This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
File: vtASVxhUXB5QgDHT_1-26Chqf9g.mft (raw, json)
Hash identifier: YFL7wxN/JuZfO9ycQsOS5DeDqA9qthS1SSofGz0gLe0=
Subject key identifier: A8:A0:9A:A4:15:D8:DB:24:40:D2:9C:5E:B1:85:28:19:4A:5B:81:67
Authority key identifier: BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8
Certificate issuer: /CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8
Certificate serial: 0274
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
Manifest number: 026F
Signing time: Tue 23 Dec 2025 00:37:12 +0000
Manifest this update: Tue 23 Dec 2025 00:37:11 +0000
Manifest next update: Tue 30 Dec 2025 00:37:11 +0000
Files and hashes: 1: vtASVxhUXB5QgDHT_1-26Chqf9g.crl (hash: fUZMjYXj2wmjKJk6I8AI9Ph+GfeRQKmKEY6rYcbcBbc=)
2: DBA023303B6F11ED903B484FC4F9AE02.roa (hash: T5gM9c7cEhEM3FMDd2oefSDFbFeoFzAyTLAjosgo9dc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl
rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E72DE, serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8
Validity
Not Before: Dec 23 00:37:11 2025 GMT
Not After : Dec 30 00:37:11 2025 GMT
Subject: CN=6949e437-9580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:8c:50:3a:52:5f:10:4c:1e:54:c1:33:99:
b1:df:2b:2d:f8:ed:19:04:dd:e6:b1:b2:eb:98:be:
b9:a9:ca:59:d1:99:5a:b5:b1:f6:c9:21:6a:aa:33:
14:7e:f1:d0:1f:01:4a:8d:48:d7:ad:55:6f:3b:6e:
b0:f2:8a:65:3a:76:16:af:d6:d4:c9:8a:39:08:ac:
c9:40:9a:de:e8:62:0f:78:2b:ed:dc:70:8c:34:f1:
aa:24:42:7a:f6:9f:7f:e4:5f:6e:bb:7c:40:a5:d4:
4b:dc:7a:f4:64:93:ea:36:76:d4:da:89:fb:cc:0a:
56:59:2e:7d:aa:ef:32:5a:23:09:51:f8:46:50:4a:
07:23:c0:37:ff:b5:97:78:cb:4e:a3:0c:ef:f8:ec:
87:d8:81:fe:a9:fc:b5:1c:cc:c4:3d:f5:8c:2b:27:
24:7f:94:1c:5f:a0:9f:ed:e7:21:51:e4:59:a8:b5:
e1:dd:97:87:b3:18:26:18:73:4f:51:99:34:1b:5f:
8f:cd:5d:ba:5c:3f:f2:77:f4:39:65:04:f9:c7:1b:
63:d5:de:a8:b4:8a:55:98:3c:1f:a9:8e:37:b2:ff:
46:27:9d:6b:d2:21:cd:0f:83:70:76:45:ce:3b:99:
c3:d1:55:9e:c7:0b:ce:15:05:6c:8e:10:c8:d8:ab:
c2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A0:9A:A4:15:D8:DB:24:40:D2:9C:5E:B1:85:28:19:4A:5B:81:67
X509v3 Authority Key Identifier:
keyid:BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:01:0f:ed:c9:cc:c2:b8:5c:3d:6b:e6:61:89:c2:6f:04:7f:
4c:3e:c7:78:5c:85:38:6f:63:ce:28:56:61:db:2d:03:9f:72:
2f:a1:f8:23:76:c4:14:db:64:ab:df:0f:a9:b5:c4:3e:6c:f8:
c4:91:14:ec:4e:06:14:c0:2b:82:05:6e:9b:9e:1e:37:d2:43:
95:0b:21:53:e1:a2:ab:a2:86:1c:56:ea:88:76:54:12:96:85:
47:8c:a8:d7:42:4f:5b:ab:38:b4:3f:51:e5:61:cb:3e:ab:5b:
8d:90:47:c1:da:66:4b:5d:46:b3:29:9a:ca:4a:2d:ab:48:3b:
e9:1c:aa:52:db:01:e9:db:59:de:8d:25:56:55:39:b1:09:bb:
e6:1a:a0:e4:67:dc:c9:32:c1:55:a1:8f:ee:b8:87:32:91:2e:
88:46:e0:b5:97:da:78:92:d2:62:02:01:75:6f:52:65:ad:a4:
73:4c:93:e2:24:13:d0:c3:e4:e1:56:37:d8:96:9f:73:49:a0:
b5:d4:48:c3:8c:56:de:67:70:21:5f:e8:7f:4d:81:47:18:e8:
00:0c:16:12:2c:be:81:38:3c:bb:72:c6:69:1b:8a:3c:78:05:
8a:84:41:12:e8:3b:ff:10:eb:1f:18:2e:5d:5c:91:70:55:9a:
4a:e5:0e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:19 2025 by rpki-client