This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
File: VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json)
Hash identifier: OqULH2pH4Utbti3ExlDA3N39I00sg5WmZE3VZwQNETk=
Subject key identifier: E3:63:41:9C:D6:59:6C:63:1C:B2:F4:93:0C:B5:B9:D7:52:25:9A:26
Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81
Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
Certificate serial: 0CFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
Manifest number: 0CE9
Signing time: Sat 24 Jan 2026 17:46:37 +0000
Manifest this update: Sat 24 Jan 2026 17:46:36 +0000
Manifest next update: Sat 31 Jan 2026 17:46:36 +0000
Files and hashes: 1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: 2zbgbdPod6DL2TFESm00IZRO1AYkjnXOncxTtHRqywY=)
2: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: 4YH39eDrIDa7IadaSN/cuxBt6gEtX4YBHrWkQQlMsw4=)
3: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: +KOn7mdx2UIcOidbcffpTudXCnUkrRKRoWxktoOxGu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl
rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3327 (0xcff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
Validity
Not Before: Jan 24 17:46:36 2026 GMT
Not After : Jan 31 17:46:36 2026 GMT
Subject: CN=6975057c-68aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:5a:10:c6:99:0b:32:2f:60:2e:2f:bf:c6:
31:a2:32:7a:65:25:d6:d5:b2:94:aa:34:8b:43:25:
d9:cb:dd:f7:dd:d1:0f:57:a7:35:8a:f7:33:7e:8d:
60:dd:6b:f1:11:d9:59:6f:cb:83:3d:fd:69:a1:46:
64:ce:c9:da:4f:00:b7:29:9d:11:37:3d:7c:13:bc:
18:b4:14:28:ca:eb:c9:bc:e4:88:33:52:f3:32:06:
cc:65:25:26:f9:79:15:70:a0:30:f5:21:3f:73:bc:
5d:57:fd:32:f4:d1:f3:d0:2c:8b:d2:c7:e0:5b:5a:
96:6b:97:94:28:7e:0b:39:1e:e3:1e:06:0f:79:44:
90:76:c7:93:16:1a:9a:88:ef:cb:64:32:ff:91:e5:
41:39:02:dc:67:4c:24:a1:c3:f8:9a:44:8e:fd:4a:
5f:85:1b:71:7d:99:a4:91:57:7d:4c:70:30:bf:ea:
df:5c:d4:b3:e9:b9:c3:25:08:c2:15:44:74:da:fc:
57:93:48:6f:19:80:a8:62:82:80:24:fb:cc:9c:ea:
95:12:75:ab:f8:b6:a1:5f:01:8a:81:0a:85:79:83:
d2:ea:9a:0f:2c:8a:da:61:fd:c3:f0:24:59:ac:e7:
4d:0f:ac:fa:7e:73:3c:38:54:0f:94:ec:f1:43:99:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:63:41:9C:D6:59:6C:63:1C:B2:F4:93:0C:B5:B9:D7:52:25:9A:26
X509v3 Authority Key Identifier:
keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2a:8b:9e:ff:af:8b:f7:2c:6c:ae:2e:52:82:a1:87:27:9c:
17:3c:2f:f8:39:d2:1f:66:19:9e:36:5e:a8:aa:f7:18:8b:d0:
15:1b:2f:81:0c:0b:2c:dc:cb:ce:ec:8d:1d:42:fa:da:6f:b8:
96:ce:74:eb:0f:67:9f:5d:30:ef:d0:6b:da:fe:c3:b2:43:6d:
fd:c6:38:30:01:61:0e:3b:2c:7c:12:47:fa:0a:0d:54:fc:7e:
2c:9e:6b:16:18:d3:48:2b:2a:1a:3b:27:df:a8:04:5c:3c:13:
12:ce:34:f0:55:53:87:1c:63:53:dc:7e:bf:3c:6f:25:ab:fa:
79:60:7c:ee:5f:f0:50:7f:51:cd:ba:74:fd:85:78:da:19:d4:
c1:2d:6a:bc:4b:71:00:9f:3a:5b:05:88:b2:91:7e:6b:d4:bb:
26:db:f6:e9:47:b3:f2:0f:f3:c1:5b:61:a2:61:6e:31:a7:5d:
cd:53:14:59:ec:a2:5d:eb:ac:20:1e:92:be:a8:94:07:33:6d:
bb:ee:bc:69:fd:38:7b:52:fa:b8:1b:bc:90:cd:32:1c:80:dc:
fa:81:fc:e3:70:51:6b:c4:3f:d8:e0:61:db:06:e4:e1:e5:83:
1c:2a:dd:7a:28:30:dc:5a:ec:9d:46:6f:c2:c5:c6:b8:b5:5d:
0b:64:25:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:45:37 2026 by rpki-client