This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
File: vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft (raw, json)
Hash identifier: 9sdZsrtmS6LJRZbXhgP3+FjV/VWJ+48xLs9Okgz5aF4=
Subject key identifier: DE:A6:95:08:21:9C:0E:2C:9D:30:EB:B6:37:60:3A:56:1B:B9:1B:68
Authority key identifier: BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8
Certificate issuer: /CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
Certificate serial: 07FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
Manifest number: 07E3
Signing time: Sun 28 Dec 2025 20:35:20 +0000
Manifest this update: Sun 28 Dec 2025 20:35:20 +0000
Manifest next update: Sun 04 Jan 2026 20:35:20 +0000
Files and hashes: 1: vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl (hash: ZA+SnzEbtvfO8cxUu7fj6BfRlbtDTrNbkMjsdZez8wk=)
2: 1714A7D489BD11EC9550C184C4F9AE02.roa (hash: xISFxkTIy1/sW6ONq88vOHfhrQ/CIElHTxq+CkeoHlY=)
3: FEA1EB7219FA11EBA0F82851C4F9AE02.roa (hash: oM34oRYmNdIz+m8JLuKrZRd7kyOsDYalUtCq4U2sv/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl
rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 20:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042 (0x7fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B36DC, serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
Validity
Not Before: Dec 28 20:35:20 2025 GMT
Not After : Jan 4 20:35:20 2026 GMT
Subject: CN=69519488-ebca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:d3:51:60:1d:da:03:5d:b8:72:94:f6:db:
3a:89:3b:39:68:d7:b5:58:34:93:ca:c5:f0:a3:5c:
45:6d:7a:77:0d:ed:20:3d:18:0b:96:53:f9:78:8a:
ce:f7:72:e4:89:d0:08:bb:d1:ad:bc:36:1e:ca:50:
03:25:d3:11:6c:ba:5a:28:14:6c:28:bb:6d:fa:cc:
da:e7:26:08:b5:bc:5d:68:ef:58:e5:25:2b:f2:77:
e0:d9:67:70:57:90:51:3f:a7:da:7c:ac:8d:6a:11:
4c:85:27:75:33:d3:83:2f:b1:23:18:83:ca:8c:e7:
23:be:60:33:7a:30:e0:4e:85:4a:4f:78:b8:1e:64:
32:c0:ab:e1:d2:d3:56:a9:d1:a2:b8:34:e1:76:c9:
cc:4e:3b:43:03:7e:51:5c:62:e9:c9:21:44:95:93:
29:f3:3c:6b:67:32:20:47:08:64:c4:66:c3:13:6d:
ac:5e:24:15:01:24:9d:80:0c:bf:83:38:c3:9f:bc:
14:9f:1b:52:d2:be:7c:91:e2:b0:29:46:ad:a6:a3:
e1:f5:01:1f:99:f0:37:76:46:dc:2e:ad:b2:ae:3a:
b8:60:d0:43:bb:62:75:3e:c0:ca:a9:57:0d:c1:88:
ed:ca:df:e7:48:de:1b:e7:1d:30:2a:a3:3b:29:04:
db:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A6:95:08:21:9C:0E:2C:9D:30:EB:B6:37:60:3A:56:1B:B9:1B:68
X509v3 Authority Key Identifier:
keyid:BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:10:19:cc:ac:9d:09:0b:12:38:90:ca:c6:3f:b0:4c:4e:3b:
d2:c8:10:6f:8f:af:4a:2b:be:56:68:fc:25:1b:15:fc:d1:f9:
6d:63:d9:9e:33:6d:67:b1:6b:7b:95:82:07:20:d2:a4:98:28:
90:fc:3a:25:52:22:e2:3b:2f:c6:26:81:ad:6e:e5:d7:a0:2d:
54:47:e7:1d:73:74:37:e3:f8:cd:83:4e:8e:3a:ab:49:3f:13:
28:ad:86:ef:a9:ad:d8:b9:73:22:21:7e:1d:41:ac:c0:8b:fc:
ff:b0:00:ee:2e:4c:71:4d:5a:ed:76:3d:4a:93:06:a1:ad:59:
1d:5a:43:67:10:0d:5c:45:31:1a:a4:35:fe:b6:47:b8:93:3d:
37:dc:6a:81:98:8b:72:ea:9c:47:9c:83:2d:86:56:0b:fb:9b:
b4:f8:7f:67:de:d8:fb:2a:dc:09:39:b5:3a:71:ef:9f:bb:92:
8f:0e:2c:eb:80:8f:8d:87:03:2f:ec:da:0c:7a:39:73:f3:de:
c1:a5:d3:1f:73:b4:04:8a:67:01:fb:6b:e0:01:18:5e:97:26:
34:1e:b5:e6:29:b2:c8:99:cc:98:f0:0b:c8:97:1e:03:9f:b2:
f2:db:d2:90:f8:6f:99:2a:f9:1e:86:7b:d0:bd:52:a1:7e:a9:
61:70:e7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 06:36:49 2025 by rpki-client