This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft
File: vBRJ7peREatw2N-Y2rpOJrprxls.mft (raw, json)
Hash identifier: FGYhJ0R+w2qg/WN+gjKJeTbctGimnDOWI5eJvLvr0lQ=
Subject key identifier: 4D:07:56:A3:A6:75:BA:DB:B4:B7:B4:20:7C:31:91:B9:F7:94:84:4A
Authority key identifier: BC:14:49:EE:97:91:11:AB:70:D8:DF:98:DA:BA:4E:26:BA:6B:C6:5B
Certificate issuer: /CN=A91CCA34/serialNumber=BC1449EE979111AB70D8DF98DABA4E26BA6BC65B
Certificate serial: 079B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft
Manifest number: 0793
Signing time: Mon 22 Dec 2025 20:48:18 +0000
Manifest this update: Mon 22 Dec 2025 20:48:17 +0000
Manifest next update: Mon 29 Dec 2025 20:48:17 +0000
Files and hashes: 1: vBRJ7peREatw2N-Y2rpOJrprxls.crl (hash: gYn2LuPdJ7BwPWDpBlsWWhM+we2oWEy5R25Yo9K/CWg=)
2: 7633392033B411EB98035F74C4F9AE02.roa (hash: 7jewiEiBEZ9bz5FtGjVeeC/IQVsbYDK8Mriosy8TldQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.crl
rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 20:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1947 (0x79b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCA34, serialNumber=BC1449EE979111AB70D8DF98DABA4E26BA6BC65B
Validity
Not Before: Dec 22 20:48:17 2025 GMT
Not After : Dec 29 20:48:17 2025 GMT
Subject: CN=6949ae92-05a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:93:d3:26:db:5c:6b:71:a4:73:57:77:ba:
98:27:c8:31:61:e5:b8:c8:12:0e:8e:d3:29:bf:95:
d2:00:53:f7:ec:32:33:a0:d0:1c:2b:f0:84:b0:42:
5e:ad:48:98:b2:be:14:13:a4:5a:a5:13:17:36:d8:
a9:e5:60:b6:af:bc:7f:34:b3:80:ec:38:e3:b7:16:
47:7b:53:02:9a:0c:af:18:71:ca:42:03:98:14:35:
ba:ed:23:69:4d:53:61:98:82:32:2a:d1:c5:e6:7d:
a3:43:05:ad:99:22:44:df:6a:70:39:26:75:2e:11:
62:ec:0d:48:ba:67:cf:4e:d1:db:61:95:31:9b:b1:
c0:4e:61:96:8e:15:95:89:bb:c8:dc:d8:67:26:ea:
6c:76:6b:f9:46:42:4b:06:2c:b8:05:c6:6b:9a:26:
06:e5:1d:f3:4c:14:e9:11:30:ce:f4:17:98:7b:f3:
d0:97:45:c2:b7:1d:fd:89:57:5b:52:0f:df:d5:73:
9a:be:f8:89:e1:8e:07:8b:09:81:ae:a1:2d:3e:0f:
97:f6:aa:95:21:43:13:0b:a6:a2:4d:97:cd:db:e9:
4b:de:f9:31:95:37:df:20:08:79:66:3a:3c:58:1d:
f5:01:27:57:69:90:81:a7:11:e4:14:73:cf:23:3f:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:07:56:A3:A6:75:BA:DB:B4:B7:B4:20:7C:31:91:B9:F7:94:84:4A
X509v3 Authority Key Identifier:
keyid:BC:14:49:EE:97:91:11:AB:70:D8:DF:98:DA:BA:4E:26:BA:6B:C6:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:19:ec:bd:6c:b8:21:bf:62:03:f1:c9:94:64:44:c4:d6:f5:
