This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
File: VQiKMVvLUJi-72Zaqcvf0yogWCA.mft (raw, json)
Hash identifier: KJkSG7sDdgvrccIu1yMpw2aKGWZZc13miUQ1AEzUyWs=
Subject key identifier: 80:C4:A8:08:AF:A2:8A:BC:7D:5E:1A:21:ED:91:D8:A8:2D:15:D1:FF
Authority key identifier: 55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20
Certificate issuer: /CN=A9119F89/serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
Certificate serial: 0708
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
Manifest number: 06F0
Signing time: Thu 04 Dec 2025 20:54:49 +0000
Manifest this update: Thu 04 Dec 2025 20:54:48 +0000
Manifest next update: Thu 11 Dec 2025 20:54:48 +0000
Files and hashes: 1: VQiKMVvLUJi-72Zaqcvf0yogWCA.crl (hash: kJ2XNEtkJYvOMGb/wDq0CRUQgxg3KjxV+5CZWsS7o0k=)
2: 4AC85EBC8E1511F083A5EB46C4F9AE02.roa (hash: HpSbnGJEafe0Cwqy3fqQEE7tGOKywS9PLDhr9ZIWw18=)
3: A9B5CDC4B97111F089BA4733C4F9AE02.roa (hash: e7NB/rZJ7soW34sGauamE9L/Mh5Ro39SnWUlgmJO+4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl
rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1800 (0x708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119F89, serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
Validity
Not Before: Dec 4 20:54:48 2025 GMT
Not After : Dec 11 20:54:48 2025 GMT
Subject: CN=6931f519-d25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:0b:7a:8b:65:8e:c8:a1:d4:2c:ec:81:2e:
80:da:d2:85:cb:05:77:bb:d8:f6:8b:ec:4e:7e:a3:
cf:33:b1:52:35:0c:4f:d0:25:6a:87:00:00:47:24:
3f:0e:91:25:42:e8:19:27:e0:16:9a:10:ac:7b:ed:
8d:59:92:d1:2d:7f:07:be:f5:81:34:71:a0:fa:e6:
72:be:2d:2b:df:16:75:87:64:d0:07:1e:72:7c:df:
13:f8:c1:4d:7b:ac:fd:1f:60:da:2b:5a:81:78:de:
e3:e9:09:c6:8f:67:9c:5b:0f:32:9a:98:13:b7:70:
d2:b4:05:12:98:b6:cc:1d:cf:38:0e:67:dc:04:fe:
bc:c7:34:19:96:0c:3b:52:52:d8:fa:6a:e5:d7:47:
27:29:8d:5f:ed:8c:47:87:8f:4c:7b:33:05:1f:04:
90:5e:1b:75:4a:61:4b:98:62:30:e1:64:bf:53:c2:
7d:d4:bb:fe:3b:d2:46:f2:83:3e:76:af:22:00:ac:
62:03:ed:e4:2e:eb:f6:04:88:e6:71:c3:57:da:0a:
d6:20:02:d0:d1:71:20:ef:df:08:12:47:cc:8d:19:
4d:43:1d:fc:7d:42:bb:72:44:0d:c1:ba:9c:cb:a0:
e8:78:e9:2a:b9:3b:5c:79:a9:d4:35:e4:a5:03:cc:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C4:A8:08:AF:A2:8A:BC:7D:5E:1A:21:ED:91:D8:A8:2D:15:D1:FF
X509v3 Authority Key Identifier:
keyid:55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:24:da:8f:67:68:3e:fa:29:b4:71:5d:a8:b5:30:48:2c:b9:
fe:72:8e:86:de:b5:68:f6:6f:ac:4e:d0:17:5d:3a:9b:64:75:
20:54:05:db:7e:6f:1b:3e:5e:78:5a:d7:4e:bc:da:60:53:bc:
71:84:2e:c2:4c:7f:38:da:04:74:31:f5:78:8b:d9:b3:ac:04:
61:7b:17:59:30:8e:25:35:7f:71:d4:6a:5e:f3:a1:e5:94:70:
cd:6c:43:92:1d:1e:1d:ee:a5:37:db:6f:8c:7b:d0:5d:a9:fa:
4e:29:30:d9:7d:d0:b7:4d:be:e6:e4:a0:7d:69:35:ab:21:56:
00:19:20:c9:ac:51:52:84:92:de:2d:05:1c:21:13:aa:4c:81:
c4:10:bc:f0:f1:8a:f3:33:ee:c4:d0:7c:cb:1e:4d:7c:ad:f3:
0b:fc:e6:de:6f:13:2a:f4:9a:93:ae:55:4c:9a:66:eb:93:dc:
6d:4b:be:7f:a1:c9:f0:eb:98:ee:92:3c:78:0e:45:43:dd:c8:
9e:63:e7:b3:d7:5e:58:ee:64:5b:d4:4c:af:56:10:9c:f5:cf:
ee:73:95:a7:21:0e:20:6c:60:ef:58:5a:db:42:98:30:e1:10:
53:ad:6e:37:eb:98:45:2b:fe:7d:b3:0b:91:f2:6a:62:5c:30:
63:b8:99:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:27:33 2025 by rpki-client