This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
File: vXVo3ESTcv4iwuyet3K31ugtKoA.mft (raw, json)
Hash identifier: sF4lsYUd2ZBMFtCIK5pOB44D+RqwPuM2V/PD4a9u8H8=
Subject key identifier: 35:20:82:B4:BB:01:6C:6C:EB:B6:B8:32:1A:DD:F3:DF:81:3E:9E:FD
Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80
Certificate issuer: /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80
Certificate serial: 088C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
Manifest number: 0882
Signing time: Sat 20 Dec 2025 19:58:39 +0000
Manifest this update: Sat 20 Dec 2025 19:58:38 +0000
Manifest next update: Sat 27 Dec 2025 19:58:38 +0000
Files and hashes: 1: vXVo3ESTcv4iwuyet3K31ugtKoA.crl (hash: FeuxOb2eoRs8YJNOninvRigrQrWd1cQ1Y1ltM68F9ik=)
2: 160ADCACE34A11EFA6960F0CC4F9AE02.roa (hash: SXpG+rP8KDZ7mlez3vzJppnJKS0AYTjR+XpM0wzK6oU=)
3: 153BEF1EE34A11EFA6960F0CC4F9AE02.roa (hash: kkpip1TEWWFNH1mROSk1fuufLAg/gIfzk1gjTV7g7jw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl
rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 19:58:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188 (0x88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80
Validity
Not Before: Dec 20 19:58:38 2025 GMT
Not After : Dec 27 19:58:38 2025 GMT
Subject: CN=6946ffef-8b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:b9:9a:62:b2:be:05:cb:05:c3:50:db:cc:
f6:4b:ea:c6:4a:b0:d4:28:c2:fb:69:dc:d9:15:ab:
e7:03:a1:b1:60:46:53:a4:5a:9c:b0:31:5f:79:3a:
14:85:f4:48:42:2a:64:27:23:5b:17:11:ca:72:0e:
d6:87:8f:8f:96:ff:bf:ef:b2:5c:2c:ad:f3:31:5f:
bc:62:c0:fa:a9:07:90:d3:f1:e9:62:e2:78:e1:16:
77:da:5f:34:81:68:17:fc:54:47:cb:e5:07:64:9c:
4d:a2:95:63:1e:8c:2c:d9:80:85:c8:60:e0:25:39:
a5:1b:b8:b3:08:46:17:8d:97:72:5c:f4:29:bd:5c:
1f:85:20:0f:f0:23:21:47:ae:7f:f0:0e:c2:65:2d:
19:a3:21:e9:00:f3:e2:db:6c:45:f0:c5:48:1c:dd:
97:e9:16:bb:ed:8f:c0:9e:8d:85:c8:58:2c:e4:e9:
57:74:f0:fe:6f:33:36:d1:d0:60:93:a5:22:0b:ee:
d2:21:62:05:8f:a6:7b:c6:0e:27:ab:d8:c6:82:d5:
38:d1:9f:53:7a:2e:21:2f:3a:31:64:3c:fa:26:b9:
f2:0d:35:41:32:14:61:04:09:50:ec:d0:5f:12:71:
68:e9:09:e0:83:ad:09:35:bd:08:cb:3a:71:63:cb:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:20:82:B4:BB:01:6C:6C:EB:B6:B8:32:1A:DD:F3:DF:81:3E:9E:FD
X509v3 Authority Key Identifier:
keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:e7:cb:16:d9:48:cf:d0:b4:40:97:c6:16:e9:6f:4e:f6:85:
33:ea:11:51:06:ac:94:92:f9:c3:51:26:7d:56:0f:3e:56:18:
b8:6b:64:21:dd:0b:e6:1c:39:12:0a:ca:a0:0f:3a:74:dc:66:
28:d5:de:3d:90:a1:5b:41:43:c9:b1:6b:9d:ef:83:6f:ed:2f:
77:c8:43:ad:c4:12:77:62:9f:e5:2a:04:25:4f:86:99:17:48:
ec:89:23:e0:a5:f0:ec:96:bb:bc:da:3f:c0:eb:d3:49:8a:44:
c8:35:0e:2a:5a:0b:96:df:1a:fe:7f:e5:ae:6d:9d:5b:90:5b:
18:51:ca:ab:1e:11:df:47:6d:32:a4:5b:85:c6:a5:43:0f:29:
c2:4e:37:c3:d4:90:43:84:0c:bd:37:db:3d:3a:d1:7d:ba:e4:
90:8a:47:0d:57:5a:80:d1:62:ab:1d:5a:66:f5:fa:e8:57:8a:
99:c4:b1:47:d1:55:20:e1:49:0d:fd:12:9e:6e:36:03:15:ea:
a8:56:0b:4b:ec:57:79:36:89:17:83:43:4d:c8:e8:9d:e8:ec:
f9:5c:f4:05:77:76:e0:2c:98:06:79:7a:47:33:6e:d2:4f:95:
1d:ec:ec:58:04:d7:cc:b3:6b:1b:2e:98:b7:da:65:74:8a:40:
ef:f5:e3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:04:57 2025 by rpki-client