This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
File: vbEpSPLgeJsV8C1ROboGsjBqKOc.mft (raw, json)
Hash identifier: ZEyWHe/JOfxD73zOQu+T10PpE1T2F31q3xuxwDUTCl4=
Subject key identifier: EE:12:01:8C:A9:F8:7F:3B:FD:77:FE:4D:CF:1F:A6:E3:1C:4F:73:90
Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
Certificate issuer: /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Certificate serial: 0566
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
Manifest number: 055C
Signing time: Wed 24 Dec 2025 22:36:35 +0000
Manifest this update: Wed 24 Dec 2025 22:36:34 +0000
Manifest next update: Wed 31 Dec 2025 22:36:34 +0000
Files and hashes: 1: vbEpSPLgeJsV8C1ROboGsjBqKOc.crl (hash: TpdFHn+MLEu4EyqOjkv+kIkBZjBSXfa0h6J45ro6/XM=)
2: D575368892D011F0B767031EC4F9AE02.roa (hash: kzLaaICHZkVtnjNMrsdH4mcf3ZHwNLMcESdDt6YjBQg=)
3: 7A93FBCE92CA11F08DC37F48C4F9AE02.roa (hash: 90ZyS4U6Q1wf7JXIDQayibihHgxjqDGULjXEwxSwLJo=)
4: AFB22EC892C211F0A3854712C4F9AE02.roa (hash: 8XhJkYfZtUkquYR5u12lUnek3pRnxzxHWIehQP2S0wo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 22:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1382 (0x566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Validity
Not Before: Dec 24 22:36:34 2025 GMT
Not After : Dec 31 22:36:34 2025 GMT
Subject: CN=694c6af3-db4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:ab:32:2b:c7:db:7b:d9:f3:d2:47:74:f6:
a0:3b:aa:d9:cc:3a:a5:64:2e:84:39:d1:d2:2c:03:
d2:6e:9a:91:6b:82:25:84:f9:fb:c8:0b:50:9b:1c:
82:1b:db:a0:8a:e4:24:56:8d:85:11:f7:55:52:61:
00:27:69:5d:30:11:83:d5:44:bc:32:7f:7a:04:6d:
c4:d5:d8:5f:37:f8:97:b1:66:45:8c:d3:f2:a5:1f:
05:65:0c:78:6f:72:d9:a6:c2:65:be:9a:7b:db:06:
c0:9a:0a:3d:37:40:a4:79:81:fa:3f:8d:b7:e3:08:
43:f4:5a:8f:ac:5c:ab:01:c4:73:dc:2d:d3:34:68:
82:94:49:45:e8:dd:73:4c:82:e3:1d:e8:88:c3:96:
b2:5e:74:0b:4c:8c:38:a1:59:e7:97:d6:5c:0b:66:
24:ea:2d:c2:44:4e:0e:f6:bc:11:b4:f3:78:93:76:
0f:0b:75:3d:ed:70:66:e0:1b:f4:b3:ee:81:4c:c4:
46:ab:cb:cc:5f:b5:f7:05:66:01:ca:a5:ed:db:25:
6b:71:56:e5:06:cb:44:2e:38:e0:9f:aa:f0:95:d1:
3e:af:3a:49:07:3e:5e:03:d5:fa:d5:fc:cd:74:58:
60:86:65:10:96:69:28:5e:e5:7e:13:e8:e7:47:8a:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:12:01:8C:A9:F8:7F:3B:FD:77:FE:4D:CF:1F:A6:E3:1C:4F:73:90
X509v3 Authority Key Identifier:
keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d3:d7:d2:b9:c9:93:83:70:17:20:ba:ba:20:c5:0f:61:e0:
b5:f9:50:92:48:1e:0b:79:5c:1e:ce:83:11:d8:54:ed:f1:49:
ad:35:af:6c:cf:30:32:9a:4c:af:20:75:78:92:40:da:43:b1:
75:3b:78:9b:e2:d0:1b:e9:50:49:39:27:7e:f8:f5:6c:0d:a2:
6a:86:82:7d:c1:58:5c:84:28:c6:f5:24:04:c4:22:d3:4f:7d:
a6:aa:30:e8:ad:4f:42:e8:8a:b8:15:e1:3e:fd:d2:24:08:4b:
47:c3:e5:18:d6:a3:cc:60:ed:91:f0:9a:60:48:04:de:4b:46:
56:17:48:e7:56:0a:5e:a7:64:6d:49:b5:74:0c:6c:37:09:56:
6f:31:12:0a:d2:77:64:cd:d6:ca:62:db:50:64:93:e2:c9:47:
70:4f:aa:c5:ae:33:11:3c:9e:9e:39:5c:78:f5:55:21:8d:21:
56:fb:de:a0:63:af:db:8e:58:c2:a6:d6:05:7a:1f:70:68:80:
47:01:d2:01:0c:81:dd:d0:9d:70:df:52:2f:2d:cc:ae:e0:b4:
3f:11:1a:0a:4c:11:d3:1f:c4:c3:9e:5e:94:b5:41:e6:04:cd:
de:56:cf:50:27:0d:35:a1:bc:66:60:08:85:17:5e:46:4e:c8:
ec:65:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 01:55:35 2025 by rpki-client