This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
File: vSMtmLoKMv17e4shg0wFGXb4ZGw.mft (raw, json)
Hash identifier: cZmtBn6JvpNb8UFv678OKawyfIjgnG/pWohe6jRgmfE=
Subject key identifier: 5C:FA:16:1B:CE:09:EF:2C:A1:40:11:1F:9E:4C:A9:8E:A3:8D:CC:36
Authority key identifier: BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C
Certificate issuer: /CN=A91C4D37/serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C
Certificate serial: 0623
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
Manifest number: 061E
Signing time: Thu 04 Dec 2025 21:32:59 +0000
Manifest this update: Thu 04 Dec 2025 21:32:58 +0000
Manifest next update: Thu 11 Dec 2025 21:32:58 +0000
Files and hashes: 1: vSMtmLoKMv17e4shg0wFGXb4ZGw.crl (hash: aMGkTkdWNO43fBM9ldH8TC/lyhbO15OLqiaLMT/ct/E=)
2: 008B17CEC2B611EB80F1B27EC4F9AE02.roa (hash: OtQrF2ELmU+GbG6fbMpToUTy3D5OXRRs3Yb8jPpEVe0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl
rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1571 (0x623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4D37, serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C
Validity
Not Before: Dec 4 21:32:58 2025 GMT
Not After : Dec 11 21:32:58 2025 GMT
Subject: CN=6931fe0a-b4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:62:82:26:c2:a5:ea:96:80:a8:6c:2e:92:
c5:37:35:07:a5:e4:e6:d6:08:fb:eb:55:c5:58:9c:
36:b9:fc:af:65:16:d1:99:ee:aa:40:19:14:04:39:
94:db:93:b4:33:ca:d1:f8:a8:68:56:73:3b:60:99:
99:c8:eb:74:98:ea:6b:ef:48:1e:1b:ff:c3:10:b6:
2a:95:21:e4:b4:30:ce:d5:09:bc:d5:cc:59:b3:4c:
b3:5d:40:1d:49:c5:3c:59:a9:ee:c5:7c:f0:dd:ea:
e0:2d:44:19:fd:b5:75:61:52:0b:5f:37:0a:f8:b0:
f3:3a:fd:51:f5:eb:8f:e7:44:1d:a4:d4:fc:01:21:
d8:d2:41:8d:65:6d:63:c1:c6:d5:9c:00:b9:da:e9:
7c:2f:7e:2f:87:09:42:8a:6e:d6:93:56:3d:66:c5:
0d:09:01:d1:ca:ce:ac:41:94:4c:af:b9:5d:26:b9:
5e:49:25:28:83:cf:5b:81:32:bc:d4:bf:8e:7e:91:
5d:d0:f9:c1:a4:f5:e4:11:fc:23:f1:60:b6:2d:55:
e3:ac:fc:cd:d4:6c:df:5c:6d:34:a8:4c:68:0c:47:
ae:5c:b4:d9:b7:17:2f:5c:fc:1c:bd:fc:66:10:d8:
c2:f5:99:a6:48:0b:00:1e:17:6e:6e:01:68:bc:c3:
a0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FA:16:1B:CE:09:EF:2C:A1:40:11:1F:9E:4C:A9:8E:A3:8D:CC:36
X509v3 Authority Key Identifier:
keyid:BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:84:59:53:6e:6b:12:3a:04:7a:9e:16:ec:cc:b4:01:b4:06:
b2:7e:61:f5:ae:3f:d9:39:1d:68:47:95:4c:e6:cc:3d:7f:bc:
07:db:94:b6:a0:c0:bc:90:7d:a0:9e:5d:1c:17:47:30:ce:c9:
9b:e3:10:78:ed:23:7a:22:60:6d:ab:c0:4d:00:74:af:6a:b7:
42:fa:52:b2:3a:eb:fe:58:3d:f0:f5:e8:fd:e7:de:8d:3d:2c:
66:ea:5d:e2:99:9a:41:0d:d5:ef:02:34:96:83:8a:7e:74:18:
a6:8d:6e:a9:55:7f:2f:38:c8:bf:c8:c3:72:bd:5e:c3:9e:50:
f9:09:c1:84:47:62:25:58:53:be:b2:e7:84:a5:9d:72:6f:21:
e6:c8:23:22:88:13:68:96:60:c1:30:74:ab:9b:71:1a:ae:a2:
e5:a9:af:ce:de:bc:27:d0:98:f0:86:82:ef:2c:d2:33:d2:00:
6f:ef:bc:e8:63:79:3e:4c:a2:aa:df:f2:89:8c:8e:13:f7:50:
2c:2a:26:6f:01:b4:3a:04:09:b2:5c:f5:5d:3d:06:58:05:57:
09:4d:81:70:13:95:bd:d8:16:f3:2e:8c:bb:4f:27:36:93:7d:
e6:f7:60:bf:5d:82:a3:dc:6c:46:26:c7:99:25:ca:7d:09:c5:
c4:1f:1b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:22:39 2025 by rpki-client