This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
File: vpHAXiGMfmbqb5T50kV3cEGRveI.mft (raw, json)
Hash identifier: Qb+9gRkymXL1O+ZMvcCUAjIoBGWxnrBZpoFKL1RTPB8=
Subject key identifier: 49:F3:12:DF:9E:E3:66:6B:59:35:18:BB:8E:DB:35:CA:55:77:09:DE
Authority key identifier: BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2
Certificate issuer: /CN=A912FCBB/serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
Manifest number: 0103
Signing time: Fri 19 Dec 2025 04:11:50 +0000
Manifest this update: Fri 19 Dec 2025 04:11:50 +0000
Manifest next update: Fri 26 Dec 2025 04:11:50 +0000
Files and hashes: 1: vpHAXiGMfmbqb5T50kV3cEGRveI.crl (hash: 4EMl8kFObbpnZFnEj2rPbVDb2pQhvdrtHASRoRpFAQw=)
2: 8F80C48E531211EFAB0B8726C4F9AE02.roa (hash: qqwKlPG3HHIO/Ni46rjsjHo2nk3zj0h/n5n+UQCKPlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl
rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCBB, serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2
Validity
Not Before: Dec 19 04:11:50 2025 GMT
Not After : Dec 26 04:11:50 2025 GMT
Subject: CN=6944d086-e08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7d:27:61:d3:53:66:42:5f:c9:04:1a:26:af:
63:20:45:e8:d2:46:2a:37:fe:91:32:d9:a4:b8:7b:
45:be:fc:1f:dc:d4:99:ff:f3:66:89:12:c7:54:cb:
88:e7:98:11:25:4c:5b:17:7e:a5:c4:50:97:a0:99:
16:96:9d:92:d0:91:c2:7f:e4:f7:c9:f0:19:96:1d:
f4:4a:f8:96:ea:db:88:2d:4c:7d:b8:e3:88:b1:d4:
dd:52:98:20:2a:4a:ea:20:c4:86:4a:38:92:b8:33:
b3:df:7f:a5:b8:d9:f4:67:c5:93:f2:52:5f:37:ee:
2e:4d:f3:a0:77:f1:80:fd:8c:c5:4d:53:48:77:d3:
c3:34:6e:e7:8e:0f:c8:af:43:c8:e4:62:37:e7:ea:
45:17:b8:e9:3f:74:2b:5d:82:f7:01:32:1a:66:39:
8f:a0:7c:52:cb:db:70:72:79:91:03:c1:ae:29:4a:
92:02:78:cb:18:db:4b:66:d5:ad:ad:3e:1b:d6:4b:
1e:f4:43:c8:4f:4a:39:01:51:47:dc:74:ba:8d:be:
e5:c6:23:75:60:c2:4a:00:2b:7f:41:04:f5:97:81:
26:49:4f:3d:60:bf:3b:b9:c1:67:8f:8d:ce:6e:26:
b1:9d:1f:bc:4e:a2:a3:79:66:11:06:04:ab:b6:90:
09:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F3:12:DF:9E:E3:66:6B:59:35:18:BB:8E:DB:35:CA:55:77:09:DE
X509v3 Authority Key Identifier:
keyid:BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:5e:b1:6a:99:10:05:3e:b2:61:02:cf:b9:13:71:6d:f8:4f:
4c:6f:d2:cb:66:e0:55:9a:90:84:64:19:50:af:0a:fe:8c:da:
24:37:39:84:1e:7c:83:7e:20:61:b5:e9:f5:c5:c8:35:e8:67:
73:ed:6b:80:d4:64:a2:ca:36:62:0d:3e:e9:a7:7e:2b:2b:42:
98:6c:f2:93:a5:f0:52:02:dd:54:23:03:cd:60:58:ab:bc:c4:
b3:6c:41:3b:c4:7c:6d:05:18:b0:9c:e7:91:a2:e2:29:82:52:
e4:70:d1:1f:45:22:2f:55:65:a6:24:e5:df:30:0d:6c:7c:4e:
8d:1b:46:b7:99:c3:c0:5d:c3:70:11:4d:35:fa:51:46:ac:fa:
fc:18:68:5a:e9:b5:b8:53:7f:8f:8d:9c:0e:37:16:79:53:d4:
a2:09:cf:7e:5d:5a:cb:dc:71:9a:34:42:80:5d:1e:42:13:b0:
28:79:0f:93:65:6e:6f:a0:65:51:2a:36:a2:af:b8:e0:21:9c:
56:d4:de:66:b1:fa:66:67:25:f8:7f:50:07:67:c2:60:c1:1f:
19:40:43:d4:7c:a2:14:fa:60:2d:46:18:a8:09:1e:9e:47:99:
d6:33:57:ac:08:7c:ff:ad:a1:97:7a:60:ab:f2:5b:d3:76:aa:
f9:44:5f:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDQkIxMTAvBgNVBAUTKEJFOTFDMDVFMjE4QzdFNjZFQTZGOTRGOUQyNDU3Nzcw
NDE5MUJERTIwHhcNMjUxMjE5MDQxMTUwWhcNMjUxMjI2MDQxMTUwWjAYMRYwFAYD
VQQDDA02OTQ0ZDA4Ni1lMDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhn0nYdNTZkJfyQQaJq9jIEXo0kYqN/6RMtmkuHtFvvwf3NSZ//NmiRLHVMuI
55gRJUxbF36lxFCXoJkWlp2S0JHCf+T3yfAZlh30SviW6tuILUx9uOOIsdTdUpgg
KkrqIMSGSjiSuDOz33+luNn0Z8WT8lJfN+4uTfOgd/GA/YzFTVNId9PDNG7njg/I
r0PI5GI35+pFF7jpP3QrXYL3ATIaZjmPoHxSy9twcnmRA8GuKUqSAnjLGNtLZtWt
rT4b1kse9EPIT0o5AVFH3HS6jb7lxiN1YMJKACt/QQT1l4EmSU89YL87ucFnj43O
biaxnR+8TqKjeWYRBgSrtpAJ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnzEt+e
42ZrWTUYu47bNcpVdwneMB8GA1UdIwQYMBaAFL6RwF4hjH5m6m+U+dJFd3BBkb3i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81NEQyM0Y0NjUz
MEYxMUVGOTlDODhEMEZDNEY5QUUwMi92cEhBWGlHTWZtYnFiNVQ1MGtWM2NFR1J2
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZwSEFYaUdNZm1icWI1VDUwa1YzY0VHUnZlSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkNCQi81NEQyM0Y0NjUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi92cEhBWGlHTWZt
YnFiNVQ1MGtWM2NFR1J2ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3XrFqmRAFPrJhAs+5E3Ft+E9Mb9LLZuBVmpCEZBlQrwr+jNokNzmE
HnyDfiBhten1xcg16Gdz7WuA1GSiyjZiDT7pp34rK0KYbPKTpfBSAt1UIwPNYFir
vMSzbEE7xHxtBRiwnOeRouIpglLkcNEfRSIvVWWmJOXfMA1sfE6NG0a3mcPAXcNw
EU01+lFGrPr8GGha6bW4U3+PjZwONxZ5U9SiCc9+XVrL3HGaNEKAXR5CE7AoeQ+T
ZW5voGVRKjair7jgIZxW1N5msfpmZyX4f1AHZ8JgwR8ZQEPUfKIU+mAtRhioCR6e
R5nWM1esCHz/raGXemCr8lvTdqr5RF/v
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:56:22 2025 by rpki-client