This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
File: vXVo3ESTcv4iwuyet3K31ugtKoA.mft (raw, json)
Hash identifier: 55/sx+xdSZOjQcmz4OsTbQk7sQaARKe4LqpR346lZqY=
Subject key identifier: 5C:F9:56:BE:17:BF:25:47:E5:E0:4D:40:E1:88:82:12:75:2E:4F:CD
Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80
Certificate issuer: /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80
Certificate serial: 0884
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
Manifest number: 087A
Signing time: Thu 04 Dec 2025 19:43:11 +0000
Manifest this update: Thu 04 Dec 2025 19:43:10 +0000
Manifest next update: Thu 11 Dec 2025 19:43:10 +0000
Files and hashes: 1: vXVo3ESTcv4iwuyet3K31ugtKoA.crl (hash: kLwc32+msWxBsr115ipUXnQFvxzMhEurHc5L2MO9wGA=)
2: 160ADCACE34A11EFA6960F0CC4F9AE02.roa (hash: SXpG+rP8KDZ7mlez3vzJppnJKS0AYTjR+XpM0wzK6oU=)
3: 153BEF1EE34A11EFA6960F0CC4F9AE02.roa (hash: kkpip1TEWWFNH1mROSk1fuufLAg/gIfzk1gjTV7g7jw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl
rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:43:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180 (0x884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80
Validity
Not Before: Dec 4 19:43:10 2025 GMT
Not After : Dec 11 19:43:10 2025 GMT
Subject: CN=6931e44e-83ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:63:a9:87:9a:e6:09:3e:c0:7d:be:d2:37:dd:
18:5f:06:81:1c:52:75:a8:94:78:c8:57:25:fa:b7:
f1:e4:bd:49:38:6a:c6:f7:fb:04:18:8e:b2:c9:ee:
18:63:bd:76:93:a4:7b:bc:58:47:bf:95:db:db:47:
f8:10:d9:0c:77:b5:9f:f3:8a:41:2a:af:e2:68:80:
13:de:16:70:8b:de:23:3e:ad:8a:9a:86:e2:12:28:
dc:44:f3:40:c5:f4:e6:9c:0b:c6:d3:50:a2:e1:c6:
9c:9b:34:b6:3a:78:21:4f:dd:3d:24:27:e8:01:40:
1a:0f:83:71:4b:a0:73:43:10:e1:b1:f2:06:d7:65:
2d:02:16:67:d8:ea:72:58:09:2a:b4:cf:6f:ca:e4:
6d:51:94:21:43:3f:3e:cc:a1:81:54:f7:94:f1:7c:
90:68:99:fa:32:e8:d5:ab:fb:bb:d4:d6:92:0b:a1:
b7:45:1a:3a:f8:63:83:7f:28:12:a4:b6:a0:b2:16:
9e:59:e2:34:59:7c:93:d6:d9:e3:80:18:fd:26:bc:
99:78:61:25:a0:4f:5f:fd:fd:8a:b7:e8:b8:11:dc:
64:b5:1a:48:66:51:56:96:27:34:8a:6f:c5:00:65:
cf:62:e1:08:7f:5b:4c:5f:09:ec:72:64:16:43:56:
4f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F9:56:BE:17:BF:25:47:E5:E0:4D:40:E1:88:82:12:75:2E:4F:CD
X509v3 Authority Key Identifier:
keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:7c:74:2f:6c:56:2a:a9:93:21:35:c2:46:04:34:49:5c:c0:
1e:f2:e4:5b:e1:1c:c1:d0:b6:02:19:2c:2b:eb:13:56:5d:ed:
9b:84:a2:99:6c:82:ff:ba:6d:0a:10:ec:54:34:51:1b:07:89:
59:20:34:81:bf:34:dd:fc:74:e8:51:3a:38:73:47:e8:6c:bf:
fd:6b:00:de:2a:62:a5:31:42:dc:a8:cd:20:fc:d8:2f:ed:98:
46:11:77:5f:a7:3a:c6:55:f3:04:b9:f9:54:68:ae:bd:1e:5e:
cd:d4:6a:eb:de:ab:be:50:c5:93:b4:90:8c:4e:eb:42:26:0d:
86:8e:f9:fa:01:b8:fe:f5:62:d5:43:48:0d:e7:b2:8e:98:3e:
2a:02:48:e4:b3:f3:24:11:2f:24:fc:38:b9:d1:84:a6:63:3e:
5a:8d:ea:08:0d:27:33:00:5e:ef:34:55:46:c6:3e:1d:1e:0c:
5b:4a:61:ee:ff:f1:17:f1:7c:cf:0f:68:e4:b6:cf:65:04:18:
cf:8f:47:7b:c1:1d:b2:25:28:eb:5f:80:1b:db:e3:f6:53:ff:
62:3c:ba:0d:d2:08:e5:02:ff:44:47:c5:43:71:a1:b3:6d:96:
10:2b:1b:77:ff:e2:b1:bc:ee:e0:c9:66:bb:23:ad:0c:2e:f2:
7a:63:1c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:12 2025 by rpki-client