This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft
File: VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft (raw, json)
Hash identifier: qrIjir7b1lBp9LKpm0pc0Mq9Twy1JNiBFa/M6wuwYyM=
Subject key identifier: 7F:27:2F:B4:70:B8:85:34:B5:47:97:A7:BF:A6:98:37:F4:23:2B:A0
Authority key identifier: 54:B6:DE:06:91:A9:C6:D5:65:CD:18:01:1D:D2:2B:10:9E:02:37:9B
Certificate issuer: /CN=A9116119/serialNumber=54B6DE0691A9C6D565CD18011DD22B109E02379B
Certificate serial: 115C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft
Manifest number: 1153
Signing time: Sat 20 Dec 2025 16:58:37 +0000
Manifest this update: Sat 20 Dec 2025 16:58:36 +0000
Manifest next update: Sat 27 Dec 2025 16:58:36 +0000
Files and hashes: 1: VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl (hash: i6eGW0T3udoKeRhYVhh7q6jngX7wYZqBy62WZF6CnIM=)
2: 991E066C1DB711EB95324E17C4F9AE02.roa (hash: aSeUfkVwR//SK7D+tzKs0QDgJME6lZysD7HNSISzHbo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl
rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 16:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4444 (0x115c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116119, serialNumber=54B6DE0691A9C6D565CD18011DD22B109E02379B
Validity
Not Before: Dec 20 16:58:36 2025 GMT
Not After : Dec 27 16:58:36 2025 GMT
Subject: CN=6946d5bd-2020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:32:c7:8e:9d:67:74:16:1c:d0:77:f3:80:cc:
b6:30:39:03:43:2a:72:67:6d:14:36:d9:b2:93:d9:
c2:6c:a5:e2:5d:1b:65:24:d6:cc:4b:6b:5e:9f:23:
5c:bc:fd:e9:a9:3b:ed:32:7e:77:41:71:1d:3f:4b:
03:21:2e:e5:46:b7:d4:5c:88:f5:f4:8d:0b:3a:6c:
54:ba:f9:25:50:df:a1:65:ce:dc:b6:a6:a0:02:f2:
2d:97:29:56:ba:eb:76:a0:54:e3:99:09:76:df:50:
2f:3c:a3:5e:61:6e:42:1a:fb:09:6a:52:64:44:1b:
25:00:9a:ba:3f:75:8b:44:79:5c:76:ac:a8:65:d3:
00:55:46:4e:fa:ff:d6:b9:25:cf:73:3d:7b:d7:2c:
d7:5c:ce:a9:68:d3:dc:b2:3b:b1:1d:13:ed:09:61:
d2:0d:32:bd:8a:69:fc:e1:47:dd:d2:5a:4b:8e:79:
a7:e3:09:ab:e1:76:6d:41:e7:c2:b5:1c:81:ab:47:
d8:ac:f8:31:3a:90:6f:8d:d8:d4:02:98:b1:32:38:
2d:0f:db:da:13:75:c8:1a:1e:b3:7a:35:90:a6:3b:
c0:ec:60:fd:ba:77:28:3c:d1:54:97:e0:56:6b:9c:
a9:19:a5:3a:4b:a7:36:38:32:63:10:30:fd:06:00:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:27:2F:B4:70:B8:85:34:B5:47:97:A7:BF:A6:98:37:F4:23:2B:A0
X509v3 Authority Key Identifier:
keyid:54:B6:DE:06:91:A9:C6:D5:65:CD:18:01:1D:D2:2B:10:9E:02:37:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:df:77:6e:fd:6d:a1:7e:c6:ba:72:f3:a0:3e:63:05:11:d3:
4b:83:d3:d1:bf:4d:39:9e:e1:db:dd:69:df:fb:c1:12:bc:ce:
f6:3f:93:ca:93:44:ef:e2:0e:e8:90:b2:36:c2:8c:81:02:be:
ce:f5:cd:37:cd:56:b6:67:e4:84:33:f7:36:5b:9c:b5:6a:c5:
aa:0a:81:e0:e0:47:e2:2c:f3:96:54:80:a5:58:88:9a:18:48:
7c:c5:9b:4a:b0:35:ef:75:5d:f5:ed:c3:e4:0c:39:1b:3f:6a:
b5:7f:3a:5e:a1:9d:2a:65:bf:6c:91:9c:2d:9d:43:00:2c:04:
05:39:5d:5e:ee:a8:8c:b4:13:f8:52:5c:91:ed:24:1c:81:f3:
48:c8:5c:9f:4a:cf:37:81:ff:76:61:b5:b2:8c:85:b6:cd:5b:
b3:f8:da:49:b1:fc:2f:6a:c4:15:4d:b6:3c:b1:b7:0f:5b:60:
15:f7:d1:69:65:80:6c:43:07:df:87:86:a1:f9:4f:59:53:d6:
7b:fb:f9:e7:cf:a7:b6:b2:05:f3:76:c5:91:39:b0:00:a2:e5:
42:da:71:6f:a5:72:c1:76:e2:bc:f1:79:bb:00:a5:c1:15:de:
d8:5b:59:0f:b4:49:f9:94:06:3f:48:57:38:cf:91:3d:a0:21:
06:18:c8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:56:12 2025 by rpki-client