This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
File: VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json)
Hash identifier: ck7EoHXV4115mVxGaIZh4/WsdwOumIUOEwuPYGchYz4=
Subject key identifier: 01:36:85:0A:10:1E:9F:47:71:27:D0:D6:92:DA:D9:19:A2:9D:20:4D
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 06CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
Manifest number: 05D3
Signing time: Thu 18 Dec 2025 23:10:51 +0000
Manifest this update: Thu 18 Dec 2025 23:10:50 +0000
Manifest next update: Thu 25 Dec 2025 23:10:50 +0000
Files and hashes: 1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: XbRYmMBSmPqvqz62yrsydKEOjOK7JSVUtWB1h7aCl04=)
2: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: 2TfYAVAgEQTTv0ZFyHze1Mxtp39JFJQp/vIAA/v9auQ=)
3: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: C/4N4YGAPMXTvMQ0VDNg++F7ZNkUv6rU6rWqLzDBgzw=)
4: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: +q4ii3kFAs8ACqEZ6BjSckD3NU5EafvQgYfuiybgjtg=)
5: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (hash: RFHWotDjHz9IyTVgQhqPMzU4NUGIMGbK3Tq94su3l+4=)
6: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: AO1r1mv/StKzJWk1m3WYBwdxsvoQjpb8Rj+HgNAs/Oo=)
7: 041C4116C47C11F0A98A0F0AC4F9AE02.roa (hash: DHEoMyBHtdzHtWhhIwch3SQMxsfyWzvpKfIC6T/xUns=)
8: 6A05B7C8D34F11F0879CFC0EC4F9AE02.roa (hash: jiwDe7E+6oQ/NYQS+P3R9/wg4GDqG2E45jgEd+C7XTU=)
9: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: b8V6p0JJ741AoKpmotD0KOEuJJzSr+FlBeL8aS5wkPg=)
10: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: KA9nI7ftvpXVQRaJtdElzzf8IGXCidp2hICVELUi4VE=)
11: 038A3E10C47C11F092370F0AC4F9AE02.roa (hash: R6ZWg78kRuVdQEvjckkV5CrRltvEccJZf3UzS4WTXw0=)
12: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: /KBmH27+liNc7Je6lmfQARcUNzZ4vENS/K//UAYXxEs=)
13: B7342ECA555B11F0B35B1E0DC4F9AE02.roa (hash: vcg/NLyj34IvgV4QdkBg28D1m8cMgf4G3UfcYX+lVX4=)
14: D359E238716B11ED9F349A49C4F9AE02.roa (hash: aucFf1dFg8E6sXkaQ0WchDFiOUdAA+vJ4MxjhxqpTl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1739 (0x6cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Dec 18 23:10:50 2025 GMT
Not After : Dec 25 23:10:50 2025 GMT
Subject: CN=694489fb-adf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:20:33:d7:77:40:69:c2:66:43:0d:8a:10:
5b:2d:63:68:87:72:12:53:73:a6:f5:10:77:ae:71:
5a:fd:71:56:c5:93:0c:4f:d9:66:92:37:6e:07:b1:
e3:da:bb:56:ce:8e:87:e9:b1:48:46:56:84:24:ea:
43:76:fc:1b:56:a5:dc:fc:0c:07:90:4c:0d:6b:84:
d9:1d:3e:06:3b:87:4a:e3:69:f6:36:44:27:8a:9c:
99:9b:5d:1e:d9:bc:30:64:ad:71:0b:0d:50:46:19:
46:5f:ac:ff:88:25:b9:d7:26:94:0a:36:9f:a2:81:
ba:5a:15:7e:9d:e2:1e:dd:7a:4e:f7:2a:08:c4:e6:
0a:56:10:36:5b:af:85:7e:78:62:de:93:12:b5:b5:
b2:c6:01:d2:ef:17:ca:24:d0:04:e1:13:c6:7b:50:
27:0d:8a:3d:21:b0:12:d3:14:85:6d:ac:63:f3:81:
e5:92:ca:36:a0:f7:d8:81:fc:14:e4:62:73:55:e8:
7a:6a:79:50:2d:41:f6:42:2a:db:97:9a:bd:6f:0f:
97:3e:81:82:9e:5e:56:ec:27:5a:85:63:da:d0:43:
5a:b3:b9:35:1f:1c:ea:7c:2c:a0:6e:90:c7:12:21:
49:b7:2e:bf:0e:3a:df:5e:59:c3:89:ff:7e:39:c5:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:36:85:0A:10:1E:9F:47:71:27:D0:D6:92:DA:D9:19:A2:9D:20:4D
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e2:e8:61:0f:24:e7:ee:ba:83:cd:85:f4:08:c5:09:9b:3d:
51:03:3a:9f:df:8c:09:9f:bd:b8:c2:3c:07:6c:14:18:29:6f:
85:3a:8d:54:8d:a2:f0:44:0e:65:34:0b:ae:32:f7:65:2f:c7:
c6:d0:4e:87:ec:bf:0c:51:81:eb:17:04:d0:a2:df:4a:a4:a8:
6e:ce:33:b0:3c:23:d9:2e:a7:62:82:37:cb:72:fe:d8:f5:e9:
9e:96:e7:9f:e7:12:c0:1c:8b:d2:82:46:73:4b:bf:80:b0:3c:
7a:b2:bf:4a:1e:81:f0:11:dd:2e:5d:7e:91:98:ce:8a:03:b5:
68:27:9b:8f:11:30:4b:dd:41:dd:c7:c1:ad:fa:4e:dd:49:91:
cb:0e:9c:77:cb:27:16:2b:b6:5b:ef:ba:66:ce:07:29:97:6a:
4d:d4:71:c2:78:26:dd:4d:fe:18:ec:87:f5:8a:d6:9d:57:0e:
30:be:84:47:bf:1d:7d:a9:c7:ba:63:20:da:71:de:a4:a0:d4:
d5:9d:f6:28:9c:70:09:1f:92:59:5c:2a:dc:c9:51:9f:e6:a7:
bc:cb:64:2a:ed:03:60:46:e1:88:8a:07:02:b1:a5:2a:0d:cc:
68:f7:2b:eb:dd:e7:80:0b:38:0d:eb:0d:42:7c:25:69:ec:0b:
db:7a:4e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:00 2025 by rpki-client