This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.mft
File: vqFr0-R-5-4ym2_Op88XCaOZc2Y.mft (raw, json)
Hash identifier: uBrUh7C9ZSIw/LCXJAss8oQ38iHHiy7QZZoVcLy861w=
Subject key identifier: D9:F8:87:C0:64:63:86:57:A3:6B:2C:34:4F:E3:B0:39:1E:BE:5A:D9
Authority key identifier: BE:A1:6B:D3:E4:7E:E7:EE:32:9B:6F:CE:A7:CF:17:09:A3:99:73:66
Certificate issuer: /CN=A91BCA5B/serialNumber=BEA16BD3E47EE7EE329B6FCEA7CF1709A3997366
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqFr0-R-5-4ym2_Op88XCaOZc2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.mft
Manifest number: 0D
Signing time: Fri 05 Dec 2025 05:47:39 +0000
Manifest this update: Fri 05 Dec 2025 05:47:38 +0000
Manifest next update: Fri 12 Dec 2025 05:47:38 +0000
Files and hashes: 1: vqFr0-R-5-4ym2_Op88XCaOZc2Y.crl (hash: HhdwXdYIlCtEeU6xHbFQ86MJ/yikwKW1RAtRaS4Q4HE=)
2: 36FD77BEC38511F083512C58C4F9AE02.roa (hash: OM79iMcHZz0+f2u6YD3gfL1nVc1woBeV5/J4QTxN8SY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.crl
rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqFr0-R-5-4ym2_Op88XCaOZc2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCA5B, serialNumber=BEA16BD3E47EE7EE329B6FCEA7CF1709A3997366
Validity
Not Before: Dec 5 05:47:38 2025 GMT
Not After : Dec 12 05:47:38 2025 GMT
Subject: CN=693271fa-cdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6b:4e:a3:f0:67:c0:cd:01:24:d4:7b:9f:d4:
1e:c2:d9:8b:55:ac:70:42:aa:f3:5e:8e:67:69:e8:
ba:5e:0b:07:53:ba:e5:c6:30:1e:29:19:62:c0:97:
a0:ae:a6:6c:83:4d:5e:0f:88:91:f3:c7:fe:a9:1c:
16:bb:81:32:2b:66:34:9b:cf:ef:57:0d:55:69:24:
fb:9e:cd:3f:29:3a:42:8c:ed:01:b5:12:92:02:01:
b9:27:a3:b9:1b:7e:ed:37:f9:91:96:f3:80:dc:7c:
d0:44:4b:0f:86:2a:3b:18:c5:70:6f:72:50:65:e8:
cd:20:7d:08:51:9a:78:5e:87:55:4f:0b:5a:bc:72:
e9:1f:c5:45:15:b8:35:b1:c2:b7:1d:5e:8d:c1:83:
49:05:07:a0:dc:cc:f5:3f:ba:bd:5a:4d:8a:03:9d:
2d:61:f3:82:31:cd:6d:45:27:65:60:4b:b2:fc:d8:
da:e0:23:23:90:fb:00:36:e5:bb:b2:c7:32:f1:a7:
15:32:32:8b:c6:d4:a9:3a:e6:61:e9:ba:b5:03:42:
3c:e4:3b:e6:1b:37:68:b1:48:50:50:b0:6a:e8:81:
e6:fd:33:c4:3b:30:01:dd:30:cb:81:4d:bc:0b:6e:
4c:a4:fc:52:44:6b:e6:66:2e:5a:61:ce:61:74:71:
91:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F8:87:C0:64:63:86:57:A3:6B:2C:34:4F:E3:B0:39:1E:BE:5A:D9
X509v3 Authority Key Identifier:
keyid:BE:A1:6B:D3:E4:7E:E7:EE:32:9B:6F:CE:A7:CF:17:09:A3:99:73:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqFr0-R-5-4ym2_Op88XCaOZc2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:4a:e6:25:24:8b:0f:d2:50:c9:1a:c7:90:c2:5a:e0:4d:3a:
2b:ed:6f:d7:89:89:b1:cd:48:1b:c5:0c:f9:98:2f:b0:b5:5e:
ec:75:1f:0c:33:d1:c3:9b:f7:15:f9:b6:28:7f:c5:2d:31:7e:
c3:cd:f4:07:bb:02:bf:ce:3a:68:5e:0a:9f:21:30:d0:c8:4d:
96:dc:73:97:a7:77:d7:23:16:e9:ae:65:2b:9a:9a:15:a4:fa:
ba:f0:1e:2f:d9:58:95:16:b4:77:c2:5e:1d:9f:c0:02:83:91:
93:0e:9c:1e:05:94:f6:c4:30:b0:df:f5:03:8a:7f:43:1c:bc:
af:b2:71:c7:03:15:d7:17:d8:76:e9:94:88:eb:04:21:93:d0:
77:bc:71:41:ea:30:71:a2:da:65:e7:85:64:12:65:a2:54:72:
93:41:0e:fd:66:69:28:72:69:13:af:c3:e2:ee:15:3f:2c:7c:
9e:ce:aa:49:9b:1e:aa:a1:c6:4d:3d:e7:9a:de:37:17:2a:85:
15:24:c6:a0:ae:37:f7:25:79:59:f0:fc:fb:f4:ef:7b:c9:ef:
dd:35:51:f4:06:8c:86:23:a3:74:dd:eb:3e:68:66:1d:db:10:
d4:a6:97:02:c1:05:f7:29:25:6a:89:9d:ab:54:24:3c:ef:0d:
f5:04:da:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:06:37 2025 by rpki-client