This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
File: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft (raw, json)
Hash identifier: +DH/RrNSs519rzGiTVJ9EmVTHbITdnyaQPx7WueDnzY=
Subject key identifier: 56:3B:32:1C:CB:14:B9:BB:41:0E:F9:F6:EB:4E:90:5C:D5:24:27:65
Authority key identifier: BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
Certificate issuer: /CN=A918E1C4/serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
Manifest number: 0D
Signing time: Fri 19 Dec 2025 06:57:29 +0000
Manifest this update: Fri 19 Dec 2025 06:57:28 +0000
Manifest next update: Fri 26 Dec 2025 06:57:28 +0000
Files and hashes: 1: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl (hash: 6CGSybMsdMnu4lsmB6ieiOUhPFsqugDXLlNeREiftmU=)
2: 722C58FACE9311F0A2C11D25C4F9AE02.roa (hash: vbYGiXj/8596Y2OVsZjQ4JT9FfRktn7XEyP5V/XXG/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E1C4, serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Validity
Not Before: Dec 19 06:57:28 2025 GMT
Not After : Dec 26 06:57:28 2025 GMT
Subject: CN=6944f758-9853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:93:f0:d3:04:b7:3a:1f:36:dc:f5:f1:30:
f0:ae:5f:e0:59:8e:f4:e5:a2:68:db:f4:4b:73:cc:
fc:6c:0b:46:71:99:74:f1:99:be:4b:18:c8:f5:13:
ad:57:da:ac:22:ba:f4:17:57:fd:20:38:92:b9:1e:
ae:9f:9c:ae:09:f1:46:f7:50:5c:ab:2d:ea:1a:1f:
1f:3b:f3:66:04:1d:83:41:3d:b1:53:a0:e7:b7:6d:
f0:5b:18:39:99:21:26:e0:01:70:a5:c0:60:d2:24:
16:a0:96:7c:7b:9d:2f:6c:f2:0c:98:89:27:0a:95:
cd:25:20:ff:3e:b6:ce:ce:9a:b8:03:e9:16:19:dc:
1f:38:03:d6:54:03:da:4f:29:38:34:89:d6:61:41:
95:04:ef:27:15:8c:d6:f5:68:42:22:be:4a:5e:d3:
38:98:9e:9e:40:e5:ea:f8:b5:81:6e:80:88:49:e2:
4b:6c:a8:08:e7:e6:49:88:a7:82:a5:a6:71:6d:eb:
6e:b3:98:7d:ab:b8:76:5c:f4:c8:71:b4:ce:a7:4b:
50:6b:82:54:7a:17:11:95:ab:6d:93:a7:80:d6:9b:
33:c7:b6:ef:82:c3:5e:b3:c6:48:e0:32:44:dc:79:
d4:54:83:7a:d1:68:e3:ec:fe:4c:cb:19:dc:8f:e0:
2b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3B:32:1C:CB:14:B9:BB:41:0E:F9:F6:EB:4E:90:5C:D5:24:27:65
X509v3 Authority Key Identifier:
keyid:BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:71:5e:56:d9:e5:67:de:29:aa:26:4d:e9:6a:bd:90:3d:7c:
de:e5:24:b8:69:01:c7:75:67:22:cc:ae:0d:38:48:6b:85:a3:
e6:34:69:ff:28:b1:76:84:9d:d5:23:5f:5d:01:8d:67:b9:80:
a0:81:c5:07:8c:05:0d:7c:c2:74:fb:b3:73:ec:66:71:cf:83:
a8:94:8c:e1:8d:72:9c:fc:bb:66:8b:09:89:12:fd:9f:a2:d4:
c9:db:41:b7:a3:a2:bf:f2:5f:70:4f:50:fd:e9:01:76:a5:25:
0f:90:22:c9:5d:6e:a2:06:40:9d:cc:d2:b5:7e:75:08:d7:82:
b7:67:be:31:e4:58:e6:4c:7f:52:29:a9:e6:4a:a6:80:a2:66:
a5:d2:f1:32:16:cf:09:41:a1:61:b1:a3:8b:95:73:39:42:d7:
ce:61:94:75:75:c8:02:27:79:38:06:0a:b7:7f:0b:af:f7:50:
f5:67:91:d6:e4:08:96:f3:f9:0b:27:fe:1a:c5:15:bd:1c:c7:
f6:c3:9d:ae:45:2f:b8:a1:e1:aa:6a:73:50:72:ab:9d:7a:d2:
46:d0:f1:85:e8:81:21:37:78:80:a8:16:57:59:b7:f4:23:82:
c3:36:81:a5:a1:96:10:33:32:72:48:04:d8:98:24:cc:d4:43:
e6:ab:8b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:58:38 2025 by rpki-client