This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
File: vbEpSPLgeJsV8C1ROboGsjBqKOc.mft (raw, json)
Hash identifier: 0oyq96zh8eBwFkQvWVVX1lyLrJJxc64zdn+yOYW2nNk=
Subject key identifier: 1E:61:45:13:33:F5:30:54:83:21:7A:F3:AF:B2:76:14:7A:D3:69:31
Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
Certificate issuer: /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Certificate serial: 0567
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
Manifest number: 055D
Signing time: Fri 26 Dec 2025 22:31:49 +0000
Manifest this update: Fri 26 Dec 2025 22:31:49 +0000
Manifest next update: Fri 02 Jan 2026 22:31:49 +0000
Files and hashes: 1: vbEpSPLgeJsV8C1ROboGsjBqKOc.crl (hash: Z6Vr7VN5saOUb7AJw3wLaaTKd0588WkgkG+vRlPKo50=)
2: D575368892D011F0B767031EC4F9AE02.roa (hash: kzLaaICHZkVtnjNMrsdH4mcf3ZHwNLMcESdDt6YjBQg=)
3: 7A93FBCE92CA11F08DC37F48C4F9AE02.roa (hash: 90ZyS4U6Q1wf7JXIDQayibihHgxjqDGULjXEwxSwLJo=)
4: AFB22EC892C211F0A3854712C4F9AE02.roa (hash: 8XhJkYfZtUkquYR5u12lUnek3pRnxzxHWIehQP2S0wo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 22:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1383 (0x567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Validity
Not Before: Dec 26 22:31:49 2025 GMT
Not After : Jan 2 22:31:49 2026 GMT
Subject: CN=694f0cd5-c641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:97:a2:ff:83:fc:ed:67:48:86:33:63:b9:
1d:7b:2d:88:d3:bf:9d:cf:5f:4d:86:4e:d3:22:cb:
d8:bb:99:38:c6:32:89:5b:58:29:6d:96:d0:4b:4a:
c8:14:41:88:c8:a5:69:bd:f4:42:d8:c5:9f:fb:09:
b7:69:e6:eb:1b:d7:5e:04:4d:4a:79:3f:4e:e3:02:
a9:94:6a:c7:1f:1e:99:1c:e4:16:79:f4:51:32:8f:
6c:44:27:46:cb:ad:09:1a:c9:7b:78:93:d9:d9:1b:
b2:e1:23:e0:37:90:33:01:bc:4a:90:0b:65:cd:99:
db:cf:05:a3:ec:a8:da:b0:09:0c:9e:81:35:3e:d8:
ec:a0:02:19:8f:3e:f0:5a:d4:ff:f6:05:99:49:63:
34:d3:ac:f9:66:c8:34:2c:72:3f:b8:7c:b0:19:8d:
7d:c0:cc:df:54:82:d6:5c:ad:4f:85:cb:a4:c8:85:
ff:a9:25:b6:2d:26:75:2d:1c:ff:0a:08:16:b5:e3:
33:c0:ec:af:10:20:12:d4:38:c7:57:03:e9:5b:f2:
b6:ad:ed:b7:67:fe:66:9f:13:2e:a1:a4:5b:bf:33:
f1:46:b0:ff:62:8b:45:86:b1:46:8c:50:69:40:8c:
a6:41:12:03:35:c0:f4:df:64:f1:8e:8f:61:87:e0:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:61:45:13:33:F5:30:54:83:21:7A:F3:AF:B2:76:14:7A:D3:69:31
X509v3 Authority Key Identifier:
keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:23:72:23:f1:43:30:9a:9b:83:e3:df:11:7f:5a:23:fd:7d:
30:27:65:03:9c:26:89:75:f0:bd:7d:d8:7d:7c:7e:84:aa:dd:
9b:db:4c:2c:69:50:65:76:c6:c3:b2:92:15:ba:1e:48:fe:60:
25:01:e3:0e:36:38:e1:fc:03:9f:87:18:bf:c6:cd:7e:ea:43:
5c:97:b8:f4:89:f7:d4:d6:96:f9:f4:67:99:19:68:06:95:b1:
2d:4d:63:bf:1e:b4:1a:b1:e9:ed:47:b8:96:70:a1:86:88:da:
54:7c:e3:e7:e8:85:69:ae:fc:03:9c:78:76:1a:4f:79:f8:a7:
9f:07:a5:24:1d:26:d6:fe:6a:59:7f:d1:e5:d4:97:cb:44:a7:
31:3c:15:1f:cf:bd:12:f8:e5:35:30:e2:b6:73:0b:22:4c:35:
15:3d:1f:86:70:76:ae:7e:f9:5b:f1:8c:b9:86:2b:67:cb:2e:
19:e9:2e:4d:d0:c8:79:85:a3:41:36:d5:1f:d0:ea:65:09:09:
30:13:be:83:aa:53:e2:1e:86:85:32:23:29:f2:d5:d6:36:ae:
e3:55:4b:38:eb:f5:92:48:0e:f6:04:a0:80:d1:13:f1:3a:41:
fa:38:a4:46:c1:d8:c3:0c:79:fc:55:36:ae:a1:39:f9:0c:96:
6d:10:a1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 05:48:44 2025 by rpki-client