76:11:e0:a3:aa:b1:6f:3f:9d:21:e6:2a:
45:96:de:90:f1:24:9c:47:61:05:e9:96:22:23:d4:5a:4a:20:
4b:1d:cf:01:d8:34:2d:60:bf:10:f1:91:ef:1b:a8:00:71:d7:
60:4f:1b:2d:65:8f:47:8a:4d:60:f7:aa:c0:b6:c1:a0:3e:c5:
6f:df:8c:e5:48:5f:06:c8:a1:ca:4a:54:d7:ed:2f:b4:c0:53:
af:d8:1b:26:a4:6f:5d:8e:ee:a2:1c:a3:ae:56:28:1f:52:8a:
e5:9f:cf:82:cc:4b:97:0e:68:fb:48:8b:63:2a:91:ee:3a:4c:
21:23:98:e2:1d:8d:cd:2e:dd:e6:47:a8:5b:f8:e0:81:74:b2:
02:2e:b6:28:b0:31:a5:53:e6:e2:c9:7a:11:70:31:11:8a:b3:
26:7f:88:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:46:25 2025 by rpki-client