This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
File: vHDzdLcox7cRwkpoJ_dHekKyKk0.mft (raw, json)
Hash identifier: zWR3Xyy7POt+JXg8x8WjN+3h/gbFUSYZlpNiQfT5q4A=
Subject key identifier: 97:0E:82:19:9F:C7:EA:E7:52:CC:40:C4:B6:1C:3B:63:47:33:01:F3
Authority key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D
Certificate issuer: /CN=A9142A75/serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
Manifest number: 90
Signing time: Fri 05 Dec 2025 04:27:06 +0000
Manifest this update: Fri 05 Dec 2025 04:27:05 +0000
Manifest next update: Fri 12 Dec 2025 04:27:05 +0000
Files and hashes: 1: vHDzdLcox7cRwkpoJ_dHekKyKk0.crl (hash: rnVMYVCt8pgUJvL148u1tqGhFkHU8LwmUwrwLiIgvGw=)
2: 3B69BCFAF53A11EF907A433EC4F9AE02.roa (hash: g53LMcn3iRdJAKtGtiImyfZixGirZg93i3IYIo94JAU=)
3: 6BD4BB16F83111EFBA64911FC4F9AE02.roa (hash: XvWuI1YoEga2y2ypcrjG1/r0tc+yszPXr1W996sUaXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl
rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A75, serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
Validity
Not Before: Dec 5 04:27:05 2025 GMT
Not After : Dec 12 04:27:05 2025 GMT
Subject: CN=69325f19-7dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:79:ef:80:d8:e1:eb:1e:9a:c8:1a:77:ea:
cd:f9:9d:5d:86:b1:21:2e:95:33:f3:83:81:a5:01:
e0:14:99:64:71:d3:ea:5f:9c:03:0b:04:1c:ab:a5:
b4:c0:71:e0:1c:34:cf:9b:64:ec:7f:e1:fb:41:cc:
0c:00:70:6a:d4:02:57:ac:51:dd:8a:d1:6b:2a:83:
58:71:51:14:5c:ee:77:14:ad:db:49:8d:07:f4:49:
b2:f5:71:22:c1:8b:17:f3:ff:00:e7:a4:0c:de:bb:
5b:b9:6f:bb:fd:e2:83:23:8e:cd:10:7b:64:5e:77:
2d:a0:f8:8e:64:60:b1:6d:24:fb:24:1b:41:0b:d2:
92:f3:af:fd:94:25:8c:ca:01:75:cf:d0:90:55:ad:
40:a3:9a:91:9e:f6:b9:32:13:b8:2c:5b:99:ad:b3:
35:1c:3d:ae:e7:62:6d:bf:ec:6d:80:5b:4b:88:94:
a6:09:28:65:c0:df:e5:f6:fd:2b:a0:f0:1e:a7:d2:
a2:f3:7c:ba:b3:5c:98:24:12:33:20:a1:d9:de:74:
71:0d:d6:29:91:51:21:3f:c1:cd:3c:4c:f6:a3:01:
49:89:8e:08:41:54:6a:b5:12:7f:58:b0:35:8e:16:
c5:8b:99:f5:03:d3:89:e5:92:34:fb:58:52:0b:08:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0E:82:19:9F:C7:EA:E7:52:CC:40:C4:B6:1C:3B:63:47:33:01:F3
X509v3 Authority Key Identifier:
keyid:BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9e:c5:12:07:cb:af:52:fa:d2:cc:7b:58:12:08:db:da:dc:
2f:7e:9e:ab:88:b5:d9:e5:11:18:58:c0:82:62:d9:39:27:8b:
