This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
File: vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json)
Hash identifier: kkBz3dHVKijcn+cqu+0lTVFWRCSEKeaLHhkguNNBCbY=
Subject key identifier: CB:20:FE:3E:38:C9:C7:2E:1C:3B:B8:C1:68:A2:59:E5:0B:C4:07:20
Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
Certificate issuer: /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Certificate serial: 0256
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
Manifest number: 0252
Signing time: Sun 07 Dec 2025 00:12:32 +0000
Manifest this update: Sun 07 Dec 2025 00:12:31 +0000
Manifest next update: Sun 14 Dec 2025 00:12:31 +0000
Files and hashes: 1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: OrYiKOxT/wJZks3L13BQewfWuGn5I1rPa1bYd5TIQUo=)
2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: L4gwhY7icNtGh4Pw0dLfgymKZ1S0Ut+p6qHkiovinK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194715, serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Validity
Not Before: Dec 7 00:12:31 2025 GMT
Not After : Dec 14 00:12:31 2025 GMT
Subject: CN=6934c670-63c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:48:60:da:06:e4:73:3c:c9:2e:23:09:cc:
7b:70:47:a7:6f:3f:f3:8a:14:bd:17:c7:90:69:9f:
1c:ab:e3:d8:04:29:33:bd:b4:d4:9d:9c:85:31:2f:
76:67:95:d3:56:25:a8:f4:41:c9:87:11:b7:23:21:
e0:ec:5d:8f:39:9d:0f:35:33:5f:4d:47:5c:1d:c4:
ca:58:15:ca:f7:cb:a6:9a:41:d3:82:6c:13:cc:0e:
e7:60:71:dc:fd:f9:19:79:62:97:46:e3:29:47:6b:
9a:d6:bf:17:24:47:fb:48:87:da:93:2f:8c:4b:bc:
9e:cc:33:0d:f8:f8:f7:7d:91:79:b0:fa:95:e5:c7:
f3:12:98:f3:a6:43:45:e3:3e:3c:9d:d9:c1:4d:16:
3f:14:b1:fb:71:68:db:d4:0f:e1:f9:95:f9:c6:ef:
4c:37:0b:a7:43:8f:fd:c1:b7:9d:d3:f4:a7:f3:f4:
e1:88:f4:c5:0f:b6:ca:ba:21:96:90:7d:1a:87:b5:
00:cf:61:2e:be:12:49:35:78:67:30:40:7d:9d:1a:
88:87:21:55:94:ab:b3:0b:5a:aa:e0:8f:90:97:89:
03:c1:a2:3d:6d:4f:57:17:40:87:c4:f2:cf:f1:59:
b9:82:14:8a:b3:c8:52:70:57:10:09:04:b5:60:64:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:FE:3E:38:C9:C7:2E:1C:3B:B8:C1:68:A2:59:E5:0B:C4:07:20
X509v3 Authority Key Identifier:
keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d6:ad:92:28:e3:4d:1d:18:bf:91:83:1a:27:92:d0:14:de:
42:50:86:dd:6c:5c:8b:61:3e:41:29:0e:43:8a:87:59:37:e6:
36:6b:7b:46:32:01:b2:b8:68:34:3f:b7:4f:5e:22:c4:23:73:
47:b6:f4:5a:4b:5e:8b:d1:27:9d:42:6d:27:cd:0f:76:6d:14:
b7:bb:38:13:88:94:0d:18:d8:aa:09:8e:a5:48:40:8a:eb:18:
19:db:80:0c:4b:c4:50:d2:25:3b:58:86:df:18:c2:69:63:23:
0c:f8:36:fc:38:13:f6:2d:3f:5d:bb:d9:4a:8c:27:cd:87:a0:
9e:17:af:30:ab:ef:03:1a:59:20:d5:c4:d3:ac:47:83:0a:cd:
cf:77:92:e5:07:20:56:5e:74:06:64:fd:0d:e6:10:7c:76:5e:
69:ea:da:1f:58:ae:69:99:54:1f:80:11:06:f9:10:a1:64:b6:
9d:4e:de:96:41:af:0c:5d:2f:d3:02:df:f5:93:e6:b6:e1:f3:
7f:b6:d5:ce:aa:f5:e4:25:d0:33:af:1e:a5:5e:00:bf:20:eb:
87:a4:57:2b:ae:a1:fe:03:77:50:84:13:92:1b:1a:bf:bb:f5:
c8:77:55:9e:0a:9d:cb:97:57:de:66:b0:65:e1:e6:da:78:f8:
f1:3b:1f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:34:45 2025 by rpki-client