This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
File: vBeIK_xKhjChu_avBlGLkLpNFoo.mft (raw, json)
Hash identifier: BrIpRHHopq/pS4XSq/P3tFRNVVdtogXxNoJ1cTU63Lo=
Subject key identifier: 82:37:92:18:02:31:3D:EE:54:17:42:31:CE:3E:48:76:FD:DF:2B:D3
Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
Certificate issuer: /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
Manifest number: 0167
Signing time: Sun 21 Dec 2025 03:09:12 +0000
Manifest this update: Sun 21 Dec 2025 03:09:11 +0000
Manifest next update: Sun 28 Dec 2025 03:09:11 +0000
Files and hashes: 1: vBeIK_xKhjChu_avBlGLkLpNFoo.crl (hash: fn3HmdjZM/wIp7jzW0BPKT+l+JIXLJIvYExV6LJa+GM=)
2: 744F6602B5B511EEACE32B4DC4F9AE02.roa (hash: MNtM9pXu4p6v7Z7f6/Wop8L0VMv9VFX8mmGYuSjaQTM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl
rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 03:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FDDD, serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
Validity
Not Before: Dec 21 03:09:11 2025 GMT
Not After : Dec 28 03:09:11 2025 GMT
Subject: CN=694764d7-6082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:c0:ba:3c:27:94:28:d8:21:27:70:7f:86:
82:c0:41:da:1b:86:82:92:c0:64:a1:f6:85:ad:db:
55:73:91:1b:03:3c:09:f8:03:3e:52:b3:b1:e0:a4:
4b:22:4f:d2:96:b8:bc:31:90:50:c1:f2:19:24:4c:
fd:90:23:c1:c1:5b:91:19:06:69:06:6f:58:47:fc:
ef:ce:d6:21:2e:19:28:82:a6:86:1f:ae:3b:b2:4f:
45:98:e9:68:eb:ea:bd:ac:5d:df:80:de:81:1a:36:
b7:6c:ff:48:50:d1:36:96:26:77:e1:3a:d4:34:de:
1f:8e:61:38:e5:30:1b:1a:2a:3b:78:f6:59:18:f0:
46:19:66:b9:bc:33:27:43:e6:fb:7a:78:d9:99:18:
3b:18:29:8c:e5:b1:a4:f2:de:f4:67:3e:d9:9a:9e:
d0:b4:2c:69:19:5d:4f:ea:69:82:79:59:7c:9d:5c:
f5:d9:ea:37:3a:60:eb:bd:b4:2b:3e:b5:1f:56:cc:
40:7c:c3:93:ec:89:08:01:36:5a:5e:ca:c6:81:63:
fa:15:71:fd:be:d3:03:a2:dc:4e:78:e0:13:a6:bc:
dd:14:1f:c3:a0:26:04:25:31:54:7c:17:41:4c:1a:
48:b9:fd:88:91:63:42:ae:f1:8d:89:2b:bf:30:eb:
6d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:37:92:18:02:31:3D:EE:54:17:42:31:CE:3E:48:76:FD:DF:2B:D3
X509v3 Authority Key Identifier:
keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7d:89:08:cd:87:15:73:50:84:bf:0c:5c:c2:8a:97:53:ae:
6c:ec:59:34:b7:32:d8:0d:91:4d:b5:50:41:62:36:b7:3d:9d:
ef:1d:b1:b4:d1:9c:73:5d:d3:5c:1e:aa:24:56:2a:de:d9:2a:
f2:df:4f:8c:68:ea:71:fe:d4:18:7e:8d:01:1c:00:f6:81:34:
bb:e4:34:64:38:2e:70:4f:4b:a8:d4:0c:1a:2a:73:3e:25:8b:
c6:25:02:5c:fb:80:1f:85:47:56:29:b9:cb:cc:1d:07:7e:35:
7f:fe:1a:f5:13:0a:f6:9d:bf:c9:ea:a3:cf:17:ec:01:53:18:
1e:3b:52:87:d8:8a:93:25:50:d9:09:bc:5a:6e:30:24:02:e4:
1a:5e:64:92:9b:24:3c:b3:a3:69:b7:23:38:2e:c4:bb:d7:b3:
a6:74:3f:5d:59:9b:25:de:79:7a:73:e9:db:c3:95:42:62:99:
d3:99:9d:68:1e:f7:dd:8d:36:8d:fb:f7:2a:a9:f8:31:54:c9:
69:c3:13:0e:1d:5c:c6:9a:34:6e:e8:27:98:7e:fa:7f:ba:ea:
ac:3f:3a:87:29:c3:78:f0:63:2d:14:27:63:49:22:fe:3b:12:
19:70:da:81:45:00:b1:fc:aa:5c:d7:82:ef:d8:9c:0f:ff:84:
ba:bd:88:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZEREQxMTAvBgNVBAUTKEJDMTc4ODJCRkM0QTg2MzBBMUJCRjZBRjA2NTE4Qjkw
QkE0RDE2OEEwHhcNMjUxMjIxMDMwOTExWhcNMjUxMjI4MDMwOTExWjAYMRYwFAYD
VQQDDA02OTQ3NjRkNy02MDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt0LAujwnlCjYISdwf4aCwEHaG4aCksBkofaFrdtVc5EbAzwJ+AM+UrOx4KRL
Ik/Slri8MZBQwfIZJEz9kCPBwVuRGQZpBm9YR/zvztYhLhkogqaGH647sk9FmOlo
6+q9rF3fgN6BGja3bP9IUNE2liZ34TrUNN4fjmE45TAbGio7ePZZGPBGGWa5vDMn
Q+b7enjZmRg7GCmM5bGk8t70Zz7Zmp7QtCxpGV1P6mmCeVl8nVz12eo3OmDrvbQr
PrUfVsxAfMOT7IkIATZaXsrGgWP6FXH9vtMDotxOeOATprzdFB/DoCYEJTFUfBdB
TBpIuf2IkWNCrvGNiSu/MOttjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFII3khgC
MT3uVBdCMc4+SHb93yvTMB8GA1UdIwQYMBaAFLwXiCv8SoYwobv2rwZRi5C6TRaK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkRERC9FQ0RFQTFGNkI1
QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hqQ2h1X2F2QmxHTGtMcE5G
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZCZUlLX3hLaGpDaHVfYXZCbEdMa0xwTkZvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkRERC9FQ0RFQTFGNkI1QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hq
Q2h1X2F2QmxHTGtMcE5Gb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrfYkIzYcVc1CEvwxcwoqXU65s7Fk0tzLYDZFNtVBBYja3PZ3vHbG0
0ZxzXdNcHqokVire2Sry30+MaOpx/tQYfo0BHAD2gTS75DRkOC5wT0uo1AwaKnM+
JYvGJQJc+4AfhUdWKbnLzB0HfjV//hr1Ewr2nb/J6qPPF+wBUxgeO1KH2IqTJVDZ
CbxabjAkAuQaXmSSmyQ8s6NptyM4LsS717OmdD9dWZsl3nl6c+nbw5VCYpnTmZ1o
HvfdjTaN+/cqqfgxVMlpwxMOHVzGmjRu6CeYfvp/uuqsPzqHKcN48GMtFCdjSSL+
OxIZcNqBRQCx/Kpc14Lv2JwP/4S6vYhP
-----END CERTIFICATE-----
Generated at Sun Dec 21 09:15:18 2025 by rpki-client