d4:c1:e5:4e:c2:94:05:c4:ab:a2:3e:f9:69:9f:d3:33:53:e2:
cd:a5:e9:c8:47:b5:83:3d:48:2e:32:bf:c6:61:f7:0e:ff:0d:
8e:55:54:70:f7:53:e1:b1:48:e8:4a:9d:6a:4b:40:f4:5a:1a:
5b:88:cf:3c:9d:5e:5f:4e:ef:39:ae:5e:f5:8d:ee:fe:dd:80:
16:08:1f:bf:6f:61:cd:85:3d:58:fa:ec:41:38:61:bf:07:c6:
72:b3:de:2c:17:8c:16:b9:69:9f:10:c6:b7:7e:75:99:1e:ee:
2a:e1:7a:70:62:37:bf:87:41:e7:1d:12:bb:5d:0c:3a:fb:c7:
5e:2f:9f:47:b3:9b:2c:22:83:04:10:c0:61:e8:d8:f8:9c:df:
7e:e7:5e:86:6f:a4:1c:21:f0:cf:05:55:d8:39:6c:03:7e:78:
ea:bb:31:c2:28:54:c3:82:57:4c:56:ae:3d:5d:ad:bb:18:1c:
52:7d:4c:81:b3:fd:c0:6a:10:4d:7a:e9:92:b7:e4:98:0c:b0:
cf:6b:47:89:34:27:e6:8f:a6:bc:91:55:c7:25:cc:2f:5e:a2:
9a:9c:06:d9:d4:ad:46:51:ca:ac:2b:da:4b:1f:90:b5:5c:65:
9e:47:21:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NBMzQxMTAvBgNVBAUTKEJDMTQ0OUVFOTc5MTExQUI3MEQ4REY5OERBQkE0RTI2
QkE2QkM2NUIwHhcNMjUxMjIyMjA0ODE3WhcNMjUxMjI5MjA0ODE3WjAYMRYwFAYD
VQQDDA02OTQ5YWU5Mi0wNWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsI+T0ybbXGtxpHNXd7qYJ8gxYeW4yBIOjtMpv5XSAFP37DIzoNAcK/CEsEJe
rUiYsr4UE6RapRMXNtip5WC2r7x/NLOA7DjjtxZHe1MCmgyvGHHKQgOYFDW67SNp
TVNhmIIyKtHF5n2jQwWtmSJE32pwOSZ1LhFi7A1IumfPTtHbYZUxm7HATmGWjhWV
ibvI3NhnJupsdmv5RkJLBiy4BcZrmiYG5R3zTBTpETDO9BeYe/PQl0XCtx39iVdb
Ug/f1XOavviJ4Y4HiwmBrqEtPg+X9qqVIUMTC6aiTZfN2+lL3vkxlTffIAh5Zjo8
WB31ASdXaZCBpxHkFHPPIz8CsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0HVqOm
dbrbtLe0IHwxkbn3lIRKMB8GA1UdIwQYMBaAFLwUSe6XkRGrcNjfmNq6Tia6a8Zb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0EzNC82RkFBMzY3ODMz
QjIxMUVCQTg4QTBBNkZDNEY5QUUwMi92QlJKN3BlUkVhdHcyTi1ZMnJwT0pycHJ4
bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZCUko3cGVSRWF0dzJOLVkycnBPSnJwcnhscy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Q0EzNC82RkFBMzY3ODMzQjIxMUVCQTg4QTBBNkZDNEY5QUUwMi92QlJKN3BlUkVh
dHcyTi1ZMnJwT0pycHJ4bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYGey9bLghv2ID8cmUZETE1vXUweVOwpQFxKuiPvlpn9MzU+LNpenI
R7WDPUguMr/GYfcO/w2OVVRw91PhsUjoSp1qS0D0WhpbiM88nV5fTu85rl71je7+
3YAWCB+/b2HNhT1Y+uxBOGG/B8Zys94sF4wWuWmfEMa3fnWZHu4q4XpwYje/h0Hn
HRK7XQw6+8deL59Hs5ssIoMEEMBh6Nj4nN9+516Gb6QcIfDPBVXYOWwDfnjquzHC
KFTDgldMVq49Xa27GBxSfUyBs/3AahBNeumSt+SYDLDPa0eJNCfmj6a8kVXHJcwv
XqKanAbZ1K1GUcqsK9pLH5C1XGWeRyGm
-----END CERTIFICATE-----
Generated at Wed Dec 24 21:21:24 2025 by rpki-client