This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
File: VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json)
Hash identifier: XgQa4rm7ZSkAE2QzH1pYz8uXl+KoYmx06N2oaIGYhv8=
Subject key identifier: C5:87:55:4C:A3:98:60:B1:26:17:33:C2:BF:A9:1B:25:11:75:A4:4F
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 06AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
Manifest number: 05BD
Signing time: Sat 06 Dec 2025 22:35:17 +0000
Manifest this update: Sat 06 Dec 2025 22:35:17 +0000
Manifest next update: Sat 13 Dec 2025 22:35:17 +0000
Files and hashes: 1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: 1vrvAEiSY8BMWOeqArRlvkhL/7DIpHGIPTEfroHkEw8=)
2: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: +q4ii3kFAs8ACqEZ6BjSckD3NU5EafvQgYfuiybgjtg=)
3: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: wcFyIsoLjsEhxUx1sW89pKU0YpaMTZxR8CimHecPT/g=)
4: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: /KBmH27+liNc7Je6lmfQARcUNzZ4vENS/K//UAYXxEs=)
5: B7342ECA555B11F0B35B1E0DC4F9AE02.roa (hash: xCSeSBXxMYutVthYMW4o2bj7Fw8Un+Rbd5sqhnjH1FA=)
6: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: C/4N4YGAPMXTvMQ0VDNg++F7ZNkUv6rU6rWqLzDBgzw=)
7: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: 2TfYAVAgEQTTv0ZFyHze1Mxtp39JFJQp/vIAA/v9auQ=)
8: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: AO1r1mv/StKzJWk1m3WYBwdxsvoQjpb8Rj+HgNAs/Oo=)
9: 041C4116C47C11F0A98A0F0AC4F9AE02.roa (hash: DHEoMyBHtdzHtWhhIwch3SQMxsfyWzvpKfIC6T/xUns=)
10: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (hash: RFHWotDjHz9IyTVgQhqPMzU4NUGIMGbK3Tq94su3l+4=)
11: 038A3E10C47C11F092370F0AC4F9AE02.roa (hash: R6ZWg78kRuVdQEvjckkV5CrRltvEccJZf3UzS4WTXw0=)
12: 4FA42272C75411F086C7C02DC4F9AE02.roa (hash: u+aKtWWUIpKn239c6e+Hwgvg8I1zbv6qrlRSJzpMZZw=)
13: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: b8V6p0JJ741AoKpmotD0KOEuJJzSr+FlBeL8aS5wkPg=)
14: D359E238716B11ED9F349A49C4F9AE02.roa (hash: aucFf1dFg8E6sXkaQ0WchDFiOUdAA+vJ4MxjhxqpTl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 22:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1706 (0x6aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Dec 6 22:35:17 2025 GMT
Not After : Dec 13 22:35:17 2025 GMT
Subject: CN=6934afa5-cf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:77:d2:db:14:52:12:42:af:0f:36:04:7d:b6:
6f:6e:ca:d2:c4:3a:38:5b:cf:6e:68:57:8d:5f:15:
8b:38:f9:81:d9:84:1c:bc:97:56:63:e9:09:36:f8:
05:47:9e:23:1b:47:62:11:93:76:0c:2c:86:5d:85:
6a:97:87:37:d9:08:c2:f2:80:d7:91:39:2e:f6:2e:
d0:e7:bd:72:10:27:cb:26:36:cd:0b:00:ad:2b:4b:
14:dc:32:7c:c5:7c:e3:99:12:95:d2:e0:51:8b:a9:
dd:29:a2:84:e5:f9:fa:44:9c:42:3f:f9:5d:8b:e5:
c0:c5:a0:b7:36:58:74:4d:ad:85:5c:49:c0:ae:83:
66:36:64:6d:24:bc:da:d4:71:5e:a8:9b:1a:b2:3a:
f5:84:7f:8d:57:d9:e7:08:ee:d5:bd:13:3d:48:50:
60:71:6e:ab:f2:a5:04:21:26:08:12:b7:b3:cf:8f:
3b:51:74:20:2b:43:7f:0a:85:b1:00:56:ad:71:b8:
0a:1a:ab:67:18:5d:7f:cc:96:b0:e0:d4:67:66:7a:
d1:fb:94:ca:30:c3:78:59:e5:cc:c0:60:88:01:8a:
c6:71:5e:4c:8f:d1:70:ad:3c:54:66:34:bd:d5:42:
0d:58:a5:ed:d6:8b:3c:a4:be:7f:34:c1:8e:18:7e:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:87:55:4C:A3:98:60:B1:26:17:33:C2:BF:A9:1B:25:11:75:A4:4F
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:15:d8:45:62:8d:17:da:43:96:0f:7c:69:33:85:f3:a5:c2:
6a:2b:2f:14:7a:3d:97:c3:b1:19:9d:3b:54:d9:77:ff:79:0e:
1a:a4:d4:3d:74:80:f3:cc:5c:dc:e4:05:4f:19:66:3b:aa:d3:
1a:bd:c3:d5:9a:eb:b9:7a:b0:c3:cd:16:fe:27:17:a8:7e:80:
22:7f:88:e4:29:bc:8f:72:1a:22:c3:8c:c8:79:a4:fd:1a:f3:
b6:d7:47:90:61:44:88:3f:36:9c:4b:bf:14:a6:44:a8:2e:0f:
f0:0b:8e:43:63:93:b1:f0:9d:83:d2:fa:e0:cf:c9:ab:7b:a2:
f3:38:7b:9e:88:03:15:eb:34:45:53:d3:6e:9e:bf:ef:d6:8f:
75:d0:13:28:02:c0:7c:5f:87:82:25:1d:55:b1:a7:62:42:fc:
e2:96:05:35:ba:c0:83:ed:04:2c:41:ce:40:a0:02:e3:ff:7f:
79:3d:93:34:02:db:23:4f:4f:86:14:6a:e6:0d:39:e7:fb:61:
fc:95:1e:15:ab:84:d1:ce:47:6a:f5:ad:53:c8:33:0a:61:c2:
12:75:8a:68:e9:0d:af:ed:8c:c4:cd:be:bf:a9:7e:e5:b9:48:
6e:e9:3b:8e:73:59:4b:fa:5a:fa:b3:f7:89:6e:fe:66:89:26:
aa:fc:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:17:08 2025 by rpki-client