This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
File: VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json)
Hash identifier: vPyqQ7jqFCU4rInpijqvJYwfUl0UL0Cd4kR3VnITSqM=
Subject key identifier: 67:A8:9E:B1:CB:95:EA:88:D3:1A:57:92:2D:5A:06:02:49:E9:1C:32
Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64
Certificate issuer: /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
Certificate serial: 34ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
Manifest number: 34ED
Signing time: Thu 18 Dec 2025 14:56:56 +0000
Manifest this update: Thu 18 Dec 2025 14:56:56 +0000
Manifest next update: Thu 25 Dec 2025 14:56:56 +0000
Files and hashes: 1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: GWus4B3BYEY54jQYW9Q7B5S2kFLVBPixJqweYpKdcLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl
rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13549 (0x34ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D1DA, serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
Validity
Not Before: Dec 18 14:56:56 2025 GMT
Not After : Dec 25 14:56:56 2025 GMT
Subject: CN=69441638-2ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:fe:01:f5:c2:1e:a1:66:57:32:c8:f0:40:
19:18:1e:7b:ae:32:1e:a3:3d:2f:9e:4b:81:85:55:
25:24:db:0f:db:99:dd:2e:48:a1:a3:f4:ef:9b:37:
00:bb:a4:60:3a:47:9a:a7:a7:79:2b:0d:70:d9:b3:
3e:05:72:37:d2:49:26:67:3d:aa:18:ef:18:56:15:
9f:12:8b:f2:58:66:43:73:37:36:d0:8f:13:19:b7:
d3:97:f2:31:2a:6f:1e:ff:ce:64:5b:cb:d2:50:ad:
ce:ff:99:f6:57:57:3a:eb:1d:83:f8:dc:30:a9:b1:
67:13:30:ab:30:c1:77:6c:0b:38:b6:cf:79:58:05:
41:94:43:1f:f8:f1:8c:62:a3:8c:39:d2:ce:d8:4b:
29:36:2e:ba:0d:c9:95:5b:ca:65:a6:d9:80:be:fb:
7c:dd:ba:28:f0:b4:95:cf:6f:59:0c:b5:5e:e1:49:
43:a4:75:31:20:c7:24:3c:2b:32:fd:11:ad:97:b0:
c1:66:10:ca:0a:7f:65:92:0e:bd:d3:9f:de:54:c2:
2e:f8:76:4f:83:87:32:a6:25:5c:2a:ec:38:a9:78:
2c:eb:2c:5c:64:7e:43:06:c2:f1:a5:72:6e:07:09:
64:22:25:10:a1:b6:4e:54:8b:73:41:6d:57:3b:08:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A8:9E:B1:CB:95:EA:88:D3:1A:57:92:2D:5A:06:02:49:E9:1C:32
X509v3 Authority Key Identifier:
keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:4c:66:be:7e:bd:9d:67:da:c0:8c:2c:ae:e2:cd:0d:eb:8b:
04:46:b4:8d:16:63:4b:54:2f:4d:88:3c:12:93:7b:37:b0:50:
44:3b:2f:9a:ff:35:b6:0a:2b:27:f7:a0:0d:3b:65:66:3a:2c:
08:50:da:02:dd:bc:a9:7d:2f:a7:dc:5a:98:ec:aa:c8:e1:b7:
4a:5c:ea:5b:28:e2:58:46:05:87:43:7a:1b:0b:40:c3:b2:13:
89:fd:d3:6b:f3:55:ee:4d:aa:69:b5:3d:8e:86:88:f1:0b:79:
56:06:e5:c4:9b:72:1b:61:7c:b0:5d:0b:88:34:fe:bb:72:54:
1f:e9:49:04:ef:10:ff:30:b7:86:44:32:87:c9:6a:e8:b4:15:
d0:06:0a:63:e8:b9:af:38:b4:62:92:ca:aa:41:b8:6e:58:bf:
fa:73:28:e7:2a:28:a2:06:84:b5:f5:b0:e2:3a:fb:f0:13:b2:
7b:4a:df:e6:e8:c5:60:15:8e:fd:dc:f7:59:0b:c5:58:77:95:
b2:96:f2:ab:05:ff:6b:2b:73:4c:f7:6a:a3:fa:df:69:2d:31:
8f:e5:6a:c5:8a:3a:7c:52:76:67:83:14:de:2b:c6:8f:75:06:
67:bd:8b:58:a2:8b:e6:ea:ec:4b:09:77:36:d8:17:c5:36:82:
47:30:66:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQxREExMTAvBgNVBAUTKDU1MTRDMTgxMzdERUFCOEQxNEYxMTFDOTBGN0Y2QjdF
MzBEMDFGNjQwHhcNMjUxMjE4MTQ1NjU2WhcNMjUxMjI1MTQ1NjU2WjAYMRYwFAYD
VQQDDA02OTQ0MTYzOC0yZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo9L+AfXCHqFmVzLI8EAZGB57rjIeoz0vnkuBhVUlJNsP25ndLkiho/TvmzcA
u6RgOkeap6d5Kw1w2bM+BXI30kkmZz2qGO8YVhWfEovyWGZDczc20I8TGbfTl/Ix
Km8e/85kW8vSUK3O/5n2V1c66x2D+NwwqbFnEzCrMMF3bAs4ts95WAVBlEMf+PGM
YqOMOdLO2EspNi66DcmVW8plptmAvvt83boo8LSVz29ZDLVe4UlDpHUxIMckPCsy
/RGtl7DBZhDKCn9lkg6905/eVMIu+HZPg4cypiVcKuw4qXgs6yxcZH5DBsLxpXJu
BwlkIiUQobZOVItzQW1XOwiaGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeonrHL
leqI0xpXki1aBgJJ6RwyMB8GA1UdIwQYMBaAFFUUwYE33quNFPERyQ9/a34w0B9k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDFEQS8wMDhDRTUyQTFE
OUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0MFU4UkhKRDM5cmZqRFFI
MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZSVEJnVGZlcTQwVThSSEpEMzlyZmpEUUgyUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDFEQS8wMDhDRTUyQTFEOUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0
MFU4UkhKRDM5cmZqRFFIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUTGa+fr2dZ9rAjCyu4s0N64sERrSNFmNLVC9NiDwSk3s3sFBEOy+a
/zW2Cisn96ANO2VmOiwIUNoC3bypfS+n3FqY7KrI4bdKXOpbKOJYRgWHQ3obC0DD
shOJ/dNr81XuTapptT2OhojxC3lWBuXEm3IbYXywXQuINP67clQf6UkE7xD/MLeG
RDKHyWrotBXQBgpj6LmvOLRiksqqQbhuWL/6cyjnKiiiBoS19bDiOvvwE7J7St/m
6MVgFY793PdZC8VYd5WylvKrBf9rK3NM92qj+t9pLTGP5WrFijp8UnZngxTeK8aP
dQZnvYtYoovm6uxLCXc22BfFNoJHMGZL
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:25:27 2025 by rpki-client