This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
File: vEIYikinqZ-W1q-yAR59yd7uIqU.mft (raw, json)
Hash identifier: Z7XT0pKnUUQi6X3nQDG3PIugJfSFxPr9tzVcXWszJbE=
Subject key identifier: CB:B0:6E:D3:A0:DF:71:07:12:89:1E:4F:BB:1F:E5:35:05:9E:18:F8
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Certificate issuer: /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial: 61
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
Manifest number: 47
Signing time: Sat 20 Dec 2025 19:06:29 +0000
Manifest this update: Sat 20 Dec 2025 19:06:29 +0000
Manifest next update: Sat 27 Dec 2025 19:06:29 +0000
Files and hashes: 1: vEIYikinqZ-W1q-yAR59yd7uIqU.crl (hash: 70aqCW6qjbSWqsr//MEutPrTRH4PMOFPuF6q3ZNiqqI=)
2: 751E0734D06911F0A789BB44C4F9AE02.roa (hash: UhXJLAHokVCI0k+DjjmBHGcMcgUilly93pv811k5onQ=)
3: 8E018B30D05611F0A517D12AC4F9AE02.roa (hash: sV/z+J9M1vomeBwWCL+sac3AZUuwIvVbej3W8i6aPqQ=)
4: 080C8846CC5911F0900FE21DC4F9AE02.roa (hash: uIEx6xwpbLEgKu+5JEevIBjQ6QBJ1P16CaV2vlziLyU=)
5: 8CBB3EA2D06911F09735DD48C4F9AE02.roa (hash: gqj4jtEMDN4bcyseFHh+di3mjZVrlGI2+shg14Tz6Ac=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 19:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Validity
Not Before: Dec 20 19:06:29 2025 GMT
Not After : Dec 27 19:06:29 2025 GMT
Subject: CN=6946f3b5-ecdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:d7:12:97:71:b1:76:36:fc:ce:5d:f4:f8:
8b:f7:e9:8f:61:44:fc:3f:d5:13:93:e3:64:06:7f:
57:fa:1e:43:33:46:3f:95:1f:2c:18:41:0f:d3:1f:
b3:21:10:26:20:65:9e:a1:31:ae:83:cf:01:f3:c2:
53:5e:aa:27:43:a2:23:8f:62:14:b8:a8:99:ab:03:
b4:46:b1:14:fa:42:35:5e:bc:9b:56:8f:10:f2:8a:
90:6f:dd:99:47:9e:35:84:d3:0e:f7:1a:95:61:72:
51:33:3c:07:a3:e2:eb:2e:00:bd:1c:f7:1e:e2:4e:
9a:61:67:28:4c:8c:f0:30:84:b8:1b:5b:cb:a5:99:
87:e6:38:ac:e7:53:23:d4:7c:ff:ee:10:28:66:3d:
1a:43:c5:08:f2:8f:56:8c:5f:50:53:db:79:14:af:
3f:55:58:8b:e4:19:c6:4a:45:31:d9:8a:c5:35:4e:
57:b7:07:09:07:eb:f5:95:94:bb:b9:c4:b3:c9:7b:
18:6d:4b:4a:68:47:c9:7e:48:7f:fb:0e:68:86:83:
91:08:45:01:8a:5a:90:c8:cc:f7:27:07:71:d8:57:
8d:72:1c:6c:ad:ca:2a:0d:f6:d0:df:93:7c:5b:d6:
ef:f7:fa:9f:2d:31:30:00:2a:91:ae:38:6e:a6:b6:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B0:6E:D3:A0:DF:71:07:12:89:1E:4F:BB:1F:E5:35:05:9E:18:F8
X509v3 Authority Key Identifier:
keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:8d:d5:8d:7a:59:e2:3a:bd:2a:5c:38:73:e4:99:15:20:ee:
85:ed:23:15:eb:9a:b9:16:43:18:c3:ce:48:d7:22:fa:62:c8:
b2:01:97:06:f9:2c:d9:9e:37:7d:c3:36:04:e5:7b:82:24:87:
3d:b8:c3:6d:c5:c2:e8:a0:a5:72:c9:65:9d:e5:6f:1f:00:15:
fd:56:ba:3f:f5:7c:1f:f1:e0:3a:84:89:86:2b:b4:01:f8:42:
a2:5f:05:60:4f:a6:f8:c4:d2:e1:33:36:96:e6:91:07:20:03:
ac:9b:8b:0e:18:98:92:c4:b6:6d:02:21:1b:50:3d:0c:ab:9b:
91:2c:13:4b:ff:76:ac:51:d0:aa:61:f0:dd:c5:a0:eb:97:6e:
be:72:c5:6b:e7:48:e2:39:2c:9c:a4:27:e6:81:19:b0:17:8f:
12:21:63:2d:67:89:9a:fa:c9:c0:7f:f2:65:d1:c9:d0:18:69:
b1:81:40:f7:a5:67:0a:cb:26:de:05:90:ce:f4:1d:12:be:99:
2c:2e:b0:e8:69:81:31:72:cf:49:2f:7e:c3:bf:d4:ac:83:bd:
5a:de:fa:ec:37:e5:d7:96:ab:55:7d:eb:0a:c0:cd:ee:eb:33:
45:bd:b9:dc:7b:58:e6:ff:bf:42:9e:f3:49:02:12:3c:9f:ee:
33:53:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:00:16 2025 by rpki-client