This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
File: vz-8DaluLlE6qliBLGlLzQe43Xc.mft (raw, json)
Hash identifier: c/QlU1ISX6pCJY2306LdZ7E3NDUhwqaJwbi7GAo6SB8=
Subject key identifier: 0C:86:28:41:D8:BB:CA:E0:BF:B0:B0:8D:3E:1E:35:73:3A:C0:94:B5
Authority key identifier: BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77
Certificate issuer: /CN=A91C7AC5/serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77
Certificate serial: 08FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
Manifest number: 08F1
Signing time: Thu 18 Dec 2025 19:54:31 +0000
Manifest this update: Thu 18 Dec 2025 19:54:31 +0000
Manifest next update: Thu 25 Dec 2025 19:54:31 +0000
Files and hashes: 1: vz-8DaluLlE6qliBLGlLzQe43Xc.crl (hash: 141pSUENfE7xz4WlCdNmoepIqET0pDh4eLy1Cftaf2M=)
2: 5BC42F286E9F11EC90A66E2BC4F9AE02.roa (hash: Q9vZhAG6Yamyb12YqcE4KK4DdQNWSpjDAHBVo8AWp24=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl
rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2302 (0x8fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AC5, serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77
Validity
Not Before: Dec 18 19:54:31 2025 GMT
Not After : Dec 25 19:54:31 2025 GMT
Subject: CN=69445bf7-2fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:e0:c5:44:fb:f3:9f:e3:30:b1:8c:6d:c8:
34:3d:c3:32:27:c1:39:e3:35:29:57:f2:23:b2:9b:
43:97:ee:ec:00:75:c5:bd:b5:39:8d:9f:1c:27:1b:
0f:1e:40:49:5a:3b:a9:cf:24:fb:61:f0:07:93:e5:
d0:be:86:ae:9d:04:e0:14:c4:de:a5:ea:81:68:98:
6d:36:f0:ad:f4:df:26:38:76:03:ae:cb:7e:0e:69:
15:3c:3b:f7:0f:27:34:6b:bb:aa:b6:0d:6e:93:e3:
38:1d:8c:79:45:d0:eb:5e:dd:62:af:58:80:23:b7:
5a:80:db:fd:46:3a:af:6a:b8:7b:16:3d:f8:44:b3:
4e:bd:c9:41:7f:35:44:81:1f:d1:28:bb:14:8c:c4:
0d:dc:f6:f8:b3:24:97:29:be:d8:e0:b2:7f:eb:aa:
7c:a0:6c:4c:d4:6f:8c:06:e7:14:9a:81:7b:d6:27:
90:11:6e:f9:1f:5a:55:8e:ee:c1:54:49:96:1d:cb:
74:28:b7:d5:d3:b2:ab:0b:28:1e:87:a6:57:e5:6a:
20:2f:cb:77:e1:05:82:0d:d7:f7:55:f0:4b:b2:91:
b4:8e:7a:3b:4c:c9:fa:a1:07:9e:cd:de:46:96:df:
79:df:7f:3c:e6:92:65:4b:a4:3e:f2:e4:7a:b2:46:
3e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:86:28:41:D8:BB:CA:E0:BF:B0:B0:8D:3E:1E:35:73:3A:C0:94:B5
X509v3 Authority Key Identifier:
keyid:BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:a7:e4:22:53:55:e2:84:e5:c1:bd:ba:c3:aa:6d:b9:b8:de:
e6:5d:b7:29:b1:52:ad:49:4b:8a:c6:dd:70:56:c2:7e:1a:90:
78:4f:4c:f7:cb:b4:e5:3f:0c:f8:8e:e3:a7:20:09:92:0d:fd:
66:e6:19:d3:c2:f0:cd:a5:86:2b:24:e4:34:5b:91:ad:04:3e:
ac:b1:c4:f0:cb:d6:84:47:b1:eb:44:9b:35:1e:5e:59:32:d0:
ed:8d:81:d4:c8:fc:a6:a7:98:1a:92:55:84:67:0b:76:69:ff:
03:17:b7:68:05:66:a0:71:d3:6f:de:be:55:4a:28:f1:f5:7c:
51:41:0c:df:d6:a2:10:f7:88:87:79:27:dd:63:9b:46:84:8c:
32:a2:10:d7:fc:e8:c0:d6:03:bc:44:38:eb:75:73:f4:d0:1c:
6c:da:b5:a4:6d:9b:de:8f:91:f3:4d:0c:cb:78:8b:b1:46:fd:
b1:4c:86:f3:f9:16:1d:e6:0a:07:dd:92:1a:4b:6e:36:8e:82:
98:7f:f2:90:d1:f6:12:31:93:00:e0:f5:74:15:89:9f:08:3f:
7d:df:ec:d0:87:d6:dc:fa:f4:92:f5:3a:bc:7c:64:ed:b4:98:
f0:41:08:8c:eb:4c:92:b8:85:6c:61:60:66:bf:8a:9a:c7:f0:
70:42:1c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:26 2025 by rpki-client