This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
File: M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json)
Hash identifier: 936U+AhsKD22Y3huqFMt4Lb+0TKUTaeoFv52O4HxD5E=
Subject key identifier: D6:6C:1D:29:E4:72:3E:2B:DB:D0:C6:04:E7:99:37:AA:BF:1C:22:FE
Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
Certificate issuer: /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
Certificate serial: 017C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
Manifest number: 0179
Signing time: Sun 25 Jan 2026 03:03:48 +0000
Manifest this update: Sun 25 Jan 2026 03:03:48 +0000
Manifest next update: Sun 01 Feb 2026 03:03:48 +0000
Files and hashes: 1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: hyhxSB6ysESR0/3w6pZrTJe5A5aW5q+MSvE36KaEjPo=)
2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: LUJnGhbUriDz5PEXzwqHVqGRqenH5+Jp3evLId0QNQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl
rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
Validity
Not Before: Jan 25 03:03:48 2026 GMT
Not After : Feb 1 03:03:48 2026 GMT
Subject: CN=69758814-4f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:d9:58:f7:a8:d5:ba:74:ec:7b:7b:06:61:
55:99:ff:51:70:12:2c:de:6d:3d:1a:54:eb:1d:d7:
cc:66:bf:2c:bf:a2:43:bf:5a:d3:ae:10:74:44:7c:
f0:95:98:e6:24:ca:0f:b6:d5:ec:c1:9a:fd:f0:b3:
59:c2:f5:02:ea:7e:34:12:9d:12:56:21:67:e0:f3:
24:24:f4:88:f4:04:64:02:54:d1:35:12:e3:d1:f8:
15:f4:e6:dc:62:b9:8a:e5:d0:53:9f:ad:b7:d4:e3:
b1:87:f9:93:87:b6:9b:68:5d:9e:89:b0:21:7f:2b:
c1:f6:5f:9b:c8:ce:d0:5c:24:c7:29:f1:ea:f6:9f:
06:74:4b:7e:4b:f3:53:14:c8:a2:1c:78:62:df:40:
33:a7:68:8e:4d:68:f0:4e:41:42:33:64:38:ab:d2:
51:0c:d4:8c:0d:29:b4:b0:18:4a:8e:f7:33:87:4c:
78:41:13:ef:04:e6:a4:4b:0c:1c:52:22:9a:49:31:
e7:a2:43:3e:82:88:a2:6e:45:69:be:47:bc:ee:f6:
d5:82:5b:d9:89:29:9b:79:1b:e8:0e:24:6c:d4:14:
40:34:73:96:f4:83:4c:21:6c:ed:33:84:9e:e7:26:
d0:e9:1b:3e:63:55:af:10:f8:62:14:3c:b2:6a:a9:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6C:1D:29:E4:72:3E:2B:DB:D0:C6:04:E7:99:37:AA:BF:1C:22:FE
X509v3 Authority Key Identifier:
keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:07:c8:eb:12:2f:94:79:95:ef:25:ba:c6:85:d3:45:d5:2e:
21:75:77:4c:bb:75:c7:e4:64:fe:1a:f2:c2:78:9e:4d:ec:71:
7d:dc:db:a9:d2:10:bb:af:d7:a0:e2:53:30:82:3d:b0:aa:cc:
43:00:ad:0b:d4:bb:3a:fd:cc:42:fd:37:3e:62:21:4b:43:46:
94:8d:5c:97:6c:a9:16:a7:c9:45:bd:8f:6a:7e:04:5f:bf:77:
4e:97:85:e0:27:48:3f:30:db:48:cb:65:a0:b2:10:89:11:84:
d8:7d:fd:7e:63:f9:ec:9b:d0:18:b9:7c:16:9d:78:dc:e3:8f:
63:a0:44:c0:00:f0:ec:6c:b2:c6:eb:cd:7a:7e:ae:f4:a0:db:
9a:f8:3a:1d:d2:b9:1c:4e:4d:e6:1f:25:29:05:06:41:b0:aa:
17:56:9a:9e:73:a3:ec:46:e7:e2:60:b9:9b:19:ba:a1:08:d6:
92:4a:fe:e1:6c:5e:41:c8:c4:7e:f6:23:61:6c:59:cc:7e:6e:
4a:1d:cb:87:6a:52:23:f4:f1:b8:15:94:00:e8:86:d5:27:f3:
69:9a:fc:e8:7f:2d:a5:ae:16:b6:5d:9e:ba:d7:f9:10:2e:7b:
3f:86:80:29:83:b0:5e:e8:12:d6:c0:31:f4:5f:03:f6:a8:3d:
8d:42:9b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:51:57 2026 by rpki-client