This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
File: VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json)
Hash identifier: LCjbMWlxpAlQdzpjMhEJdfEBNfOmPreq4a9TM5fGBgQ=
Subject key identifier: CD:33:1F:74:B3:65:99:81:E0:57:ED:B0:A9:74:50:3C:15:5E:D4:1A
Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
Certificate issuer: /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
Manifest number: 4E
Signing time: Fri 05 Dec 2025 05:09:07 +0000
Manifest this update: Fri 05 Dec 2025 05:09:06 +0000
Manifest next update: Fri 12 Dec 2025 05:09:06 +0000
Files and hashes: 1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: 0yb8l/iTkn4FGbnw9916Sqv/p/HXlJAHrfmvaxOQJYk=)
2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: jNtI6MU0sZHqYp7Kk2MVm6eivoJ/pZtQE9T6LQkZ7uY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:09:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Validity
Not Before: Dec 5 05:09:06 2025 GMT
Not After : Dec 12 05:09:06 2025 GMT
Subject: CN=693268f3-1f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:94:05:70:4d:19:6d:8b:68:4d:62:8e:40:
b0:16:2e:43:6e:5b:1c:79:26:9b:66:18:1a:89:99:
c3:4b:10:5b:db:45:eb:ec:8a:8c:11:db:1c:7a:c8:
d3:58:9f:49:5b:bc:0a:1a:80:1a:d7:c4:7e:59:bb:
d0:f2:96:43:28:dd:25:6d:e4:ec:72:ed:32:6d:b8:
cc:2f:58:c6:c3:16:08:b0:e2:5e:91:67:44:1a:66:
8e:d9:f9:84:bc:dc:91:c7:52:d6:06:34:fb:fc:59:
22:4d:3f:9c:c6:14:01:11:4d:ba:94:2f:84:fd:e7:
7e:04:d7:6e:4e:6b:fd:b3:c1:63:02:e7:9c:1e:59:
ca:0c:b6:18:12:ec:e2:38:e1:87:77:cf:fd:d7:a9:
2e:ea:0a:58:db:a4:3b:c7:81:58:1e:b7:16:e0:4e:
95:a0:5f:49:ea:e1:1c:43:1c:f7:3b:5f:b4:5e:68:
56:6a:5a:31:a6:09:b6:03:9d:5f:ad:9f:a1:b9:c6:
45:01:2b:d3:23:c7:d9:f7:91:2a:ac:4b:70:c4:21:
47:5f:7c:a9:07:bb:1e:91:5a:bb:10:35:9b:88:40:
ee:12:e1:f5:f0:21:d1:3e:3d:b7:d3:8c:60:f6:c0:
b3:64:a3:98:37:c2:d0:e2:2a:f4:8a:53:ed:80:7b:
6f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:33:1F:74:B3:65:99:81:E0:57:ED:B0:A9:74:50:3C:15:5E:D4:1A
X509v3 Authority Key Identifier:
keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:92:d2:b7:2f:8a:44:95:b5:9c:99:5a:64:1e:e0:a6:21:fe:
35:9b:04:15:8c:60:e3:45:04:76:7d:b1:83:dc:ef:19:a6:1e:
2d:a6:82:54:22:e4:78:ec:46:3a:8f:34:c6:29:33:e9:bf:40:
6e:6a:80:ae:c0:9a:e0:79:3c:5d:d9:4e:d1:ac:21:ee:f5:20:
3d:ac:33:87:00:33:e8:13:1b:39:36:68:5b:b1:c0:ca:a0:1d:
44:f4:d6:f5:46:51:d4:db:9e:42:47:74:00:b2:7d:19:ab:38:
ee:5c:72:a6:76:aa:0a:9b:bf:57:27:8e:4d:b6:ba:fc:5b:cb:
f0:a1:d5:ed:79:c8:b5:be:ff:70:10:77:5a:e8:4c:77:b7:b4:
6c:27:26:95:4a:80:fb:91:8c:c0:7a:1e:5a:1a:cc:ca:0a:b4:
f4:76:11:c6:76:96:a4:80:3a:da:61:ae:86:a3:91:a7:dd:55:
38:9b:8e:da:18:44:8a:ab:a3:80:c5:3f:87:2c:52:2f:a0:9e:
a1:2e:3d:d3:e2:c5:cd:8a:01:b7:c2:dd:dc:b5:6b:09:37:be:
89:45:0c:3a:b3:3e:76:02:76:3c:1a:0e:c7:06:3a:16:d8:da:
f1:9f:c8:7e:fa:47:4d:62:c6:18:b1:49:89:11:17:b0:d2:1d:
0c:6f:de:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:55:16 2025 by rpki-client