This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
File: 1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft (raw, json)
Hash identifier: pyNSpYeABTovf0b7Od20FX8uyFAfrV17E18CWjXi8OA=
Subject key identifier: D6:8F:52:BC:4A:0C:E2:C8:19:3C:DA:53:2A:A7:AA:64:2B:8C:13:33
Authority key identifier: D5:50:47:06:13:93:6D:7D:47:B7:19:7A:B5:25:6F:A0:6E:0B:DC:11
Certificate issuer: /CN=A911F5C7/serialNumber=D550470613936D7D47B7197AB5256FA06E0BDC11
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
Manifest number: DB
Signing time: Fri 19 Dec 2025 04:43:35 +0000
Manifest this update: Fri 19 Dec 2025 04:43:35 +0000
Manifest next update: Fri 26 Dec 2025 04:43:35 +0000
Files and hashes: 1: 1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl (hash: SETgs5VyGnLt7y00mRoLnIuD0Kn+kEvxZ4GcMntm2mU=)
2: E6721B6E908211EFAC47F726C4F9AE02.roa (hash: Db1IjAN6j335Sw0gQLUk68pP8yGCP41bxuCBDXUeviA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl
rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:43:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F5C7, serialNumber=D550470613936D7D47B7197AB5256FA06E0BDC11
Validity
Not Before: Dec 19 04:43:35 2025 GMT
Not After : Dec 26 04:43:35 2025 GMT
Subject: CN=6944d7f7-5400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:17:be:bc:10:e6:20:df:6f:9d:8f:a4:bc:
a3:4b:a1:b7:b9:33:04:ca:1f:be:a2:e3:25:08:de:
f2:d0:b6:0f:02:f0:6d:10:73:05:ab:89:90:22:4d:
6a:de:ad:cd:ac:cc:6e:c2:c4:18:90:71:3e:97:8c:
b3:ee:80:f9:17:a7:2f:d0:a1:8f:3e:18:4b:8e:ea:
a8:41:e2:c0:ae:5a:7d:2b:8f:8d:6c:be:90:85:dc:
cc:44:18:19:57:f2:26:70:84:07:94:97:59:15:a4:
52:0e:76:64:1b:0f:c7:63:92:5a:2f:10:46:d8:71:
ef:92:b2:c4:74:cd:92:e5:d0:01:dd:2e:f9:f4:08:
d9:35:da:d4:f7:86:81:34:e6:d3:70:f2:98:fc:45:
fd:bf:e0:99:24:f0:1d:85:6c:b6:ae:73:58:d5:8a:
f8:f1:dc:57:03:de:47:2e:f5:af:e7:bc:ec:7e:17:
b8:ee:0b:3f:6b:be:74:e8:4f:fb:ea:5f:be:de:45:
f8:ef:2d:df:80:28:98:a4:5c:2d:d7:3c:29:10:b2:
fd:ac:e5:d2:9c:66:64:9f:92:e8:1a:7a:68:8f:ee:
97:20:05:fb:24:08:e5:be:31:04:4b:1b:c8:87:32:
c2:6f:88:9a:02:26:dc:da:9a:92:5f:26:82:0c:26:
ed:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8F:52:BC:4A:0C:E2:C8:19:3C:DA:53:2A:A7:AA:64:2B:8C:13:33
X509v3 Authority Key Identifier:
keyid:D5:50:47:06:13:93:6D:7D:47:B7:19:7A:B5:25:6F:A0:6E:0B:DC:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:b0:5c:13:ef:df:9a:8e:65:8e:8b:9a:cc:e6:54:b6:43:85:
