This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FC14/12530BC4947B11F094B09A77C4F9AE02/vKje-2KvdANAdwfH5_V6K8joQAQ.mft
File: vKje-2KvdANAdwfH5_V6K8joQAQ.mft (raw, json)
Hash identifier: 2xf0mNvWNr3o7ZdrvlJt1pvY/Voq5HYOTh/hl8cax78=
Subject key identifier: 56:F3:59:C8:E2:8C:3C:A0:A0:4F:20:C3:6E:70:27:6B:58:73:58:37
Authority key identifier: BC:A8:DE:FB:62:AF:74:03:40:77:07:C7:E7:F5:7A:2B:C8:E8:40:04
Certificate issuer: /CN=A911FC14/serialNumber=BCA8DEFB62AF7403407707C7E7F57A2BC8E84004
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKje-2KvdANAdwfH5_V6K8joQAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FC14/12530BC4947B11F094B09A77C4F9AE02/vKje-2KvdANAdwfH5_V6K8joQAQ.mft
Manifest number: 28
Signing time: Fri 05 Dec 2025 05:30:35 +0000
Manifest this update: Fri 05 Dec 2025 05:30:34 +0000
Manifest next update: Fri 12 Dec 2025 05:30:34 +0000
Files and hashes: 1: vKje-2KvdANAdwfH5_V6K8joQAQ.crl (hash: oZx9VUAQe/DUeCaKAOhJH6E3Af3n68aCLtK2Ejuj5O4=)
2: 9FA4EC40947B11F0A24B7978C4F9AE02.roa (hash: JYmB4W7W6lFlMOSoZJ8ec6FnKgwdp6+4B00V/u5Ps2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FC14/12530BC4947B11F094B09A77C4F9AE02/vKje-2KvdANAdwfH5_V6K8joQAQ.crl
rsync://rpki.apnic.net/member_repository/A911FC14/12530BC4947B11F094B09A77C4F9AE02/vKje-2KvdANAdwfH5_V6K8joQAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKje-2KvdANAdwfH5_V6K8joQAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FC14, serialNumber=BCA8DEFB62AF7403407707C7E7F57A2BC8E84004
Validity
Not Before: Dec 5 05:30:34 2025 GMT
Not After : Dec 12 05:30:34 2025 GMT
Subject: CN=69326dfa-bc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:4c:33:78:08:ff:5b:bf:a4:9a:0a:c5:86:
c2:99:52:29:73:39:08:3e:6b:24:62:bb:24:94:62:
2c:fd:15:cd:58:55:53:3d:8b:d9:b7:cf:50:08:bf:
4a:1f:24:7f:5b:88:f4:5f:fa:67:09:43:3a:31:b9:
99:32:f3:63:d4:d9:c4:d3:b7:47:aa:2a:dc:7f:5b:
dd:0e:6b:6e:d2:73:02:a1:31:22:18:27:e3:e0:48:
ec:9c:db:4c:53:04:a8:12:84:b4:90:6c:00:29:55:
d5:cb:b3:c4:27:97:d4:35:80:4f:97:54:77:71:0b:
93:ee:a5:92:11:05:97:79:70:c0:f8:c8:ff:5b:73:
16:b2:4a:be:57:55:37:85:b1:75:f8:4b:c6:41:b2:
09:ef:91:ad:16:68:c7:dc:07:ba:c8:5c:8a:33:37:
14:77:7c:b4:bf:7a:42:ee:93:23:be:1e:46:9d:b3:
75:61:b8:67:71:fa:85:69:46:73:91:fa:2d:08:99:
f5:41:2f:e6:26:57:5e:48:9e:0f:8a:b1:74:fd:0b:
bc:5b:0a:37:84:72:3c:fd:84:8c:a8:03:1c:24:29:
9d:84:8e:13:e6:ee:85:7d:f6:44:2b:b1:cb:3d:5a:
b6:16:24:84:8c:5a:ea:68:4d:6a:d8:e9:c1:24:02:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F3:59:C8:E2:8C:3C:A0:A0:4F:20:C3:6E:70:27:6B:58:73:58:37
X509v3 Authority Key Identifier:
keyid:BC:A8:DE:FB:62:AF:74:03:40:77:07:C7:E7:F5:7A:2B:C8:E8:40:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FC14/12530BC4947B11F094B09A77C4F9AE02/vKje-2KvdANAdwfH5_V6K8joQAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKje-2KvdANAdwfH5_V6K8joQAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FC14/12530BC4947B11F094B09A77C4F9AE02/vKje-2KvdANAdwfH5_V6K8joQAQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:81:d0:e8:5b:43:fa:4c:31:5a:96:be:46:8e:3c:46:a3:d4:
93:e6:1d:a7:8a:7c:0a:63:07:dc:69:81:e2:d5:db:14:80:36:
0f:49:28:cd:39:c2:3b:eb:6d:ed:61:b6:55:53:89:4c:55:c0:
5f:26:1d:5c:ce:28:d3:d8:12:6a:1d:27:f1:a8:95:c9:8d:63:
f3:b4:22:4f:f7:7e:79:25:f4:98:14:bd:3a:af:29:ab:cc:7f:
fd:eb:74:49:7d:89:70:09:6f:e4:9e:30:9f:fd:e7:80:0b:fa:
99:1a:01:e6:b7:f8:ec:d2:cb:40:a8:95:2c:83:1b:e6:5b:24:
6b:60:06:62:e9:ff:7c:51:ac:48:34:93:60:c9:15:e6:86:35:
22:2c:aa:2f:8b:89:c1:4e:dd:19:2f:05:9f:8d:c4:1c:9c:57:
18:c1:54:7b:10:dc:de:6a:79:06:44:8a:f1:19:22:f5:bd:ff:
2f:a0:fb:84:98:97:c5:0e:5d:3e:80:3b:a6:0c:78:31:2b:8e:
8c:f8:a4:a5:99:e8:a8:2b:37:6e:8b:0a:9f:4d:49:6b:44:1f:
ea:d6:15:e5:dc:54:e6:b9:12:26:fd:66:8d:71:e3:05:ab:29:
2a:18:b8:a4:f1:e4:8c:f9:0e:8f:17:8d:98:b2:d9:da:53:b6:
26:ae:9c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:50 2025 by rpki-client