This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
File: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json)
Hash identifier: Y8r2U+0bKYAf+kXbR0q33vzdPmpmshxxs1vYkOp5Acw=
Subject key identifier: 1F:24:C9:E2:87:EC:FA:F8:F6:75:3E:77:77:9B:97:43:E3:3C:51:22
Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC
Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
Certificate serial: 0DF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
Manifest number: 0DE3
Signing time: Thu 04 Dec 2025 17:24:54 +0000
Manifest this update: Thu 04 Dec 2025 17:24:54 +0000
Manifest next update: Thu 11 Dec 2025 17:24:54 +0000
Files and hashes: 1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: T8ELpxCwwmb3YV5zTc4FNtFvidbL3782Zlo3a5CwWQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl
rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 17:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3572 (0xdf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91203DF, serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
Validity
Not Before: Dec 4 17:24:54 2025 GMT
Not After : Dec 11 17:24:54 2025 GMT
Subject: CN=6931c3e6-8546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:a7:53:7c:1b:65:8d:93:51:93:45:bb:b0:
a9:b7:0c:7b:24:49:69:db:30:73:6e:c5:c0:e2:e0:
7b:44:b7:6e:98:15:b5:4f:03:c4:33:ce:3f:7d:05:
17:01:55:1e:47:a2:59:8a:43:6f:e3:fb:a2:3c:8e:
53:7e:d8:19:08:04:36:96:f6:27:c1:5e:95:d0:91:
a1:ad:53:64:5f:1e:2a:3f:a6:b4:b3:fd:59:7a:8d:
6d:cf:9f:52:27:d6:90:30:ac:e0:ff:59:fc:14:42:
71:d4:71:71:15:5d:1f:c4:ae:c2:97:62:5d:12:ec:
14:d8:c6:8a:cf:4e:9e:ed:a3:60:66:de:31:b1:16:
63:35:0b:eb:10:89:c2:78:75:a9:f5:af:86:5f:7d:
d3:b8:b7:df:2a:a2:18:cc:b7:5c:36:ce:0e:9e:ed:
51:1c:25:ab:fd:b1:23:26:dd:73:1b:0c:a4:f7:24:
a2:09:0a:3e:87:89:76:b2:93:df:9e:2e:d6:42:db:
9c:a2:f1:01:17:1c:da:9d:19:29:69:19:18:a2:08:
74:84:1a:0d:af:7b:9b:5a:39:2f:60:26:4e:fd:30:
f1:63:db:85:08:91:ed:0d:f5:23:8c:2d:f9:0b:33:
e9:4e:3b:9e:e4:b5:a2:06:2d:ae:a7:b0:2d:db:69:
38:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:24:C9:E2:87:EC:FA:F8:F6:75:3E:77:77:9B:97:43:E3:3C:51:22
X509v3 Authority Key Identifier:
keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:57:23:8a:bf:36:67:09:e6:66:30:1c:15:f8:c7:e8:4d:5e:
10:e5:82:60:f9:66:c4:fc:cb:04:a2:98:3b:69:c3:08:fb:3c:
27:a3:89:ab:63:f7:2a:94:b6:e2:6c:1c:28:0b:17:27:1a:f2:
11:92:88:ba:38:17:34:9c:9e:ee:47:cb:1b:03:fa:de:8f:9e:
91:ff:44:a7:82:e6:07:78:60:d5:0a:9b:9a:10:1e:40:20:f0:
78:77:8c:26:1a:db:28:17:25:e8:f2:d4:cd:57:81:8b:01:a7:
83:18:9b:1e:15:0c:73:47:5a:f2:c2:f2:d0:86:4e:7c:e0:bd:
fc:11:da:8d:a6:b5:f1:5f:3b:4d:ac:4a:89:de:1e:b9:1c:c8:
2a:ef:c5:92:a7:2d:dc:41:e6:7b:6d:91:04:9c:03:cc:a6:2d:
44:ac:46:26:76:f5:ac:e7:61:4d:47:9b:90:7a:c0:31:0d:31:
97:cd:78:e4:4b:a6:e6:6a:67:d5:dd:0d:c8:02:44:30:12:c4:
97:fa:35:d9:f8:08:80:c2:1c:cf:5f:93:5f:8f:5c:17:8a:33:
8e:3b:29:03:37:2f:50:a4:4b:b8:aa:6c:65:41:42:91:ee:1b:
7b:45:26:38:26:a8:d8:40:de:07:fd:50:08:de:40:46:bf:b7:
eb:05:2c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:25:06 2025 by rpki-client