a9:32:e6:4d:38:39:55:64:6a:43:9a:fd:36:73:19:f2:96:c7:
2e:c6:88:d9:9a:44:44:c9:9d:d6:38:27:08:ee:c0:ac:2e:f9:
a0:bf:e8:2c:57:9f:35:ea:0f:5b:61:6b:5e:29:5a:6c:3f:9d:
1d:ad:19:99:a2:e0:78:2c:f4:5f:9f:72:e5:a2:36:37:e0:6a:
6d:f0:86:f3:65:29:71:00:4a:b3:81:8e:82:07:c2:f3:a8:16:
c0:7d:19:f3:d6:d0:b4:9a:9f:d8:23:29:4b:90:c2:f7:15:b9:
a0:6d:d9:d4:55:93:c9:4c:81:10:c2:86:30:1e:07:02:ba:4d:
2f:09:29:3e:a9:7e:4e:c9:66:1c:c0:83:67:45:e5:86:15:e3:
86:e2:64:af:78:60:b5:7a:fc:a2:9e:9d:85:b1:18:70:6f:a9:
3a:1d:b6:8a:c6:11:78:25:d9:e3:07:db:93:ae:d3:61:39:6d:
f8:6a:15:59:83:0b:9c:a3:76:5e:58:6f:3c:11:f1:b1:c6:d3:
92:e2:a4:46:8d:dd:cc:b8:0d:1c:7d:dd:55:0b:71:3d:39:51:
87:08:b2:5f:0c:4c:99:36:7d:95:a8:e0:ad:8e:8c:60:37:8f:
c5:5a:89:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY1QzcxMTAvBgNVBAUTKEQ1NTA0NzA2MTM5MzZEN0Q0N0I3MTk3QUI1MjU2RkEw
NkUwQkRDMTEwHhcNMjUxMjE5MDQ0MzM1WhcNMjUxMjI2MDQ0MzM1WjAYMRYwFAYD
VQQDDA02OTQ0ZDdmNy01NDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy84XvrwQ5iDfb52PpLyjS6G3uTMEyh++ouMlCN7y0LYPAvBtEHMFq4mQIk1q
3q3NrMxuwsQYkHE+l4yz7oD5F6cv0KGPPhhLjuqoQeLArlp9K4+NbL6QhdzMRBgZ
V/ImcIQHlJdZFaRSDnZkGw/HY5JaLxBG2HHvkrLEdM2S5dAB3S759AjZNdrU94aB
NObTcPKY/EX9v+CZJPAdhWy2rnNY1Yr48dxXA95HLvWv57zsfhe47gs/a7506E/7
6l++3kX47y3fgCiYpFwt1zwpELL9rOXSnGZkn5LoGnpoj+6XIAX7JAjlvjEESxvI
hzLCb4iaAibc2pqSXyaCDCbtnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaPUrxK
DOLIGTzaUyqnqmQrjBMzMB8GA1UdIwQYMBaAFNVQRwYTk219R7cZerUlb6BuC9wR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDNy8zQzJEMThGQzkw
ODIxMUVGOTVBRDQ4MEZDNEY5QUUwMi8xVkJIQmhPVGJYMUh0eGw2dFNWdm9HNEwz
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFWQkhCaE9UYlgxSHR4bDZ0U1Z2b0c0TDNCRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjVDNy8zQzJEMThGQzkwODIxMUVGOTVBRDQ4MEZDNEY5QUUwMi8xVkJIQmhPVGJY
MUh0eGw2dFNWdm9HNEwzQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAEsFwT79+ajmWOi5rM5lS2Q4WpMuZNODlVZGpDmv02cxnylscuxojZ
mkREyZ3WOCcI7sCsLvmgv+gsV5816g9bYWteKVpsP50drRmZouB4LPRfn3LlojY3
4Gpt8IbzZSlxAEqzgY6CB8LzqBbAfRnz1tC0mp/YIylLkML3FbmgbdnUVZPJTIEQ
woYwHgcCuk0vCSk+qX5OyWYcwINnReWGFeOG4mSveGC1evyinp2FsRhwb6k6HbaK
xhF4JdnjB9uTrtNhOW34ahVZgwuco3ZeWG88EfGxxtOS4qRGjd3MuA0cfd1VC3E9
OVGHCLJfDEyZNn2VqOCtjoxgN4/FWolA
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:35:34 2025 by rpki-client