This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
File: VJnONj3wXJSTIjSIKXmbEO_x05I.mft (raw, json)
Hash identifier: doU99v/BURIbEfZT6WHKcVpDvWIbPxHki71en7XupMk=
Subject key identifier: 91:73:48:07:51:43:D7:DC:6C:2E:CC:26:2E:7E:05:41:A9:EA:D0:28
Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
Certificate issuer: /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Certificate serial: 0323
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
Manifest number: 0315
Signing time: Sat 06 Dec 2025 23:43:31 +0000
Manifest this update: Sat 06 Dec 2025 23:43:31 +0000
Manifest next update: Sat 13 Dec 2025 23:43:31 +0000
Files and hashes: 1: VJnONj3wXJSTIjSIKXmbEO_x05I.crl (hash: HvUdz038UstsYil9JxD7r+Wh5lbl74O/oFNC6re0uqA=)
2: 8698FF1E541811F0A468570BC4F9AE02.roa (hash: St1PTiOJ45PYVntF564HXDNo7H27/pRNunZfEvyoMiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl
rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803 (0x323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DB83, serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Validity
Not Before: Dec 6 23:43:31 2025 GMT
Not After : Dec 13 23:43:31 2025 GMT
Subject: CN=6934bfa3-8a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:90:7a:42:c8:84:3f:37:4d:af:79:5f:56:
2f:e2:e3:d3:2f:e4:ba:17:0e:ea:a2:87:f1:f4:24:
0f:6c:e0:f4:96:63:58:73:13:6b:fb:5b:6f:56:9c:
61:d7:20:8c:fc:bf:fb:3b:ba:33:68:b4:66:90:42:
51:d7:b0:da:e0:d5:82:a8:d4:26:3a:4e:75:79:62:
f2:27:b8:3d:71:0d:1b:0f:ed:55:61:8b:ac:dd:50:
a8:8a:4f:ac:51:ce:19:97:a7:55:b0:6c:98:8e:de:
41:f6:26:ae:b6:fb:d3:c8:54:15:06:d1:12:ad:23:
6e:97:fb:be:59:c1:2d:73:67:39:03:d7:af:fc:64:
08:55:05:99:f7:31:3b:6d:de:59:99:7c:61:d8:d1:
97:41:73:48:42:7d:5d:ea:8b:e5:fe:73:d8:ce:36:
62:f4:ed:12:7f:68:09:2a:6d:66:d6:22:b3:15:01:
d2:95:29:25:88:2e:6c:31:07:ab:6b:1a:2c:e8:08:
cd:c4:3a:40:6c:0b:8d:ac:b4:07:36:69:3e:d3:8a:
47:6a:77:b0:e3:56:11:c0:db:2f:ab:97:f4:4f:cb:
d1:63:39:e6:ea:9c:c6:af:47:c0:e7:e7:d8:88:c7:
21:da:77:a1:04:84:49:0d:31:c0:22:6d:16:78:bc:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:73:48:07:51:43:D7:DC:6C:2E:CC:26:2E:7E:05:41:A9:EA:D0:28
X509v3 Authority Key Identifier:
keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:e9:84:b2:42:b2:91:50:fd:0e:ba:0b:0b:3f:08:f5:41:e1:
c6:1d:bd:3a:f5:e9:58:92:53:34:f2:5a:cf:95:f5:d8:7f:32:
9c:57:28:4a:00:20:b3:45:19:92:72:2f:75:11:f0:98:61:72:
bc:fc:17:d2:4e:3d:ec:34:8b:3d:de:86:f2:6a:30:83:da:e5:
29:52:7c:3a:2e:83:70:c1:3c:35:3c:7e:62:69:b2:6d:b2:60:
0a:bf:91:b0:70:c5:28:78:8e:95:18:09:79:14:31:86:6a:85:
72:7a:22:dc:4d:e3:80:5c:ad:ed:3c:c3:fb:7a:18:77:78:63:
d5:b9:94:3c:b3:20:73:23:6e:db:e3:e9:9f:36:3c:91:75:36:
ff:a4:40:66:64:6c:5e:4b:75:6d:36:f8:dc:88:fc:79:57:ab:
2d:27:13:d5:b7:0c:46:a8:41:83:10:02:f3:d3:5e:7d:46:a5:
47:87:31:4e:b7:e3:60:01:87:2e:27:95:da:19:fa:60:3c:0e:
cb:d7:64:45:4c:c0:39:67:f4:f6:6d:19:1b:f5:b7:81:7c:47:
88:52:81:ee:5b:ff:f6:1b:6d:53:4a:bc:bc:2b:27:cb:ad:71:
cd:94:cc:2d:27:20:55:3d:ab:2d:ea:6f:23:01:4e:4c:e2:9d:
a4:f2:bf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:52:07 2025 by rpki-client