This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.mft
File: vrLtvPXHBujjAYwAasdhPGyI9a0.mft (raw, json)
Hash identifier: 2SuKzuVU3kqedLnbfZwJTKlCatw2LFU7EuFP8molIRw=
Subject key identifier: 16:8D:5F:99:C0:91:43:02:26:8E:E1:2C:B9:02:75:09:84:A1:30:C1
Authority key identifier: BE:B2:ED:BC:F5:C7:06:E8:E3:01:8C:00:6A:C7:61:3C:6C:88:F5:AD
Certificate issuer: /CN=A918306F/serialNumber=BEB2EDBCF5C706E8E3018C006AC7613C6C88F5AD
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrLtvPXHBujjAYwAasdhPGyI9a0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.mft
Manifest number: 10
Signing time: Fri 19 Dec 2025 06:51:04 +0000
Manifest this update: Fri 19 Dec 2025 06:51:03 +0000
Manifest next update: Fri 26 Dec 2025 06:51:03 +0000
Files and hashes: 1: vrLtvPXHBujjAYwAasdhPGyI9a0.crl (hash: +uunAy/pfpGOMr1zOcTFQeOr3Bz/yhPLeXkRzgF4C60=)
2: 0F59B14CC55011F08C55AF0AC4F9AE02.roa (hash: s2gchgumm5kqev0LEXRxjXbLTYWjDSMQAi6Y60e4bgY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.crl
rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrLtvPXHBujjAYwAasdhPGyI9a0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918306F, serialNumber=BEB2EDBCF5C706E8E3018C006AC7613C6C88F5AD
Validity
Not Before: Dec 19 06:51:03 2025 GMT
Not After : Dec 26 06:51:03 2025 GMT
Subject: CN=6944f5d7-effd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:da:bc:ab:61:77:a9:77:f7:52:85:98:ef:93:
26:1c:b1:e0:15:43:83:dc:c3:01:48:89:46:ea:89:
e8:1e:1c:2d:48:a7:e1:9c:89:6c:01:0c:ad:de:c5:
cb:31:94:e2:6b:ab:e0:07:95:2f:97:13:42:a9:a8:
88:36:68:6f:d5:b5:ff:0e:b8:48:b4:17:bb:a4:63:
74:f7:85:a0:b9:e5:a0:d9:24:ce:14:4d:7d:e7:11:
54:bb:f4:01:56:20:f3:92:49:50:9b:9a:62:a1:6f:
8a:2c:90:cc:20:2a:1f:6d:f3:78:87:dd:e2:42:29:
91:d7:64:4a:d7:4c:24:2e:d7:03:22:3d:32:da:e4:
ec:85:b3:eb:9c:e4:46:8a:7a:52:aa:04:11:42:96:
f1:15:8f:99:57:83:7a:58:56:82:7d:38:f2:fb:e1:
5c:2d:dc:ad:53:9c:d7:97:bc:6d:37:aa:1a:d8:c0:
82:2b:b4:40:88:56:85:f4:35:fa:e0:f0:d5:57:2e:
ed:76:b6:8b:7c:10:63:fb:19:c1:e0:7b:70:43:64:
2a:f3:d2:ef:80:4c:ba:4d:0f:51:fc:73:bf:9b:99:
4d:dd:48:ab:09:c9:e8:e2:9f:f5:70:07:10:bb:ff:
02:ce:d3:73:df:d6:26:42:7d:24:de:80:6f:15:57:
61:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8D:5F:99:C0:91:43:02:26:8E:E1:2C:B9:02:75:09:84:A1:30:C1
X509v3 Authority Key Identifier:
keyid:BE:B2:ED:BC:F5:C7:06:E8:E3:01:8C:00:6A:C7:61:3C:6C:88:F5:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrLtvPXHBujjAYwAasdhPGyI9a0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1c:3e:2f:57:34:19:ba:03:fd:fc:0f:1d:d5:20:12:27:46:
