This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft
File: VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft (raw, json)
Hash identifier: UV3mb7Z9B8xFo0iXRnvQFsdouYkfEKxw5x3A3rg+7AY=
Subject key identifier: 39:B9:D5:C6:02:31:C8:DB:A3:DE:44:7F:4D:C2:D0:EB:48:C0:D6:89
Authority key identifier: 56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0
Certificate issuer: /CN=A912F592/serialNumber=56D52419D56AACDF7D005BA15D9DDB8F142E3AD0
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft
Manifest number: 024D
Signing time: Sun 07 Dec 2025 00:14:48 +0000
Manifest this update: Sun 07 Dec 2025 00:14:47 +0000
Manifest next update: Sun 14 Dec 2025 00:14:47 +0000
Files and hashes: 1: VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl (hash: dn0nlhFKahX9L7LHP19xOiyrmTQ62Pn+ATsayU2ulWM=)
2: 20BFA0B64A4911EDACB7AB0CC4F9AE02.roa (hash: fM0f1U3uv8elOOSoakvi5zas2tW7Yg5J98LgfW+bqBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl
rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:14:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F592, serialNumber=56D52419D56AACDF7D005BA15D9DDB8F142E3AD0
Validity
Not Before: Dec 7 00:14:47 2025 GMT
Not After : Dec 14 00:14:47 2025 GMT
Subject: CN=6934c6f8-bb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:93:85:98:f9:d4:b3:34:4b:6b:14:9f:83:8f:
ab:13:50:d0:51:b6:39:5f:07:67:25:7f:9a:c7:f1:
ee:69:01:6e:b2:94:31:b9:20:6a:a9:37:4e:52:44:
54:1d:35:9e:d1:6e:27:e2:d4:80:b4:92:6d:35:fe:
3b:15:0b:50:74:fa:c2:0f:04:b9:ba:db:ab:0f:d5:
2d:5e:4d:4e:a2:3b:88:cb:7b:36:84:d6:fe:07:c3:
51:de:a0:0d:65:a7:33:c0:ba:f3:7d:8a:57:2c:9a:
f7:d2:03:f9:4c:0b:73:5e:d4:6d:4c:f3:df:c3:68:
ad:e6:68:af:ce:bc:73:a7:64:ee:3d:1c:0b:7e:a3:
20:ea:92:e1:8e:45:cc:f1:89:a9:59:76:67:ed:bc:
3a:b0:45:99:93:6e:cb:c5:21:2c:6f:4a:8d:09:bd:
1b:bb:09:5b:9f:66:33:d2:5a:3f:3d:c5:d8:fc:96:
20:ab:9b:a6:2d:cb:63:ed:cc:fa:ac:81:87:1c:ab:
0b:82:55:d2:44:18:45:65:2c:64:21:0d:30:37:1e:
22:5d:0c:93:de:50:1c:2b:af:8b:f9:86:e5:34:73:
2f:41:23:69:65:70:20:4d:a6:d4:42:d5:b0:b7:94:
d0:39:56:e8:61:4a:0a:dd:cc:83:5b:99:46:00:a5:
8e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B9:D5:C6:02:31:C8:DB:A3:DE:44:7F:4D:C2:D0:EB:48:C0:D6:89
X509v3 Authority Key Identifier:
keyid:56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3e:ca:5b:14:74:6d:59:b0:17:40:f4:3d:68:57:ab:b7:c0:
b0:19:f3:2f:af:ad:0e:93:8f:0d:46:d5:70:b8:c9:85:67:67:
22:5c:57:1e:98:4f:4c:ea:66:39:47:ca:68:25:9c:23:04:db:
b8:e1:8f:e7:a4:ca:11:47:b0:ed:24:bc:bd:61:42:0b:08:39:
63:e5:b1:bb:13:cb:72:0e:b8:17:16:fe:56:09:88:26:1e:ac:
5a:8e:05:42:ac:27:7e:a4:9b:04:c1:f9:f9:4a:e9:bd:21:76:
e5:64:72:6b:93:7a:ed:34:05:95:8b:7b:48:9d:2a:ee:ba:1f:
7c:3b:74:ba:ce:96:1c:0b:a8:e2:2b:93:12:55:20:0c:fe:cd:
ee:a7:52:eb:5b:6a:d1:48:ce:41:40:1f:83:75:25:02:56:a1:
f3:7b:c9:35:0c:9d:af:fb:96:3e:11:08:23:fd:43:9b:d2:a5:
95:b6:ca:b5:65:0c:4f:75:3e:f8:c9:eb:38:57:84:59:9c:f0:
88:e6:e2:22:a1:ce:da:86:09:cc:3a:bf:dc:62:72:d8:c8:ff:
77:7f:16:ce:af:b0:3b:72:18:d6:70:39:b0:f5:e4:03:ae:1f:
57:19:5d:10:a3:37:0d:3f:16:78:43:ad:46:a7:91:b8:30:73:
c1:1c:bd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:19:52 2025 by rpki-client