This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
File: vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json)
Hash identifier: TCeZWTkyRUXHuFgp9u/DKUaFRlIoTchTRE0arUBRNVo=
Subject key identifier: F9:73:CE:A7:A6:A4:79:B3:C6:A2:0B:A8:30:2F:1D:C8:28:FB:A2:F7
Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5
Certificate issuer: /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
Certificate serial: AF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
Manifest number: AE
Signing time: Fri 05 Dec 2025 04:05:58 +0000
Manifest this update: Fri 05 Dec 2025 04:05:57 +0000
Manifest next update: Fri 12 Dec 2025 04:05:57 +0000
Files and hashes: 1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: +qY0HbN44B0rU3gwcIOUXzPl09Jx2ibOy2BTeRg5UBc=)
2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: u5vjYU67JaqqsoNZI0S6g4tD4PgUnrgAcxaVH+69TsM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl
rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
Validity
Not Before: Dec 5 04:05:57 2025 GMT
Not After : Dec 12 04:05:57 2025 GMT
Subject: CN=69325a25-130d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:0c:ab:62:4d:3c:d0:1d:0b:bb:df:9a:cf:
09:77:92:3f:0f:b9:1e:88:d9:23:b8:f7:60:73:11:
58:2d:dd:7a:90:cc:1e:9d:2a:52:53:70:cf:9f:1c:
38:3b:45:06:1c:21:0d:df:23:56:e7:c8:9c:9d:0a:
94:be:41:8c:15:39:d5:84:f1:5c:18:d0:5d:c7:c3:
46:6b:2c:19:48:05:a1:19:2b:05:df:d6:41:16:70:
8c:7d:5f:08:7f:9c:29:c1:2e:34:68:34:2d:81:fe:
d7:11:0c:4a:f6:50:2a:af:0b:03:11:d0:bd:6a:03:
fb:70:a6:a7:f8:66:0f:c1:81:d2:b8:05:93:4f:16:
91:32:31:bf:62:e3:71:b8:e6:a7:f9:17:6e:74:70:
11:9f:75:71:19:77:88:f8:74:d8:18:da:76:20:bc:
56:2b:c5:0e:da:4a:6c:1d:c2:5c:a8:70:67:31:5a:
c2:02:ee:a6:73:92:56:f7:ee:4d:d6:09:85:84:fb:
11:ac:ab:14:e2:83:60:a3:5d:38:70:77:38:78:b3:
8e:3d:16:6e:3a:0a:23:78:d1:4c:5b:d2:d0:47:21:
f8:bc:78:fb:3e:0d:6d:20:34:1d:e9:09:95:1e:76:
26:f0:55:5b:e2:12:ad:a5:73:62:03:ea:c9:5a:81:
b7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:73:CE:A7:A6:A4:79:B3:C6:A2:0B:A8:30:2F:1D:C8:28:FB:A2:F7
X509v3 Authority Key Identifier:
keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8f:4f:b7:68:2b:be:b1:ad:8d:25:db:17:16:ce:7f:3e:8c:
4e:f5:a5:f8:15:a0:4f:54:76:14:54:4d:0d:3a:f9:eb:3d:4b:
1e:14:f8:a1:df:3b:8e:de:4f:88:b7:c4:fa:7e:0f:6a:5e:39:
a1:20:9e:ff:b2:6a:b1:c8:af:66:bd:f3:79:3d:0c:56:6d:e2:
8f:83:2d:e1:5a:73:54:fe:dc:d2:ae:e2:a9:73:a7:35:eb:76:
74:fc:cc:90:fa:48:b7:90:8d:e1:32:7b:cc:66:47:16:7e:e5:
08:5d:0b:48:62:9c:0c:a8:16:b4:4e:fe:8b:f6:3e:6c:cf:78:
d2:bd:b5:c3:79:90:1c:7a:e3:ca:c9:8b:fd:5e:1c:b7:84:39:
f1:3c:46:8f:eb:47:7f:6f:7e:89:14:fa:96:ef:1b:99:b1:0a:
2b:a8:d4:43:6d:38:a9:aa:f0:e9:82:57:06:fa:66:0a:ac:c3:
3d:cb:43:39:4b:c3:42:e3:c2:cf:69:a6:42:49:44:d9:b3:a1:
5e:b5:21:f8:89:4f:37:3d:93:94:c0:77:3f:f7:e3:82:00:01:
d7:9a:66:52:a5:59:d1:32:12:1e:24:82:13:02:08:45:07:01:
50:96:ff:a7:30:bb:60:c9:d5:6a:a8:03:d8:eb:4d:5c:ac:43:
2b:cd:00:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:56:14 2025 by rpki-client