0c:88:93:00:44:10:60:d5:2a:a3:27:24:41:c8:e0:ae:5a:98:
f4:b6:2f:48:c6:c9:49:35:1c:32:84:3a:96:2c:fe:34:f5:e1:
02:7b:54:2e:e9:14:03:b6:e4:85:cb:04:79:97:5b:ba:46:75:
24:76:0a:81:be:77:40:0c:d0:fa:6e:eb:29:21:db:c4:9a:0b:
bd:b3:be:cf:6f:5e:92:94:65:2b:c1:2c:00:09:b4:ce:c5:e8:
86:e4:13:f1:40:b1:1c:fb:4c:69:6b:70:d9:9d:ed:c2:7b:a2:
8c:bd:08:6a:69:68:b1:db:b0:fb:5f:3f:c3:e2:06:d8:f5:bd:
9b:ef:e7:17:ac:c6:76:1f:91:38:1f:a8:f8:4a:97:ab:f8:15:
1e:4e:e0:58:7d:20:3d:5c:ac:23:1d:cf:73:b9:e0:44:9d:d7:
3f:02:df:aa:ca:a2:34:1d:07:37:1d:c5:dd:e6:e6:b6:b8:ef:
60:33:3d:60:dd:73:62:02:fc:62:75:65:30:31:9a:8c:e4:11:
ee:e7:ad:05:51:2d:84:b0:46:71:e7:7f:80:fd:91:ba:30:ce:
ff:a8:56:d2:2b:a4:fb:3a:1d:cb:a3:69:c0:89:09:c3:a3:b0:
4f:80:92:43
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MzA2RjExMC8GA1UEBRMoQkVCMkVEQkNGNUM3MDZFOEUzMDE4QzAwNkFDNzYxM0M2
Qzg4RjVBRDAeFw0yNTEyMTkwNjUxMDNaFw0yNTEyMjYwNjUxMDNaMBgxFjAUBgNV
BAMMDTY5NDRmNWQ3LWVmZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDt2ryrYXepd/dShZjvkyYcseAVQ4PcwwFIiUbqiegeHC1Ip+GciWwBDK3excsx
lOJrq+AHlS+XE0KpqIg2aG/Vtf8OuEi0F7ukY3T3haC55aDZJM4UTX3nEVS79AFW
IPOSSVCbmmKhb4oskMwgKh9t83iH3eJCKZHXZErXTCQu1wMiPTLa5OyFs+uc5EaK
elKqBBFClvEVj5lXg3pYVoJ9OPL74Vwt3K1TnNeXvG03qhrYwIIrtECIVoX0Nfrg
8NVXLu12tot8EGP7GcHge3BDZCrz0u+ATLpND1H8c7+bmU3dSKsJyejin/VwBxC7
/wLO03Pf1iZCfSTegG8VV2HjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFo1fmcCR
QwImjuEsuQJ1CYShMMEwHwYDVR0jBBgwFoAUvrLtvPXHBujjAYwAasdhPGyI9a0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzMDZGLzZBOTJEMTlFQzU0
RTExRjBBNDlDNEY4NkM0RjlBRTAyL3ZyTHR2UFhIQnVqakFZd0Fhc2RoUEd5STlh
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdnJMdHZQWEhCdWpqQVl3QWFzZGhQR3lJOWEwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz
MDZGLzZBOTJEMTlFQzU0RTExRjBBNDlDNEY4NkM0RjlBRTAyL3ZyTHR2UFhIQnVq
akFZd0Fhc2RoUEd5STlhMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAK0cPi9XNBm6A/38Dx3VIBInRgyIkwBEEGDVKqMnJEHI4K5amPS2L0jG
yUk1HDKEOpYs/jT14QJ7VC7pFAO25IXLBHmXW7pGdSR2CoG+d0AM0Ppu6ykh28Sa
C72zvs9vXpKUZSvBLAAJtM7F6IbkE/FAsRz7TGlrcNmd7cJ7ooy9CGppaLHbsPtf
P8PiBtj1vZvv5xesxnYfkTgfqPhKl6v4FR5O4Fh9ID1crCMdz3O54ESd1z8C36rK
ojQdBzcdxd3m5ra472AzPWDdc2IC/GJ1ZTAxmozkEe7nrQVRLYSwRnHnf4D9kbow
zv+oVtIrpPs6HcujacCJCcOjsE+AkkM=
-----END CERTIFICATE-----
Generated at Sat Dec 20 03:03:00 2025 by rpki-client