This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft
File: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft (raw, json)
Hash identifier: Lk2c7TSYAHcnCBJzSpaPGe7URxS3nPYEKzlKHfEaQJI=
Subject key identifier: AA:95:A1:EF:D0:67:FA:12:70:AC:2A:7B:99:39:3B:81:0F:32:A6:5E
Authority key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29
Certificate issuer: /CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829
Certificate serial: 065C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft
Manifest number: 0657
Signing time: Thu 04 Dec 2025 21:23:02 +0000
Manifest this update: Thu 04 Dec 2025 21:23:01 +0000
Manifest next update: Thu 11 Dec 2025 21:23:01 +0000
Files and hashes: 1: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl (hash: vDBiHuZ+iJtZ7DNJPyi6W+sjZzK7zb+oIX1qhqB4hVk=)
2: E22BD636AC5011EBA37CCA28C4F9AE02.roa (hash: fdFSt8Mu6WuYnLA2fbE3V7b+qZmpKdHiBdsuXljNq4c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl
rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1628 (0x65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BD7, serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829
Validity
Not Before: Dec 4 21:23:01 2025 GMT
Not After : Dec 11 21:23:01 2025 GMT
Subject: CN=6931fbb6-8396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:25:88:27:d5:90:04:c3:78:39:97:17:d6:14:
04:44:8a:fd:2f:86:d5:03:b1:4b:d8:58:88:2b:48:
8b:f2:99:33:06:12:ac:1a:8a:96:14:02:d3:b3:73:
42:30:c9:d5:ac:f9:8d:8b:90:35:8d:16:0b:5e:2e:
71:e2:fd:30:71:24:63:6e:a3:07:d5:ac:ea:62:10:
bd:44:99:87:60:f0:79:27:f1:4b:eb:aa:88:b8:02:
1f:10:ff:d4:9c:8b:65:81:4e:3d:2d:58:8d:0e:26:
0b:45:f1:73:5b:f9:d1:27:b4:27:19:67:c4:85:a2:
bd:e4:1a:2a:48:99:13:b5:fc:7a:a3:91:d7:d9:1a:
40:44:44:b7:7e:27:1d:e0:d0:ed:98:9a:57:64:ac:
4c:9e:1d:d6:69:d6:18:af:33:13:7d:e8:2d:43:e3:
e4:38:3c:25:ec:d5:36:db:c7:9b:29:b2:b0:81:2d:
7f:0c:9c:fb:ea:f6:05:36:7f:d3:7a:7d:95:7d:f0:
40:de:fb:17:54:0f:69:2a:46:bc:a3:bb:3d:15:80:
ac:8e:7e:5c:71:13:dc:48:a8:9b:07:9b:32:34:c7:
1d:88:e5:16:c1:bc:c2:32:fe:15:55:fb:d6:16:38:
7e:8a:01:9e:74:ff:f3:02:3b:ac:f2:61:8b:cc:8e:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:95:A1:EF:D0:67:FA:12:70:AC:2A:7B:99:39:3B:81:0F:32:A6:5E
X509v3 Authority Key Identifier:
keyid:56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:eb:0e:36:6c:0a:c2:12:6d:dd:35:15:6b:ee:ba:82:bb:6b:
71:11:b8:db:ef:1e:14:24:a3:f1:e1:46:db:28:e0:f9:7b:97:
a1:7d:eb:66:b9:e8:7b:4f:e1:bc:61:b4:e5:69:b8:70:32:7b:
f9:69:be:52:bb:80:98:a0:e6:23:eb:03:51:19:62:ff:de:68:
c8:07:8d:a2:49:89:88:cd:d7:7b:fc:e7:c0:b8:c5:82:6f:af:
a6:05:df:ac:d3:6c:27:83:26:f2:68:2f:a7:d5:a9:29:bb:f4:
ff:12:72:b8:a6:dc:ab:f8:d0:3e:de:df:d7:51:13:a5:d4:78:
62:0a:2d:c5:11:fa:6d:fb:fc:62:9d:d2:cc:bf:59:8d:bd:65:
d9:f6:8d:98:95:6e:11:b8:58:5a:c8:ec:77:3b:84:30:c0:a8:
a0:d6:eb:b8:07:80:5c:0c:0f:b2:96:91:e3:86:f4:44:d9:b7:
0d:24:39:22:cb:3e:97:89:3c:20:fd:1a:35:52:d8:67:33:f6:
9d:7f:9d:ee:c6:e8:68:de:e6:3a:bd:e7:93:14:12:f2:0a:6a:
ab:33:91:bb:0a:b8:f7:bf:50:b6:99:9d:10:a2:61:82:3f:9d:
b9:3c:f5:a8:f5:8b:79:8a:54:23:09:3c:4d:18:b0:48:10:46:
45:60:e3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:05:53 2025 by rpki-client