This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
File: VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft (raw, json)
Hash identifier: q+kuOy5C/A1Niy9dl9Y3QGdc92HAFR7a28K6MURRvjA=
Subject key identifier: FD:4B:6A:46:2D:2D:4E:A5:BB:24:C9:E3:28:63:AD:36:82:06:C7:B6
Authority key identifier: 56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3
Certificate issuer: /CN=A91DB782/serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
Manifest number: 017E
Signing time: Tue 23 Dec 2025 02:46:01 +0000
Manifest this update: Tue 23 Dec 2025 02:46:00 +0000
Manifest next update: Tue 30 Dec 2025 02:46:00 +0000
Files and hashes: 1: VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl (hash: ULpn3jVARXH7zYMR8NNnIAzj/Bo1mG9F7FYMQe4lqVw=)
2: F4DE3470979B11EE901E210BC4F9AE02.roa (hash: fdTip7KBE0W3pKG2131dWHPNYEedkvXm8McPxmdQVeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl
rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB782, serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3
Validity
Not Before: Dec 23 02:46:00 2025 GMT
Not After : Dec 30 02:46:00 2025 GMT
Subject: CN=694a0269-7053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0b:51:1f:9f:36:0a:cc:5e:5b:d8:20:e3:d4:
17:55:97:a2:2f:d0:70:5c:9b:60:31:42:6f:97:38:
58:7c:9b:30:1c:d5:db:57:1b:01:a6:8b:f7:4f:de:
89:53:ea:9f:4f:64:fd:03:f7:cd:11:ba:ef:eb:b9:
47:43:ee:12:9d:d9:16:c6:94:31:34:92:62:c8:bc:
48:cb:34:da:3c:f4:67:91:b8:07:b6:67:38:8b:f3:
b4:b5:fd:11:9a:41:97:3d:b0:82:b6:41:00:d4:30:
4f:3f:2d:f1:c4:4c:2c:66:26:75:39:33:38:d4:77:
c7:11:b1:ee:96:75:4a:ef:74:a9:24:a6:d7:4a:8a:
87:46:49:aa:c2:6c:2a:95:d4:c6:08:12:f2:39:0a:
0d:41:f7:28:a5:01:b8:cd:93:81:9c:03:f6:5c:1b:
36:e5:f1:20:1f:3c:cd:6b:2e:0a:32:d1:7a:66:d3:
0a:02:a7:93:57:a2:53:fb:ee:fd:27:41:a8:7b:45:
fe:2a:48:69:5f:95:1b:5e:53:3c:96:b7:1b:1f:88:
be:32:59:36:ec:28:7f:ab:b3:75:2d:71:6e:67:33:
27:67:13:d9:1c:6c:18:5a:5c:a6:da:bb:6e:86:b6:
c7:c5:ce:6d:c6:8a:08:b4:8f:02:81:cf:64:c7:8c:
d1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4B:6A:46:2D:2D:4E:A5:BB:24:C9:E3:28:63:AD:36:82:06:C7:B6
X509v3 Authority Key Identifier:
keyid:56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:d9:6e:7f:84:fd:4e:1b:e2:66:71:33:9f:07:1d:df:36:1a:
21:80:0d:71:99:7a:cc:c7:92:8f:a6:74:50:d9:2c:48:ce:bf:
71:b8:e3:9a:e0:88:00:7b:c6:4c:bb:4a:b2:6f:10:d3:c5:12:
0d:ea:02:0f:41:76:63:ca:49:84:b8:41:52:54:b7:75:d0:69:
b0:2a:27:93:6f:66:b2:d7:31:25:5c:5d:0e:54:1c:1c:b9:84:
e0:a2:cb:3a:68:c5:f5:06:0f:c5:12:93:37:77:b5:ea:a2:d6:
c6:f3:57:08:28:6f:48:75:55:77:fe:22:9d:08:73:2a:91:4d:
84:ed:58:02:4e:68:46:5e:46:4c:07:b9:7d:9d:64:ab:c9:25:
92:bb:1b:52:1c:28:7e:35:d8:56:0a:84:21:b3:36:23:6d:aa:
f3:36:71:3a:e2:e4:46:ab:cf:00:b7:ba:e2:49:ec:fb:05:f7:
83:0a:1b:ee:e4:3e:4a:d1:21:bb:4e:a3:c0:83:9b:50:98:33:
32:f6:b5:10:01:1b:ab:a7:c1:ea:a6:be:fa:27:1d:d1:1a:b3:
6d:c6:7c:2a:a5:fc:e9:d4:9c:93:98:31:5f:25:50:34:75:4b:
24:fa:66:37:2d:06:f0:86:38:77:f0:be:94:52:05:8c:8c:b1:
96:92:08:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:28:22 2025 by rpki-client