This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json)
Hash identifier: GyP2D77Tq872x8DizksOZVOGHgKsF0phAYafeUiHkEI=
Subject key identifier: A5:49:3D:DD:41:47:C3:08:8F:EA:F3:F2:FE:30:9D:56:57:70:C2:61
Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Certificate serial: 0FBD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
Manifest number: 0FB1
Signing time: Sat 06 Dec 2025 16:59:36 +0000
Manifest this update: Sat 06 Dec 2025 16:59:36 +0000
Manifest next update: Sat 13 Dec 2025 16:59:36 +0000
Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: h6dyvFqYTGIHQO+LiQegI7lVNBCMmavLoPJTyizcXyQ=)
2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: PC0yewcBGOHCUfaxZkh95BTHNrPHiXnNi3ncb6P6Ep4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:59:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4029 (0xfbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Validity
Not Before: Dec 6 16:59:36 2025 GMT
Not After : Dec 13 16:59:36 2025 GMT
Subject: CN=693460f8-5ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:01:ec:dd:b2:01:e1:2a:9f:bc:fd:f8:0c:
eb:28:42:09:34:f3:e3:86:8d:bf:b2:e6:2a:be:bb:
36:20:37:c7:07:18:29:cc:ff:c9:3e:f0:a8:71:fb:
7a:c1:e4:74:d3:ba:c3:d5:76:07:7f:aa:84:cd:f8:
7a:24:5b:2f:31:17:6f:45:74:5a:bf:a1:60:a9:4d:
0b:55:b6:22:14:0b:e7:ee:30:29:f8:93:c1:ea:22:
2c:b3:ea:b8:81:f3:c2:fe:be:ba:b1:d0:d7:21:38:
b2:56:f2:2a:7b:cf:8f:00:fd:b7:71:52:67:3f:0c:
cd:06:4c:bf:fc:7d:98:7b:53:7e:8c:ef:36:18:3e:
23:e7:3d:67:3e:cc:13:11:82:5c:92:79:d2:c3:be:
c2:7d:08:bf:ac:e9:b6:e8:ad:71:9d:57:60:2d:1d:
a6:9d:2a:da:6b:dd:b7:b8:a7:cb:62:79:f4:8c:b2:
5b:02:c7:b3:1f:fb:19:33:ea:84:55:58:c0:94:39:
47:c4:13:ff:19:f7:39:d4:9e:c5:58:e7:70:11:8e:
9d:61:c1:3c:be:2a:e4:5b:ff:ae:5f:03:d1:7d:9b:
e9:1c:0f:26:56:f0:50:cf:b3:2b:29:0e:85:27:25:
50:bb:54:56:58:45:8b:48:c1:43:ce:db:7d:6c:e0:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:49:3D:DD:41:47:C3:08:8F:EA:F3:F2:FE:30:9D:56:57:70:C2:61
X509v3 Authority Key Identifier:
keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cd:d4:59:a2:80:b9:1f:83:8b:14:8b:c8:60:b1:94:18:21:
c4:b3:d4:6b:10:05:1d:95:e3:ef:74:8e:a5:53:9c:f3:d6:a8:
9f:dc:28:20:33:38:9f:87:26:bc:ca:20:f4:bd:b4:60:7e:a4:
be:e3:8d:2a:bf:e4:d4:91:94:a4:a5:65:df:a3:f8:9a:cd:a1:
81:bb:60:1c:d6:39:f7:2b:a3:83:2d:e7:aa:d4:bb:f4:ec:1e:
c5:30:f6:5d:0c:d7:8e:a0:1d:3e:fe:80:af:96:16:b7:cb:16:
a6:33:f7:2b:d5:85:35:5d:88:1b:5f:a3:70:76:71:99:c8:e8:
8a:59:f5:b0:f5:bd:1b:9f:c7:cc:7a:f4:81:6d:7a:b9:b3:3a:
ae:ad:c5:13:c0:56:51:db:7e:1d:ef:6b:96:05:fa:8d:18:58:
e3:ec:91:fe:62:b2:3f:27:8a:f6:76:5e:26:a8:b9:1c:c4:6b:
1f:12:2c:3b:e9:84:18:eb:b5:9d:18:2e:cc:ae:8f:94:d4:0c:
ed:79:67:4b:8e:9c:41:4c:fd:14:5b:0e:6d:62:88:c7:1b:79:
ea:1a:23:31:9f:77:1e:bf:3b:76:6b:94:20:bb:cf:e8:90:86:
9d:90:56:a3:db:cc:db:24:4b:29:b8:0b:5e:f1:f8:e6:94:73:
ce:56:ec:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:17:19 2025 by rpki-client