This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
File: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft (raw, json)
Hash identifier: QrEEoyIe5Vo33zVxe8c/l+toNo9c6RuSLZD35oOUrYk=
Subject key identifier: 18:FE:E7:89:11:D3:84:6E:3D:D6:C0:3F:FD:89:CC:19:12:B1:66:FF
Authority key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2
Certificate issuer: /CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
Manifest number: 0108
Signing time: Fri 05 Dec 2025 03:05:45 +0000
Manifest this update: Fri 05 Dec 2025 03:05:44 +0000
Manifest next update: Fri 12 Dec 2025 03:05:44 +0000
Files and hashes: 1: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl (hash: AR33yuFP6CqjT2YPRn6OnMSzGsqpDwFFHFb5I1g10cI=)
2: FF7048A08BB111EF8981B871C4F9AE02.roa (hash: 9uEwzB8ckH0lupP2vcJh2pZkJ61ZIv0842o4n0sbwyc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl
rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B503, serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
Validity
Not Before: Dec 5 03:05:44 2025 GMT
Not After : Dec 12 03:05:44 2025 GMT
Subject: CN=69324c08-12c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f0:e1:79:4a:aa:1a:f7:ad:ed:67:c7:2b:72:
da:99:fd:24:e7:11:f3:1e:5c:6c:86:c2:d1:e8:56:
ae:29:d5:69:18:a7:a1:3b:bc:e0:85:8f:6a:91:80:
09:2a:f6:09:a5:f0:b0:f7:2e:67:6f:5b:e0:86:e6:
43:61:5e:71:fb:00:c0:d9:81:94:86:70:df:83:d8:
49:91:d6:7c:a5:63:ea:56:78:b4:98:ce:93:af:21:
d2:1a:c3:7a:72:1c:80:51:96:44:cc:4d:34:9c:4d:
d8:f1:1c:3c:06:fb:12:c1:a9:84:7c:b0:85:e8:1a:
58:24:23:a3:49:29:51:0f:97:64:36:07:c7:e9:27:
19:7b:90:c8:20:8f:33:d6:a8:65:e0:69:01:c4:12:
39:be:20:df:90:fc:5d:8d:54:62:bb:8c:ef:07:6b:
0d:ce:aa:bf:1c:b7:98:6c:79:eb:5b:f9:4a:15:e1:
5c:b4:00:25:74:26:37:c3:6e:91:3b:af:3a:34:8f:
7b:e4:a5:f9:21:ae:2d:05:8a:fd:01:0b:f7:47:ad:
29:a6:8d:7b:2a:72:d3:59:02:28:3c:28:00:59:27:
f7:f2:6e:20:c9:74:69:f4:7c:ec:ba:cb:ff:27:64:
f0:c6:c8:ca:42:e6:d3:09:3f:27:49:1e:12:29:73:
66:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FE:E7:89:11:D3:84:6E:3D:D6:C0:3F:FD:89:CC:19:12:B1:66:FF
X509v3 Authority Key Identifier:
keyid:BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:d6:6f:0d:38:49:1d:b0:6b:40:85:d3:36:e6:99:4a:52:bd:
07:f8:12:29:de:1c:98:2a:18:ea:cc:b5:ff:b1:64:6f:c4:62:
eb:2e:10:5f:d0:b7:75:c7:49:75:6d:6b:8b:9d:12:ca:d0:ed:
b6:ac:95:a8:33:64:fc:9c:0f:c6:bf:6f:b6:ed:e8:20:d6:29:
be:ea:b0:34:dc:dd:87:4a:83:aa:40:b2:ae:37:be:b3:dc:aa:
ca:0d:00:b4:39:a8:e4:ed:f1:f2:10:e1:6e:f3:18:44:24:b1:
95:69:1f:43:ba:2e:87:b4:fb:2d:1f:dc:fd:f4:02:98:fc:93:
c5:51:9e:d6:5c:e8:e5:12:82:4e:c5:6d:5e:25:d9:f0:bf:df:
c6:af:13:51:90:d5:8a:98:e5:12:7b:32:96:aa:6a:f4:44:90:
42:2b:28:c2:8f:98:d5:fd:70:e2:75:1b:72:d4:93:64:0c:ae:
99:93:76:aa:89:3d:ef:b0:60:15:b3:52:97:40:6c:2f:35:67:
5b:ca:fd:19:09:3b:a7:a9:00:76:bb:4c:3c:d8:ad:42:c1:ba:
77:cd:72:0d:b6:98:32:4f:ee:9c:ba:b9:c1:08:e7:d1:c0:9f:
66:fc:d9:4e:be:30:7e:f6:3b:52:ef:b9:65:de:a7:77:1b:39:
1b:1e:96:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:26 2025 by rpki-client