This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft
File: vxurTPDVSTDgAbctJPMLPtaK4rM.mft (raw, json)
Hash identifier: kAYGJN0mecvem8dORMTQaUmYNwGxxgM2XWMiVSU9b3E=
Subject key identifier: B7:64:44:93:38:50:5C:F3:50:BB:CE:11:B7:1A:ED:EB:44:16:A7:D8
Authority key identifier: BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3
Certificate issuer: /CN=A916F95E/serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3
Certificate serial: 111A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft
Manifest number: 1111
Signing time: Sat 06 Dec 2025 16:46:32 +0000
Manifest this update: Sat 06 Dec 2025 16:46:31 +0000
Manifest next update: Sat 13 Dec 2025 16:46:31 +0000
Files and hashes: 1: vxurTPDVSTDgAbctJPMLPtaK4rM.crl (hash: eYjwooM+L2O1aMOjTQMt8wE4uTNdIGhVpPbdiCLMCIs=)
2: 1BB160C225EB11E9ADD6867FC4F9AE02.roa (hash: 8YN4HjFnFIcDaShQHDoigKa3LLkHGTw5fy+IJogcxeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl
rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4378 (0x111a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916F95E, serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3
Validity
Not Before: Dec 6 16:46:31 2025 GMT
Not After : Dec 13 16:46:31 2025 GMT
Subject: CN=69345de8-2d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:26:31:0d:3a:ce:4c:65:f2:09:8a:8a:58:
64:ae:c8:0c:f6:c5:88:4d:1e:79:27:4d:ae:76:49:
82:68:16:d4:b4:ae:10:32:f9:ff:ce:15:25:29:91:
4f:6d:b5:43:08:a7:c0:40:e6:da:7f:f2:29:88:8d:
32:4e:2f:eb:71:fc:6a:27:48:23:28:d2:f0:b9:0f:
ca:d8:c4:dd:1a:62:c8:ca:e9:82:43:7c:59:96:a8:
bf:6f:f2:b1:8d:6b:08:ce:76:c4:dc:f5:02:aa:40:
b2:44:e6:5e:24:99:1e:12:e8:ca:0d:67:c9:ee:6c:
3c:2a:a6:1a:e0:8e:b8:a1:e5:9b:cd:5a:82:ad:67:
cd:56:54:88:e8:a1:41:63:8d:c2:36:25:95:b3:60:
7e:6a:6c:fe:3e:54:72:f3:71:de:5f:c4:3d:4e:5b:
6a:83:f8:cd:e2:0d:cb:c9:44:35:0e:e4:5c:8b:ea:
42:66:14:21:ee:14:3f:aa:5f:09:09:a5:19:0d:17:
63:11:de:b7:44:ec:b6:4c:eb:88:c4:8f:cd:b2:33:
8a:d0:a8:80:2d:7b:f6:bf:62:23:70:70:5d:74:76:
54:da:75:1f:08:32:4e:ca:36:12:55:c5:79:0d:93:
66:c3:f4:87:13:00:fb:57:3b:71:3c:48:43:fe:ee:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:64:44:93:38:50:5C:F3:50:BB:CE:11:B7:1A:ED:EB:44:16:A7:D8
X509v3 Authority Key Identifier:
keyid:BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:2e:a9:17:b1:3f:34:f7:aa:fc:6b:74:9f:32:46:0e:0d:31:
38:ec:a8:fa:57:7e:24:99:47:0a:8f:49:8b:59:75:dc:c4:d7:
6e:ce:ea:70:3a:72:97:07:9d:84:6b:6a:6a:a3:cf:e1:be:94:
ff:38:bc:2f:f3:68:59:1d:ac:42:9a:42:b2:f1:65:6c:ea:62:
49:4d:5c:16:38:8c:65:35:08:5b:16:d6:c2:a4:f5:08:1b:1c:
b0:5a:3b:f9:79:d6:27:94:98:5b:10:9d:2e:e7:5d:df:e6:c1:
81:e9:6c:dc:88:e6:af:16:1c:3c:d3:e7:e4:a7:23:5a:a8:3f:
46:80:a5:7e:f1:84:c3:bf:09:9d:20:be:90:d9:ec:4c:a8:43:
ea:8c:89:7a:15:23:e1:00:fb:6f:84:4d:33:cb:45:f1:e1:72:
e1:d0:21:9c:a7:d8:76:02:38:13:a3:da:28:ce:ed:48:44:88:
00:05:10:21:b7:8e:69:21:18:2b:52:90:a4:88:dc:61:67:80:
0a:98:67:b8:28:0d:ef:1b:e5:00:c9:50:52:c4:37:39:aa:50:
b4:a4:ee:fe:30:1e:d8:cd:c0:e6:42:fb:54:f7:fa:ad:7f:e8:
99:51:0d:44:69:ed:3f:c9:d6:fe:bf:3b:11:69:49:96:18:1b:
e9:a2:fa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:27:22 2025 by rpki-client