This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
File: VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft (raw, json)
Hash identifier: vGdblP5MlhpqGuWul9aPgfQkkO6vhqgfhfaHcsEeHZ8=
Subject key identifier: EC:BD:8E:29:3A:D2:35:F0:A4:6C:E1:82:D2:37:A4:EF:D8:B2:06:5C
Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9
Certificate issuer: /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9
Certificate serial: 0BBB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
Manifest number: 0BB3
Signing time: Mon 12 Jan 2026 18:30:12 +0000
Manifest this update: Mon 12 Jan 2026 18:30:11 +0000
Manifest next update: Mon 19 Jan 2026 18:30:11 +0000
Files and hashes: 1: VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl (hash: x3NTwdGcrGPV1yQpON5Ezn8dBizUWdauRJQXvDYA3j0=)
2: 8789C45E384311EAAA40EE51C4F9AE02.roa (hash: MAWDNXgpu9PgJn7Gnnkwa2ICesKD1B+IPcDJf1k8UoI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl
rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 18:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3003 (0xbbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154534, serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9
Validity
Not Before: Jan 12 18:30:11 2026 GMT
Not After : Jan 19 18:30:11 2026 GMT
Subject: CN=69653db4-f4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b0:85:ec:56:0f:3f:9f:d0:4e:a4:db:c3:db:
43:82:55:65:8c:7c:3f:1d:65:7f:94:6c:0b:ad:ed:
8e:e3:f1:8f:a8:23:7d:0b:3c:1e:07:b0:d3:4f:5d:
bd:86:16:31:0b:43:02:cc:25:75:0a:f0:40:ff:61:
b3:c3:1f:76:18:6e:9c:6c:b1:a5:d3:e2:28:ad:e4:
73:cc:f3:ee:3c:e3:e3:c9:31:66:47:99:59:d2:3e:
4b:ea:14:09:dd:fb:54:a2:c6:15:20:9c:64:51:ce:
ad:1f:76:89:15:88:bb:6d:ba:0a:f2:a9:9c:e2:32:
6f:c4:1d:02:0a:cc:81:86:86:3a:0c:43:71:03:99:
a7:a8:36:4a:87:25:aa:68:2c:18:9e:24:6f:00:a6:
93:c7:f9:ef:ef:da:af:ec:89:9e:7f:d9:25:bb:79:
73:f9:f5:91:e1:95:cd:9b:4d:d4:30:a4:7d:3c:e8:
ed:a6:0f:58:ff:b8:94:7e:11:5b:0f:3a:bf:6d:bc:
c1:f2:c8:fd:95:96:13:a0:60:f2:aa:75:39:e1:6b:
d6:f7:dc:fd:5d:ca:1d:13:0a:84:ba:23:2c:83:b4:
f5:0e:1f:a2:de:8d:a6:b7:85:16:d6:be:e5:32:97:
b9:47:31:f5:db:c4:df:e9:42:dc:fc:bf:63:b9:cb:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BD:8E:29:3A:D2:35:F0:A4:6C:E1:82:D2:37:A4:EF:D8:B2:06:5C
X509v3 Authority Key Identifier:
keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:ba:03:a1:eb:ec:c6:92:aa:ce:61:d8:49:70:37:72:2b:37:
87:ce:cf:ac:94:ab:8d:d9:21:6f:ec:3d:12:bb:76:b5:5b:eb:
66:13:85:4c:ee:87:54:14:39:85:0c:4b:08:6e:01:f1:82:f1:
cb:ca:cb:b6:bf:c9:e4:e1:97:97:b8:b1:14:1c:f9:4a:2f:29:
09:83:a1:a2:bd:3d:01:f3:43:77:7a:1f:0b:0f:32:8e:07:e3:
fd:08:0e:8c:59:17:ca:ff:3e:d2:d4:02:4f:55:5c:52:ca:ef:
50:b5:88:a2:b2:72:d6:14:73:48:4a:ed:4a:19:d9:92:cd:88:
a8:b0:32:98:43:68:71:32:e4:97:ee:b2:ea:e5:74:20:ea:d3:
7d:c1:9e:b9:89:b3:7d:1b:ea:bd:3e:ac:28:c7:58:19:36:e7:
5d:ef:9a:9c:34:a6:61:bb:93:bd:98:20:51:a5:1a:c4:29:5b:
85:7b:9d:c1:bc:33:16:c5:f1:0e:9e:df:37:80:03:ed:a2:ee:
40:61:a4:fe:25:f9:25:7f:8d:2c:7c:c1:c9:ba:1b:3b:44:a0:
7c:f1:ce:b2:9f:be:5e:b1:31:3b:67:f8:34:06:54:c3:a5:6e:
81:45:d8:58:88:ee:7e:18:84:9b:fd:68:f5:21:4d:c9:f6:90:
9b:b4:39:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:49:20 2026 by rpki-client