This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
File: vsKCSG834xbxe1ILRVKHvDB_ieg.mft (raw, json)
Hash identifier: UXnIlbo7avaxoK1ym+X//4WBXEOPSvXwG+9b+Cg35Ok=
Subject key identifier: 8B:99:F7:C2:71:E4:01:07:66:40:F3:CE:3B:74:66:46:54:09:5D:FB
Authority key identifier: BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8
Certificate issuer: /CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8
Certificate serial: 013F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
Manifest number: 013C
Signing time: Sun 21 Dec 2025 03:37:10 +0000
Manifest this update: Sun 21 Dec 2025 03:37:09 +0000
Manifest next update: Sun 28 Dec 2025 03:37:09 +0000
Files and hashes: 1: vsKCSG834xbxe1ILRVKHvDB_ieg.crl (hash: s0aN7UoQdHkYJQR4LN58/BK4yOUqnTpPO+TqYFeTVzk=)
2: 71403B04F7E511EEBC67981CC4F9AE02.roa (hash: xdCJJSBmKRi6P083PXPoHsI4LKPSNh2nAQa1KhgQI3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl
rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 03:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A469, serialNumber=BEC282486F37E316F17B520B455287BC307F89E8
Validity
Not Before: Dec 21 03:37:09 2025 GMT
Not After : Dec 28 03:37:09 2025 GMT
Subject: CN=69476b65-593e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:9e:30:2a:ab:7f:ec:e4:d8:fb:a7:a1:69:
54:26:e1:59:c1:83:48:86:c1:0d:ed:53:95:89:7b:
35:a0:47:15:aa:57:35:a4:5c:b8:b8:1a:16:fe:e8:
da:90:e6:ea:6c:6a:26:a7:85:f6:6a:2d:0f:91:df:
7e:e8:34:87:37:8d:02:3c:ca:59:a1:0f:06:67:dd:
54:df:4c:4b:3a:8e:0d:b9:1a:05:94:dd:34:96:36:
83:e4:ed:76:61:7f:35:0e:92:d5:7b:ea:e6:ab:1c:
d9:cb:7d:76:6b:35:39:9b:ca:66:bd:64:ee:43:e8:
ef:df:65:ba:41:43:1a:0f:03:22:54:6a:d0:46:f8:
cd:13:91:3c:2f:2a:c7:5a:d2:d1:63:dd:92:67:34:
b4:79:d3:26:ef:09:80:9e:91:69:df:56:c7:e3:9e:
d5:81:32:f9:22:8f:bf:fe:a8:7d:52:c8:6c:e1:ba:
73:6f:aa:11:0b:1e:31:43:a5:1d:87:47:b7:6a:ac:
2e:78:69:b2:08:41:47:a2:7d:56:18:11:1e:21:c8:
2c:c4:67:69:96:2a:4d:9b:ae:a6:b9:29:01:25:1b:
88:94:c7:ca:20:69:1b:68:e5:2e:a2:02:06:c8:81:
41:dc:c5:88:af:53:48:9c:8d:3a:88:c9:73:b8:f0:
22:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:99:F7:C2:71:E4:01:07:66:40:F3:CE:3B:74:66:46:54:09:5D:FB
X509v3 Authority Key Identifier:
keyid:BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:12:71:13:b8:96:fc:00:a6:2e:50:9b:09:69:dc:18:52:10:
7a:36:8b:d0:6a:66:11:2f:d7:a8:10:21:bc:df:17:72:02:28:
5a:59:20:70:23:5e:7d:16:fa:fe:da:cd:da:b7:ca:bc:6a:09:
38:ca:58:ff:2e:a7:7c:7b:a6:21:96:26:a0:5e:6e:0b:9f:d6:
a9:f5:14:50:fc:93:05:16:8a:0e:18:70:f5:71:60:2f:cf:55:
0a:05:14:76:1d:23:66:db:85:21:1b:d2:db:45:7e:3f:b1:8a:
c3:c8:48:f4:91:05:16:fb:c3:c0:91:15:63:2e:99:d0:14:f5:
70:e1:0a:f2:07:ca:15:4a:00:f5:39:3e:0e:d3:41:a1:01:f4:
ba:7b:19:7d:4b:2f:9f:c8:aa:34:23:b4:17:63:15:e2:38:99:
93:5c:e9:46:84:94:4b:e3:56:35:93:70:fc:af:a6:4e:be:57:
7d:00:c5:1f:33:aa:a8:bf:89:bb:86:b9:9b:dc:86:38:f1:3a:
e9:d6:6e:34:b3:33:4f:74:85:1d:05:03:2d:9d:b6:cc:29:c8:
c1:04:22:cf:1b:b2:f7:40:e1:44:45:00:8b:2f:b3:85:65:ec:
e3:a6:4f:c0:0d:d5:3e:ca:16:c2:13:e9:03:ff:42:e4:a4:7a:
bd:0f:9e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 08:08:00 2025 by rpki-client