11:bc:d4:7f:ba:eb:21:d7:ff:ab:5a:49:d6:4f:f5:ca:58:e3:
69:b9:d7:49:94:ab:fd:12:c1:a4:eb:15:57:b7:1f:0b:f5:2e:
db:cc:6e:a0:20:fc:95:19:e4:60:44:57:99:20:fc:3e:59:69:
5a:7a:65:cd:11:06:68:96:31:05:66:f0:ba:c4:36:dc:ef:b8:
b5:bf:16:3c:57:b3:3b:49:17:46:16:ba:b3:2d:03:35:f7:a6:
75:eb:4e:5f:c5:a5:23:80:9a:7b:e8:03:c6:7c:b2:49:ab:9e:
ab:0e:00:7f:bc:1e:9a:85:f9:d8:5f:e3:52:53:c4:55:ac:e9:
11:d1:b7:39:03:05:91:cf:ce:3d:76:19:2c:44:1c:a9:41:b0:
2f:49:cd:d3:9b:1d:fa:40:6c:a7:75:31:4b:a5:b6:d5:d5:93:
48:e4:6e:21:5f:35:6f:32:52:3c:a9:7e:44:4b:68:ee:c6:76:
58:d8:36:20:87:e8:18:46:86:2b:5f:5f:02:db:9f:ad:d6:4e:
f2:42:d9:40:4b:f8:ce:bb:c4:bf:5b:13:93:eb:5f:96:14:a6:
21:0c:40:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJBNzUxMTAvBgNVBAUTKEJDNzBGMzc0QjcyOEM3QjcxMUMyNEE2ODI3Rjc0NzdB
NDJCMjJBNEQwHhcNMjUxMjA1MDQyNzA1WhcNMjUxMjEyMDQyNzA1WjAYMRYwFAYD
VQQDEw02OTMyNWYxOS03ZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwqZ574DY4esemsgad+rN+Z1dhrEhLpUz84OBpQHgFJlkcdPqX5wDCwQcq6W0
wHHgHDTPm2Tsf+H7QcwMAHBq1AJXrFHditFrKoNYcVEUXO53FK3bSY0H9Emy9XEi
wYsX8/8A56QM3rtbuW+7/eKDI47NEHtkXnctoPiOZGCxbST7JBtBC9KS86/9lCWM
ygF1z9CQVa1Ao5qRnva5MhO4LFuZrbM1HD2u52Jtv+xtgFtLiJSmCShlwN/l9v0r
oPAep9Ki83y6s1yYJBIzIKHZ3nRxDdYpkVEhP8HNPEz2owFJiY4IQVRqtRJ/WLA1
jhbFi5n1A9OJ5ZI0+1hSCwjrfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcOghmf
x+rnUsxAxLYcO2NHMwHzMB8GA1UdIwQYMBaAFLxw83S3KMe3EcJKaCf3R3pCsipN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkE3NS9FRjVDRDZEQUY1
MzkxMUVGQjA5RkM4M0RDNEY5QUUwMi92SER6ZExjb3g3Y1J3a3BvSl9kSGVrS3lL
azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZIRHpkTGNveDdjUndrcG9KX2RIZWtLeUtrMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkE3NS9FRjVDRDZEQUY1MzkxMUVGQjA5RkM4M0RDNEY5QUUwMi92SER6ZExjb3g3
Y1J3a3BvSl9kSGVrS3lLazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfnsUSB8uvUvrSzHtYEgjb2twvfp6riLXZ5REYWMCCYtk5J4sRvNR/
uush1/+rWknWT/XKWONpuddJlKv9EsGk6xVXtx8L9S7bzG6gIPyVGeRgRFeZIPw+
WWlaemXNEQZoljEFZvC6xDbc77i1vxY8V7M7SRdGFrqzLQM196Z1605fxaUjgJp7
6APGfLJJq56rDgB/vB6ahfnYX+NSU8RVrOkR0bc5AwWRz849dhksRBypQbAvSc3T
mx36QGyndTFLpbbV1ZNI5G4hXzVvMlI8qX5ES2juxnZY2DYgh+gYRoYrX18C25+t
1k7yQtlAS/jOu8S/WxOT61+WFKYhDEDf
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:07:00 2025 by rpki-client