This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
File: VvkoxypXKMF6mCUQm7u3IQMTu8o.mft (raw, json)
Hash identifier: aX3w+7I8t+3tYhcAPfE5uGo3WiXh8nHYCd7WRMM/NAA=
Subject key identifier: 76:7F:93:4B:73:49:D7:F7:B5:A7:07:37:BE:F8:E8:64:D3:21:43:A7
Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
Certificate issuer: /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
Manifest number: 0198
Signing time: Fri 05 Dec 2025 01:49:04 +0000
Manifest this update: Fri 05 Dec 2025 01:49:04 +0000
Manifest next update: Fri 12 Dec 2025 01:49:04 +0000
Files and hashes: 1: VvkoxypXKMF6mCUQm7u3IQMTu8o.crl (hash: elG7o+k6sm+bouYAOxTC1A0Iv87iPl8Ou+HVcHmMfvM=)
2: 22C2DBA66E7511EFA80C0F12C4F9AE02.roa (hash: c53/pjhIZaLo3ZYn7NmlwhctciJl6CH40hWP1FAxHnA=)
3: EE44E774314411EF956C0046C4F9AE02.roa (hash: tpBZHVCLnDE9hPXx1rzX1HnhPRZpMRzJTTstJm0BIGI=)
4: 0BB29428314511EF9B1F4B46C4F9AE02.roa (hash: H2sLs/hJoaPZU0Z/0qHdW66zEdj635m4qaU5cpHkB3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91229A5, serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Validity
Not Before: Dec 5 01:49:04 2025 GMT
Not After : Dec 12 01:49:04 2025 GMT
Subject: CN=69323a10-b800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:6e:94:f4:62:9f:73:62:9f:f3:06:84:de:
7e:7a:83:e1:bb:6c:80:62:9c:47:59:1c:fd:ad:29:
2b:f9:d2:bb:14:d0:4d:62:ef:ab:d1:3d:ad:7b:2f:
8c:15:e9:f6:1e:20:21:ed:bc:44:21:5c:aa:ac:af:
06:7d:2a:97:13:d6:49:60:d0:a4:4c:b0:7d:00:1d:
3b:06:59:08:a2:c6:81:72:64:42:b1:10:14:48:8b:
d3:ae:be:88:1f:c6:08:c4:aa:25:29:84:ba:f4:72:
1c:60:ce:78:52:bd:b9:f6:74:25:63:50:cf:d5:62:
b3:0f:bd:91:0b:03:22:4b:e6:78:ea:6d:1b:2d:b0:
b7:95:7f:9c:cc:6a:49:cb:cb:01:07:a3:fa:0e:fa:
27:b1:60:03:6a:3b:4a:bf:d3:c8:f6:59:7e:1f:63:
47:bf:7c:12:e1:f1:d2:1a:2f:b8:0a:27:a5:93:b7:
c1:83:15:1c:6a:f2:78:5d:e9:60:ea:8c:8c:81:ba:
1d:8e:d6:78:c3:7d:ba:74:10:c7:46:5e:d4:d1:3c:
f2:c8:5a:b8:c9:d9:c9:a8:ea:b6:bc:03:d0:aa:82:
32:85:0c:22:cc:32:16:3b:12:f7:4a:61:09:db:2c:
03:55:81:dc:eb:92:78:5b:ed:e1:1e:36:ca:1d:ac:
73:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7F:93:4B:73:49:D7:F7:B5:A7:07:37:BE:F8:E8:64:D3:21:43:A7
X509v3 Authority Key Identifier:
keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:10:fd:d7:b2:51:a6:7a:25:4d:76:cb:08:b3:a3:70:ce:ec:
7c:de:c8:e1:2e:dd:b4:47:fb:9b:09:11:f3:36:3a:7d:1f:65:
25:37:77:b4:4e:57:85:6a:52:8b:6e:c1:5c:a4:0e:d3:c2:f0:
65:29:d7:19:69:05:ac:69:8e:4f:ea:c8:27:55:f0:ea:16:4c:
7d:20:6b:bb:a5:67:5c:a7:48:57:df:da:0a:ae:89:51:e1:ce:
a8:b0:1f:e1:54:d4:20:32:b3:eb:09:e1:4b:96:c9:54:12:44:
cd:d6:99:fc:32:7a:6b:55:f0:3a:04:01:d2:25:d8:bd:4e:71:
b7:b1:f8:3a:12:6a:3a:e5:2e:a1:66:88:61:c4:7b:84:86:7e:
77:bc:c1:98:3f:eb:fa:3a:45:91:c4:d3:fa:9a:04:48:f3:80:
7f:2a:a6:66:8a:dc:96:bd:a5:39:ad:f7:6c:e7:cf:5b:43:c3:
e4:cf:b9:d6:79:4f:7a:9a:0a:59:de:3f:cf:81:aa:66:4a:17:
51:69:75:1b:87:e4:da:bc:6d:b7:7e:d7:7d:a3:de:5c:81:56:
ec:ea:ec:cd:b4:d3:d6:23:96:65:fa:d8:48:6c:e4:ce:97:9c:
0c:f6:17:9f:f6:49:91:39:4f:7e:5c:75:74:e4:77:a8:8d:29:
f7:fb:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:46:22 2025 by rpki-client