This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json)
Hash identifier: nZV4JVWQFplWRrDFWaNijnd+8bonsxR+o1M9O3OeJeg=
Subject key identifier: A7:75:BF:BF:FE:ED:E8:D8:00:89:E0:D0:0C:A1:07:EE:1C:81:C1:58
Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Certificate serial: 0FD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
Manifest number: 0FCA
Signing time: Sat 24 Jan 2026 17:11:41 +0000
Manifest this update: Sat 24 Jan 2026 17:11:40 +0000
Manifest next update: Sat 31 Jan 2026 17:11:40 +0000
Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: unweZnj5WEt3yr+nGueZEzus/V2K+ofonssobn6z/bA=)
2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: PC0yewcBGOHCUfaxZkh95BTHNrPHiXnNi3ncb6P6Ep4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4054 (0xfd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Validity
Not Before: Jan 24 17:11:40 2026 GMT
Not After : Jan 31 17:11:40 2026 GMT
Subject: CN=6974fd4d-3ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:e3:a2:52:77:ba:47:fd:69:64:4c:db:7b:
b8:81:c9:89:29:bb:59:a7:d8:67:9c:c4:d5:d9:5a:
69:b4:4e:a4:95:c9:19:4b:8d:14:b7:fd:4b:ea:91:
47:e2:70:40:a8:fa:e2:a0:7a:ce:88:67:bb:75:86:
07:65:a2:61:32:5e:f8:6b:48:f5:4c:dd:1a:f1:99:
a6:96:1b:0b:01:e1:09:01:68:77:51:83:5b:96:62:
9d:80:b2:9c:9b:2e:5e:b1:0e:a1:4b:db:06:10:ed:
b3:97:53:5c:14:8b:ac:75:27:27:e2:ab:e7:b4:78:
5f:eb:64:c0:77:87:e2:6d:b3:a1:7f:28:41:05:31:
0b:1f:94:12:d9:91:f0:bb:e9:64:83:07:fd:61:c9:
b1:03:8b:b8:eb:b9:f8:85:0a:0f:59:c3:b5:2a:ff:
0f:3c:4b:ba:d0:b4:03:ea:ae:c8:d6:8e:c9:c7:b8:
25:a5:60:79:20:3b:15:a4:d7:00:f9:7d:f5:c8:96:
ba:0c:28:48:7d:46:5d:a1:1c:55:ff:e4:04:13:17:
ac:00:83:51:2f:38:a8:50:59:fd:f6:df:8d:5d:40:
4a:78:d2:63:5c:12:e4:be:45:02:e5:22:13:8a:72:
ee:7b:f0:b5:fc:57:bb:d9:27:30:ef:6c:3e:ff:3b:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:75:BF:BF:FE:ED:E8:D8:00:89:E0:D0:0C:A1:07:EE:1C:81:C1:58
X509v3 Authority Key Identifier:
keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:d4:e0:24:28:db:3b:4d:9f:f4:ad:df:b9:98:4f:bf:9e:c8:
03:b8:ed:6e:3d:8f:aa:cb:9c:3a:bd:18:f5:fa:fa:bf:72:d3:
c0:8b:e0:8e:ba:24:f4:c1:38:b5:59:6d:70:d6:ed:9c:92:79:
7e:73:a4:be:bf:16:83:d0:82:55:5e:d2:54:47:87:a8:1b:98:
a9:9a:8a:53:d0:ef:8b:a9:7b:4b:6c:a0:d2:03:f4:8b:a2:3e:
91:0f:ae:28:db:ff:5b:01:20:df:5d:5e:98:f4:e5:11:95:57:
25:53:45:3f:e9:ac:7d:7e:56:3d:22:e2:21:de:7f:93:b5:4b:
35:d7:3c:40:45:28:a1:42:83:97:26:2c:11:e1:11:3c:bf:3e:
db:d2:a5:a7:93:29:e5:80:b8:3f:0b:5a:3c:34:87:4f:74:ef:
ea:40:66:84:e2:13:e2:68:50:0e:d4:9b:c2:29:8f:a8:c3:c6:
08:37:3e:a7:c8:f5:fe:10:e0:f6:4c:39:3e:6a:a8:55:bf:9b:
e9:87:56:21:c5:e2:c0:db:93:7e:05:38:ed:d5:32:cb:26:72:
a0:a6:7a:72:8a:ed:21:4d:93:e5:0b:d3:b3:3e:b7:0c:b6:3b:
22:27:14:66:da:69:fb:fa:24:21:38:9c:f3:10:f9:7e:55:66:
19:58:b6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:48:02 2026 by rpki-client