This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
File: VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft (raw, json)
Hash identifier: 4/7asSMvzbIVTJFZ+eht5raZrrUnAn+w3G+I8xGYdn0=
Subject key identifier: 99:EF:FB:98:88:AF:A9:1E:D0:9A:09:A6:2F:D6:1D:4F:06:14:3E:D9
Authority key identifier: 54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14
Certificate issuer: /CN=A91AEBFF/serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014
Certificate serial: 04CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
Manifest number: 04C5
Signing time: Thu 18 Dec 2025 23:11:48 +0000
Manifest this update: Thu 18 Dec 2025 23:11:48 +0000
Manifest next update: Thu 25 Dec 2025 23:11:48 +0000
Files and hashes: 1: VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl (hash: +z5oC4+iBqgYurIg3YaJtQe+Re75VH9WJonx7zuDvfA=)
2: FEE1AED6C77311EEB751AE2CC4F9AE02.roa (hash: VdZlll8N2yHckG8u+VAt3wnnIi65LnwSgFUO4q8nuCU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl
rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:11:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1228 (0x4cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEBFF, serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014
Validity
Not Before: Dec 18 23:11:48 2025 GMT
Not After : Dec 25 23:11:48 2025 GMT
Subject: CN=69448a34-c843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fa:fb:63:70:34:b5:29:61:3f:71:a6:96:f1:
cf:54:23:57:3c:b4:a7:1f:2b:2b:9a:c7:21:06:80:
3e:76:05:cf:a4:00:77:00:61:33:bb:76:31:50:2f:
18:f7:d5:b7:ab:07:6c:7c:b4:7d:41:f8:51:ab:7c:
d8:d4:b8:85:b3:db:4a:a3:de:e3:66:ec:fb:f5:d5:
3a:c8:16:4b:8f:90:1b:ce:3a:e4:1d:69:77:7a:c0:
6d:de:b9:d9:19:70:97:68:98:10:65:4d:ae:0e:f0:
2d:af:3a:0b:ec:4e:01:5a:18:69:53:64:a7:92:9b:
65:ee:d4:be:2e:ae:72:bb:b9:76:7e:0a:ae:93:52:
bc:40:f1:e0:62:f2:89:3a:7c:d1:0a:5a:6c:b6:0a:
b7:1e:dd:fe:cf:a7:e0:1e:02:5b:d9:7a:a3:34:70:
4c:55:6f:15:05:26:48:3b:0c:fa:f7:2a:d2:07:22:
3c:59:7d:81:9e:52:42:2f:f2:79:f8:e9:98:49:04:
f4:83:00:fa:6c:4d:bc:aa:2c:51:b1:73:b1:8e:30:
aa:17:c8:4f:a9:8b:8f:f7:1a:2d:7d:84:e5:a0:ad:
02:fb:fc:49:6b:67:58:8e:f3:47:c0:0d:d5:da:31:
66:77:cd:f4:e1:3b:48:f4:d4:20:30:66:04:33:e5:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:FB:98:88:AF:A9:1E:D0:9A:09:A6:2F:D6:1D:4F:06:14:3E:D9
X509v3 Authority Key Identifier:
keyid:54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:fd:5e:bf:d2:43:01:6e:49:e8:bd:b0:81:21:28:27:14:cf:
ff:21:02:33:56:82:63:2a:19:0c:78:47:e2:82:c9:b7:ce:b9:
78:2b:df:e7:aa:51:a7:7a:f2:d2:fe:ab:5e:bf:4a:a0:51:83:
36:53:4f:e5:7d:e5:7e:de:71:3a:06:4e:0a:0a:f0:61:1e:38:
a4:da:0d:f5:26:2c:ce:47:a0:ed:3a:22:cb:b6:fc:a4:14:6a:
b4:16:62:45:4f:b8:e8:f4:40:52:4a:d7:93:43:ad:90:3e:2f:
49:85:a1:d7:3d:7d:78:d3:fd:cc:97:7d:f7:96:1e:04:b9:95:
bb:1e:e8:d6:20:89:20:05:16:2f:4e:ec:2e:bd:06:4e:20:d7:
33:ed:eb:fb:43:c9:d3:3d:3b:b9:da:c4:a7:d4:73:3c:1a:ae:
c1:aa:38:d8:31:07:8d:ac:89:99:20:f9:56:d6:b8:76:8a:6c:
7e:00:f5:35:23:8b:f5:94:2e:bb:fa:1e:81:fa:a0:9d:f3:ad:
4d:05:a3:1b:55:17:b9:0f:8f:a6:84:50:03:e8:79:99:86:ee:
46:57:4d:d1:0f:4d:be:93:63:47:cd:1d:98:16:a9:e4:6b:17:
34:dd:e0:f4:75:22:3d:b4:9a:4b:bf:97:67:c3:41:5c:13:24:
da:d4:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:23:20 2025 by rpki-client