This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
File: vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft (raw, json)
Hash identifier: fcJFB235+G4fIsBPPTr5OuTmNJW+qNjSLkDNCbxJNsY=
Subject key identifier: 59:BF:1B:2A:26:A4:44:BD:D0:11:A5:2F:0D:2C:0B:F8:63:97:3F:51
Authority key identifier: BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE
Certificate issuer: /CN=A9151290/serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
Manifest number: 07
Signing time: Sun 25 Jan 2026 07:10:19 +0000
Manifest this update: Sun 25 Jan 2026 07:10:19 +0000
Manifest next update: Sun 01 Feb 2026 07:10:19 +0000
Files and hashes: 1: vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl (hash: blRwUY10PmoLnxqUDdpNWbYwsnFKqrhdiUsIxX0yXu4=)
2: 95303322F20511F0873139314A6F56BC.roa (hash: TqOW0Ji8JWxbWqrkth4X9nlHY7jDf79g81KfNeFf5Hg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl
rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 07:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151290, serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE
Validity
Not Before: Jan 25 07:10:19 2026 GMT
Not After : Feb 1 07:10:19 2026 GMT
Subject: CN=6975c1db-9e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:99:e5:97:37:79:39:67:76:61:b8:a6:e3:
5d:46:1d:eb:fa:90:74:15:bc:62:47:f1:7d:48:80:
d6:d6:fe:3c:16:44:8e:b3:d8:0a:9c:44:38:f3:36:
09:f1:a5:b3:47:63:8d:b4:f2:68:b7:1e:bb:46:b2:
d7:40:49:59:da:1e:13:d8:97:85:76:e4:69:2b:08:
ac:d2:aa:83:7b:da:dc:bd:68:cb:0b:8a:b7:a7:aa:
45:6a:a8:4f:70:04:c9:98:33:e7:b1:c5:b7:df:d4:
72:cd:1d:db:d4:9d:34:05:1a:02:50:d3:ea:88:1d:
4b:f9:5f:47:37:90:0a:25:f1:11:10:e7:c4:d7:8c:
8e:cc:82:1f:cc:1b:0d:4a:31:43:7a:59:be:6b:0f:
b0:f6:5a:89:59:b5:df:ef:c9:70:b2:10:bd:b6:70:
55:51:16:78:7c:91:18:4a:82:cd:52:a5:29:37:a6:
e9:01:88:bb:ad:65:35:43:13:6b:5a:c0:1c:c8:4e:
af:df:db:bc:6c:48:5e:9d:f4:99:11:7b:44:04:b3:
4b:21:da:fe:b4:b7:42:18:17:8a:39:c8:e7:73:25:
14:2a:c0:cb:31:2b:5e:68:16:9a:4f:02:0b:83:bf:
33:5e:a4:ec:64:e0:5f:76:5a:e2:b1:40:da:30:d1:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BF:1B:2A:26:A4:44:BD:D0:11:A5:2F:0D:2C:0B:F8:63:97:3F:51
X509v3 Authority Key Identifier:
keyid:BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:23:85:50:49:f1:0e:c9:a6:f4:7c:1f:48:93:fb:d6:cf:a2:
1b:34:5a:ce:ee:ae:d1:7b:4b:45:3c:ed:1d:cd:c5:a9:77:25:
5a:7f:f2:da:75:96:13:1b:f1:c1:09:f8:3a:c0:7a:a8:9e:a1:
7b:20:72:71:8c:52:de:55:ac:f9:c3:e7:20:01:04:be:37:2e:
8e:55:2c:35:ed:a9:8b:ea:66:21:cb:7b:81:1f:01:f7:ac:71:
1f:b7:0d:7e:3d:03:ce:20:f1:b9:c3:df:35:9b:ec:bd:b5:18:
5a:9c:47:69:ac:51:77:b1:2b:b6:a8:0a:60:64:ff:0e:d2:3a:
44:80:7f:7e:85:54:67:58:4d:a3:83:a8:56:e4:40:1d:1c:71:
d6:ab:e5:1f:71:0f:a6:8f:7b:d6:cb:ff:1b:75:8c:c2:b3:c3:
ae:69:cc:03:93:d5:70:c1:8c:0a:41:0c:44:ac:43:43:24:8f:
c2:92:6f:0b:56:0e:6a:d7:d0:50:6b:c5:db:37:05:bb:d2:41:
22:6c:75:3d:bc:65:fa:1a:bd:a2:66:e0:11:8c:aa:6f:9a:e6:
96:ba:e3:3a:b1:c8:14:00:7c:34:0d:ae:33:7e:3f:64:23:8f:
62:f1:ac:b9:b1:66:b8:a7:23:e5:94:26:3a:44:38:90:7c:2b:
9d:59:04:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:12:48 2026 by rpki-client