This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
File: VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json)
Hash identifier: 3MPSiK+PtkyowVfamdQPCfDeEbH9EBq4P7FozidgFKI=
Subject key identifier: 5D:AB:14:39:3B:05:99:74:FC:94:3A:E1:A8:38:DE:A5:E6:F1:45:08
Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
Certificate issuer: /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Certificate serial: 0113
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
Manifest number: 0111
Signing time: Sat 27 Dec 2025 03:51:05 +0000
Manifest this update: Sat 27 Dec 2025 03:51:05 +0000
Manifest next update: Sat 03 Jan 2026 03:51:05 +0000
Files and hashes: 1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: u2tlhopIXdrXkQsdcmYHR0Cno17AGUTvt7cUBqOen+g=)
2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: XqPR58WFjxW/r7vrXermk8/pxwRAohdmERUavDiArx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Validity
Not Before: Dec 27 03:51:05 2025 GMT
Not After : Jan 3 03:51:05 2026 GMT
Subject: CN=694f57a9-ff0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:58:e0:9d:47:59:3b:81:4e:09:41:00:2c:
20:99:03:16:55:b5:3d:5f:ac:7c:70:ac:e2:2d:7f:
76:e5:64:1e:90:9c:ed:fe:4a:59:30:46:dc:2c:de:
0c:7f:29:a2:8e:b2:5c:33:c6:c1:15:78:77:7d:95:
00:29:b4:db:e1:b3:06:bb:11:f0:ca:2f:62:00:3c:
07:ee:9e:fb:37:2f:d5:41:4f:e8:11:cb:7b:a0:cc:
94:c0:01:b7:de:59:04:2f:61:54:e5:72:f9:a6:1d:
61:19:e9:ac:d9:f5:b1:2c:ad:06:73:da:df:f6:34:
ac:1b:ff:86:d5:5f:01:3e:f8:46:1b:f5:5e:75:8e:
a7:2a:b7:6a:28:79:6c:ea:f7:04:5e:6b:92:39:c0:
4b:64:10:61:8d:7f:d9:24:7e:fa:f4:9c:c4:21:aa:
49:52:42:88:2c:ec:45:08:cb:ef:b5:8b:c8:fc:15:
15:85:66:c1:59:cd:8b:47:55:a2:26:89:12:f5:7e:
e7:7c:64:6c:3f:08:89:5c:e4:80:fe:50:53:ad:9b:
20:92:f0:aa:42:de:df:d4:78:40:52:a6:4c:6f:a5:
54:96:b2:af:35:f0:0d:5c:27:aa:b5:54:e0:04:6d:
92:5f:32:57:3e:7e:16:a6:6e:f7:25:9c:33:ea:bd:
1f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AB:14:39:3B:05:99:74:FC:94:3A:E1:A8:38:DE:A5:E6:F1:45:08
X509v3 Authority Key Identifier:
keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:18:ad:d1:cf:07:e6:00:bd:e4:e4:29:ad:e8:85:ae:83:c5:
d4:70:f0:0e:3b:db:67:b7:46:98:39:f4:0e:e3:2b:8f:5a:a6:
0b:5a:b7:99:e9:e6:b1:9d:dd:62:41:77:c9:a3:f1:cf:46:6c:
24:29:bf:77:f4:15:65:69:8e:c0:b3:c4:87:3e:a0:93:f5:c1:
79:56:c2:ac:59:31:41:43:5f:35:22:17:5c:bc:97:15:64:12:
64:b4:bc:ac:d1:4e:b5:98:c5:26:dc:c0:c3:39:8f:40:ac:79:
18:95:4a:4b:2c:f6:ef:0e:12:0b:fa:30:fb:c7:6c:00:a5:65:
57:55:df:6f:c2:6a:81:e5:4b:9b:7e:3a:fc:27:d2:ac:94:63:
7f:64:7b:5b:d2:0a:e3:1f:7c:03:f8:1f:29:fa:e7:93:f0:0a:
d2:c0:9b:7f:c0:d4:1c:70:00:37:79:14:71:88:a5:33:4c:71:
1d:f9:85:f6:8b:8e:97:89:a5:71:d5:61:60:66:9d:03:83:53:
74:93:c0:0e:5b:75:61:68:f2:d2:d9:ce:2a:47:20:5c:19:2d:
be:a2:b2:41:bc:5e:1d:7e:6d:bf:49:cd:2c:be:60:90:49:0a:
c9:23:a4:83:6d:fd:9d:57:27:86:c1:85:d4:3c:e1:79:a7:0e:
f6:da:52:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 12:35:18 2025 by rpki-client