This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File: voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier: quM21dgQ811z0wjwQqP2wUbGNgkw6aputeWn7KJpwnc=
Subject key identifier: CD:1F:34:9F:A7:94:73:2D:3A:C6:16:85:46:F1:C2:7E:00:09:71:AF
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer: /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial: 04C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number: 04AA
Signing time: Sat 06 Dec 2025 22:43:43 +0000
Manifest this update: Sat 06 Dec 2025 22:43:43 +0000
Manifest next update: Sat 13 Dec 2025 22:43:43 +0000
Files and hashes: 1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: 4pALG37QDfN5RODaZmNfdLHIyJHOw+wOu3ZwJLmSUzM=)
2: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: R/nnjeAR+tZePhFeIgEDIZOhg5pi4qQT+4iwQfx8ekU=)
3: D254B444679111EF8A2C9062C4F9AE02.roa (hash: KIM/sEwaQaYFPC8qF/5+qRUkUFtySui4RoXzgpLXzmc=)
4: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: BIPMm9ibDgvfx7NU935+UV2sEA5f17RgI+qcbtg58kw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 22:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1216 (0x4c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Validity
Not Before: Dec 6 22:43:43 2025 GMT
Not After : Dec 13 22:43:43 2025 GMT
Subject: CN=6934b19f-120d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:73:ab:ad:53:0d:d2:3a:e0:17:7b:05:55:
65:eb:0f:5b:96:59:64:e4:dc:1f:6e:1e:4c:75:3f:
19:bd:2d:31:84:13:f2:03:1e:34:44:6b:5d:df:5d:
74:53:ff:e7:6b:f2:03:cf:bb:4d:d9:ff:b8:d8:83:
f7:cb:9c:66:d4:f6:20:29:b3:fb:77:0d:dc:6f:46:
f6:73:c8:25:25:63:5a:b0:f0:a0:6d:89:3c:cc:ec:
eb:a7:ad:0a:79:23:18:d0:82:a1:44:c0:39:e6:ad:
02:ed:1a:d1:6c:78:8b:b0:a4:6c:0a:fe:30:aa:5a:
96:18:66:84:7d:ea:9e:9e:45:1f:41:b6:33:11:3d:
91:2a:7e:72:bc:82:46:77:f0:e4:f9:67:07:4b:56:
95:a8:5c:c2:d4:1f:9c:be:1d:11:80:45:a1:f7:6f:
11:ea:98:dc:8c:a7:12:54:99:20:15:27:79:27:5d:
b1:68:f3:8b:e3:c6:93:3f:4b:d6:98:49:8f:78:46:
d8:52:4f:5e:dc:cb:6f:88:68:16:e1:01:b4:cd:6e:
6e:d0:6c:33:a4:f0:c5:6f:72:62:d3:7f:a2:61:69:
f4:7a:9a:1a:d2:fb:96:50:14:df:9a:e6:0f:a4:00:
8d:8e:1b:c3:b9:35:14:d8:d7:f5:51:06:9a:31:14:
07:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1F:34:9F:A7:94:73:2D:3A:C6:16:85:46:F1:C2:7E:00:09:71:AF
X509v3 Authority Key Identifier:
keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:06:fe:4b:a7:c5:70:6f:2a:0a:2d:52:0d:46:33:9f:66:de:
4a:d5:6f:09:d3:18:9b:22:fa:dc:aa:cc:23:e6:42:da:9b:bc:
a8:1a:51:d9:c4:e5:f2:65:4c:0b:99:4b:15:02:9c:7c:f3:e4:
97:9f:f4:8d:87:fd:4b:bb:36:b2:41:df:bd:14:3f:cf:db:55:
73:2b:80:58:72:07:7e:aa:25:33:1c:fa:1f:ac:45:09:b3:04:
f5:ae:19:6a:e5:b2:a6:4c:00:fd:f7:11:07:20:3e:5c:28:24:
85:79:3a:65:50:0c:68:64:0e:9b:19:62:f5:e4:e6:36:b7:01:
46:22:18:be:67:2b:49:91:1c:c0:a7:1d:4d:44:f5:15:1c:a6:
52:f2:3a:0a:d5:54:83:86:96:64:f1:34:60:e9:83:b0:92:cf:
99:54:32:d7:7a:f4:15:c2:dd:2c:71:03:d9:16:fd:51:0d:4b:
45:45:fa:46:4b:49:93:f5:2b:b3:ca:6e:a2:76:27:d1:2e:5a:
d6:cc:41:14:b5:2b:2e:85:79:32:c5:11:c3:cf:94:7c:5e:9a:
0a:c0:b9:63:d6:b2:15:59:68:6e:8d:a7:f0:f6:cc:36:b0:3b:
52:e4:c8:14:c6:81:44:88:a6:49:fb:31:35:5d:ea:09:ec:0b:
88:1e:4b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:11:25 2025 by rpki-client