This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
File: vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft (raw, json)
Hash identifier: szYOwpcgYBunPi+Ho9U0u1G+qm/HJ+L3YR0e+JkdWBc=
Subject key identifier: C7:46:8E:F3:36:5E:27:00:C9:EB:47:A6:FB:1F:66:1F:44:37:E3:E9
Authority key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
Certificate issuer: /CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
Certificate serial: 0783
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
Manifest number: 0777
Signing time: Thu 18 Dec 2025 21:02:20 +0000
Manifest this update: Thu 18 Dec 2025 21:02:19 +0000
Manifest next update: Thu 25 Dec 2025 21:02:19 +0000
Files and hashes: 1: vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl (hash: JPrUeL/10ZpcAM74XchGCTilsRcRr4P4h7C77QHMsWA=)
2: 7D8845C43DD911EB8DA0EE5FC4F9AE02.roa (hash: yytJ+U7j5/cF7gdiB6l+jChZ/8SOJfQJwmsZpZx4a1U=)
3: 122052A03DD811EBAE99F45CC4F9AE02.roa (hash: v1vAVS7T21I+dPH099aa3Ii+NCB8GXOlmPxCroQEnqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl
rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1923 (0x783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB816, serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
Validity
Not Before: Dec 18 21:02:19 2025 GMT
Not After : Dec 25 21:02:19 2025 GMT
Subject: CN=69446bdb-fa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:21:7f:9e:92:67:a4:c3:ec:9d:75:b7:f6:00:
31:49:17:a3:83:8e:b0:ba:69:c3:5b:6f:4f:67:ea:
31:6b:53:de:01:2a:5e:b5:64:68:a8:b6:64:dd:b9:
84:67:af:27:b5:54:01:5e:30:d6:1f:86:66:da:85:
5e:15:3a:53:27:8b:25:7d:89:c2:5b:f5:ea:27:2f:
40:5a:f2:be:3b:90:4b:23:cf:e9:ca:46:a3:2f:08:
0a:70:7b:6b:0d:e4:73:92:83:e6:02:59:7f:5a:b7:
39:df:84:29:54:dc:c6:d4:5f:f4:28:d0:66:6d:61:
1f:a9:8c:46:83:10:36:f9:65:28:ae:b1:4b:7c:8a:
46:5a:6c:ae:99:0d:28:4f:de:58:b4:18:4a:d6:95:
88:b1:9a:bd:47:0f:d0:ea:9e:2f:24:e3:99:38:f9:
b5:9c:b7:89:7c:72:ad:2d:c1:18:b4:49:10:bd:a4:
0a:cc:ec:76:1c:26:00:d5:0a:77:27:eb:a7:5c:ed:
83:b1:fb:c8:60:cd:1a:07:75:29:3a:96:e8:9b:40:
23:63:7e:1f:63:b9:95:61:a3:6a:ba:ab:bb:5d:f9:
e4:9d:ea:df:61:63:47:17:c9:d6:9f:19:b7:07:44:
31:13:7e:5f:e8:01:c5:0b:36:4b:a6:16:b1:8e:d9:
93:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:46:8E:F3:36:5E:27:00:C9:EB:47:A6:FB:1F:66:1F:44:37:E3:E9
X509v3 Authority Key Identifier:
keyid:BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:72:38:64:9b:dc:ea:0d:d7:a6:36:3a:99:85:4f:bc:f2:c1:
29:0f:67:39:d9:ab:aa:7b:16:b1:3a:30:a4:ca:72:9b:7a:a3:
69:c3:2b:b0:b5:da:85:af:c0:05:aa:58:58:73:f4:36:95:d3:
d9:87:a1:31:b5:6f:c6:62:a5:86:ae:fa:5f:25:dd:5b:c3:d4:
8e:f7:28:ee:bf:77:33:c2:b8:53:14:c5:07:53:ce:bc:9f:30:
ab:19:11:4a:c9:7d:f0:f4:08:a7:9d:ae:3b:90:e2:7e:40:9b:
a2:51:c9:86:6e:38:8a:ac:55:46:60:01:61:94:d3:2c:0a:64:
35:78:3d:4b:99:4b:fd:28:a2:39:71:c1:21:6d:31:70:dd:5a:
00:4d:91:74:7a:9e:59:c9:3d:9a:83:d0:72:3f:88:17:15:2a:
df:ab:1d:4e:c3:4a:e2:46:86:e6:30:80:d7:bc:43:2a:17:4f:
95:c2:50:eb:b8:b2:03:fb:02:eb:1c:84:8a:46:2e:4b:b7:21:
06:35:34:3b:95:0c:ff:0f:f5:66:15:93:4c:73:63:fc:14:f6:
cb:7d:43:dc:b4:11:1e:36:25:90:d1:80:bb:c5:fa:00:5c:16:
a1:3d:7c:0c:fb:19:da:f9:73:8a:64:b2:14:08:f8:72:59:9d:
8c:af:23:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:59 2025 by rpki-client