This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json)
Hash identifier: TIA7K5X0urMexjD3AleQVX2/CDry4dBPuw9Ldgy2nCk=
Subject key identifier: CA:CE:B5:43:DC:41:6F:0C:27:85:F8:C6:32:57:87:11:4C:79:E1:8A
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial: 10BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
Manifest number: 1081
Signing time: Mon 22 Dec 2025 17:03:37 +0000
Manifest this update: Mon 22 Dec 2025 17:03:37 +0000
Manifest next update: Mon 29 Dec 2025 17:03:37 +0000
Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: n3U49FNIoXlfTgmfWtk6JaibQ1jCZLoFnLVP7RHXvfo=)
2: 5E46267A46B111E98B793856C4F9AE02.roa (hash: ggdry6EXThW8/Iqa+JecYkvu6rQ2Ed52IzTRWBsgoGk=)
3: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 9HyQ/57eR9eFUhHAz1W5cHWihQdkbA5M8sMmhzOnJTs=)
4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: DurgFb+PurFTFXAgsr5BKampYmcT3J6RZsXax41Nc8Q=)
5: 6007188446B111E98B793856C4F9AE02.roa (hash: YvD8e8mnmsaHRmkbd47odePbEhpcv8nyM6tzBDa3QPk=)
6: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: VHcKNzyAzmZSWirHh/4WQLbdwtIOXQQo3L1Zg7i7VMM=)
7: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: zKTr6M0/sBtcOGxEMR4AlkDFaYrPenLVP8SUSOOJflg=)
8: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: bMzkx/wFNepXXNSOPh8Vc6hh0XPBuOSFoU3g8UlRrqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 17:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4283 (0x10bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Validity
Not Before: Dec 22 17:03:37 2025 GMT
Not After : Dec 29 17:03:37 2025 GMT
Subject: CN=694979e9-7cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:40:10:cf:d5:5f:48:d1:1a:b1:ff:26:f6:
d2:ca:a4:82:2a:d0:d7:a2:f1:8f:08:5c:ae:1c:a6:
67:f1:df:89:6d:39:ec:7c:06:3e:92:10:f3:38:d4:
5d:f6:a3:60:f6:d4:57:0c:45:3f:ad:74:dd:d7:74:
b1:8a:89:63:96:63:7d:01:6d:f5:7e:6c:49:f2:7f:
d1:c9:5b:b5:10:71:bd:2e:74:5d:42:e4:40:3c:5b:
b2:20:be:67:93:42:f4:ab:11:30:74:f0:26:a9:a8:
a3:f0:0a:24:f2:70:3e:08:38:0b:66:5c:27:1b:da:
91:25:9b:87:66:59:67:e2:5f:86:2c:27:c7:89:98:
fc:fc:51:e3:9e:a0:5d:cc:7a:b7:4b:49:04:a3:c4:
d9:ab:0f:97:17:b5:9f:1b:0d:b8:53:0e:78:b3:45:
e1:00:fc:e1:14:ba:0a:98:d8:6f:18:a5:5c:b3:a2:
a1:17:45:84:d9:ac:27:40:14:07:a6:b3:82:39:06:
04:55:58:8d:06:3c:53:66:cd:6b:d0:ad:9a:74:1f:
87:9a:7b:7d:a4:0d:20:cb:35:84:a2:8c:65:a3:8c:
f4:d3:ab:04:6c:22:2f:97:2c:b3:db:77:74:91:a2:
b1:6c:b5:66:ba:b7:86:42:27:ec:eb:f8:a9:21:f9:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CE:B5:43:DC:41:6F:0C:27:85:F8:C6:32:57:87:11:4C:79:E1:8A
X509v3 Authority Key Identifier:
keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:cb:1c:a5:6d:2d:3c:fa:4f:15:21:3b:bf:ce:13:83:98:ce:
92:3a:72:f6:c2:86:b9:0d:c4:87:2e:85:98:f7:12:3a:fa:ec:
68:5c:24:86:f8:80:4e:06:e6:f0:13:8d:85:1e:d3:f8:c3:54:
7b:ed:84:2c:fc:0d:57:c3:f5:64:0c:9e:da:a4:93:36:96:83:
ee:6b:9e:2c:6e:5f:4e:11:3a:0f:52:8b:9e:88:e1:35:2d:68:
cc:9c:85:be:dd:4b:b0:1b:f9:36:b1:80:59:42:57:75:a4:16:
c5:68:75:05:e5:f6:e6:2d:6c:5f:bf:d5:28:81:ee:40:90:93:
52:7b:53:62:f1:eb:42:ff:9b:41:e6:c9:fc:05:51:73:0a:c5:
84:30:bb:ff:db:22:87:a3:e6:a4:03:40:97:9d:a8:9c:2c:a0:
98:9f:77:7f:78:3c:25:41:10:2b:30:2d:a4:45:63:8d:4d:63:
a3:66:95:5c:ea:7a:69:88:b6:b4:2d:df:86:9c:de:23:27:f5:
08:1c:70:b1:73:4c:95:25:0f:68:8f:2b:df:2e:57:7b:b6:75:
1a:3d:19:fe:34:66:58:96:a9:a6:1d:2c:e4:57:33:8c:d6:b7:
23:e3:f6:e4:88:20:54:5c:39:2e:cc:e0:10:9a:51:7c:af:c4:
25:5c:60:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICELswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG
NzkzRjQ3MDgwHhcNMjUxMjIyMTcwMzM3WhcNMjUxMjI5MTcwMzM3WjAYMRYwFAYD
VQQDDA02OTQ5NzllOS03Y2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDdAEM/VX0jRGrH/JvbSyqSCKtDXovGPCFyuHKZn8d+JbTnsfAY+khDzONRd
9qNg9tRXDEU/rXTd13SxioljlmN9AW31fmxJ8n/RyVu1EHG9LnRdQuRAPFuyIL5n
k0L0qxEwdPAmqaij8Aok8nA+CDgLZlwnG9qRJZuHZlln4l+GLCfHiZj8/FHjnqBd
zHq3S0kEo8TZqw+XF7WfGw24Uw54s0XhAPzhFLoKmNhvGKVcs6KhF0WE2awnQBQH
prOCOQYEVViNBjxTZs1r0K2adB+Hmnt9pA0gyzWEooxlo4z006sEbCIvlyyz23d0
kaKxbLVmureGQifs6/ipIfk8MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrOtUPc
QW8MJ4X4xjJXhxFMeeGKMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2
QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS
Mk5kLTJIek03NjMza19Sd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjyxylbS08+k8VITu/zhODmM6SOnL2woa5DcSHLoWY9xI6+uxoXCSG
+IBOBubwE42FHtP4w1R77YQs/A1Xw/VkDJ7apJM2loPua54sbl9OEToPUoueiOE1
LWjMnIW+3UuwG/k2sYBZQld1pBbFaHUF5fbmLWxfv9Uoge5AkJNSe1Ni8etC/5tB
5sn8BVFzCsWEMLv/2yKHo+akA0CXnaicLKCYn3d/eDwlQRArMC2kRWONTWOjZpVc
6nppiLa0Ld+GnN4jJ/UIHHCxc0yVJQ9ojyvfLld7tnUaPRn+NGZYlqmmHSzkVzOM
1rcj4/bkiCBUXDkuzOAQmlF8r8QlXGCP
-----END CERTIFICATE-----
Generated at Wed Dec 24 03:32:49 2025 by rpki-client