This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
File: vcSlFjMX9zCX8CejQrhgp5LX8dw.mft (raw, json)
Hash identifier: LWwYzrsI0ZFBwVaafp8te8sWEyS+3OKMPCk0Giz5wm4=
Subject key identifier: 7D:BC:19:88:D6:B4:12:E7:58:D0:55:41:60:EF:1E:43:29:C0:D8:BE
Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC
Certificate issuer: /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
Manifest number: F6
Signing time: Fri 05 Dec 2025 03:20:40 +0000
Manifest this update: Fri 05 Dec 2025 03:20:40 +0000
Manifest next update: Fri 12 Dec 2025 03:20:40 +0000
Files and hashes: 1: vcSlFjMX9zCX8CejQrhgp5LX8dw.crl (hash: n6G1vCgykOt5kmuxAdxDXEMEHCYR6zFxvtRunC5sJv4=)
2: DEF27D12B32111F0B1CD4673C4F9AE02.roa (hash: KSK87NNXC+G0msQF41JpGQoKY5onOaTJMTRkPWJH/M0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl
rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
Validity
Not Before: Dec 5 03:20:40 2025 GMT
Not After : Dec 12 03:20:40 2025 GMT
Subject: CN=69324f88-d991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:10:b5:7e:89:1f:4d:4d:2f:4a:07:d7:3a:
ac:a7:75:1e:2a:da:53:34:b0:21:5f:99:4d:03:59:
c5:60:3e:5f:52:2c:40:c0:97:a9:74:1b:87:b3:ea:
32:1f:d1:d6:53:b5:60:05:5f:c3:3a:8b:c4:ee:19:
b5:70:0f:85:39:15:b1:30:ac:54:98:2a:7d:43:de:
d5:cb:1c:8c:4b:3c:4d:43:24:4b:78:ce:30:64:e9:
06:46:9f:24:1c:95:c9:e4:be:99:94:46:e8:88:00:
de:9f:c1:71:a7:a4:78:08:b2:b6:67:49:1a:cc:11:
7f:37:4d:71:86:5c:46:59:f9:fe:64:ff:4e:f3:ba:
37:e9:6a:2f:92:de:ce:4e:30:29:ad:b9:ee:c2:14:
9e:5c:ef:8e:20:36:a5:12:35:92:44:6b:0b:b7:95:
3c:04:82:bd:1b:a5:35:62:4c:f0:a1:ba:d0:44:39:
a1:5e:dc:b6:a4:2f:47:6e:05:09:9d:3f:61:a0:18:
0a:6f:12:d1:e9:89:31:6b:f7:d0:74:40:a6:55:25:
7d:a5:db:02:f9:b3:b9:a6:fe:50:61:4e:5b:1d:4c:
3a:37:ce:76:50:8f:5c:6a:ae:81:5c:2e:d8:c2:9d:
02:e0:5c:e2:aa:17:87:d3:8b:de:fb:ea:90:7c:51:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:19:88:D6:B4:12:E7:58:D0:55:41:60:EF:1E:43:29:C0:D8:BE
X509v3 Authority Key Identifier:
keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b0:90:cc:42:a6:c6:88:73:2c:71:2f:14:d7:63:c3:ed:37:
0d:fc:d2:84:65:1f:b5:c5:19:a3:83:b4:71:fc:20:8b:0c:13:
4b:4d:99:d8:05:3d:61:51:4e:5c:6c:16:86:63:5f:23:6c:28:
09:3e:4a:a0:7e:4b:5b:db:76:c6:30:17:40:88:1b:57:bc:35:
0e:ef:9c:b4:8a:3a:5b:85:64:65:4c:ab:7c:50:5a:ac:b8:c2:
2b:f3:23:99:b1:eb:7d:2f:1b:73:39:26:ac:50:0b:0d:93:41:
73:32:9c:5f:4f:f5:3b:6f:f8:94:bb:4a:fd:0d:e7:8e:06:47:
95:5c:44:d6:1c:6a:13:f2:d6:4c:84:5c:01:61:bb:19:4f:02:
34:e1:f3:95:49:5a:79:f3:71:1e:7a:b8:59:5f:d5:89:c7:4d:
ea:7f:6b:bb:7a:02:6d:a2:10:5b:05:0b:4b:8c:73:2f:c8:c8:
07:ea:a8:36:ef:1d:3e:57:cf:45:8a:ea:cd:08:c3:24:0c:40:
dc:81:f9:15:6b:a1:38:ee:31:43:c9:48:b1:c7:3e:fb:d8:16:
ca:c9:5d:4c:60:45:37:58:cd:42:65:6c:78:30:ed:16:8b:4f:
bf:63:e7:c3:f9:51:76:a0:12:ef:c4:1a:f9:04:e4:c2:8f:4b:
90:72:51:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:42:36 2025 by rpki-client