This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
File: VGTkn1YOwQ1JdvbilhE7ryKoz18.mft (raw, json)
Hash identifier: 0h4EiEldi3f9h2s/NWdCMN+yvNMNF2I9nqhuc4JS2Fk=
Subject key identifier: AC:DB:0B:F3:D3:0D:5F:2B:66:D3:29:A9:42:17:E4:6F:2C:90:D2:2A
Authority key identifier: 54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F
Certificate issuer: /CN=A91E3F3C/serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F
Certificate serial: 01A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
Manifest number: 019C
Signing time: Fri 05 Dec 2025 01:37:29 +0000
Manifest this update: Fri 05 Dec 2025 01:37:28 +0000
Manifest next update: Fri 12 Dec 2025 01:37:28 +0000
Files and hashes: 1: VGTkn1YOwQ1JdvbilhE7ryKoz18.crl (hash: u/bAtmajoWaHnHQ7FSxvq8sOhIljwmjtZaZjMMdrdXc=)
2: 7148438E5DC211EE954BE21DC4F9AE02.roa (hash: y4oU/tmfDIcfKqPlw3m/SWCw2QZiYO8Vo2XRM+uGFBo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl
rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3F3C, serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F
Validity
Not Before: Dec 5 01:37:28 2025 GMT
Not After : Dec 12 01:37:28 2025 GMT
Subject: CN=69323758-5ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:42:70:4c:6f:ad:8a:3c:ef:a6:91:93:c0:
1a:d7:3f:d7:17:6b:b9:3c:08:2f:6a:16:63:18:dd:
7f:47:ee:5e:22:87:e6:a2:21:be:53:ed:a5:94:d7:
86:93:0e:92:51:9d:04:18:98:4b:01:be:2f:04:a8:
10:b4:0f:30:f8:10:00:c8:8a:f0:a7:5c:c3:f0:5d:
fa:5a:5c:a5:46:4c:de:05:f9:e9:75:35:05:6a:a4:
ca:6a:88:0c:ce:92:17:7e:2c:0f:11:70:b7:60:7c:
9f:27:dd:30:89:4c:6e:2f:a4:19:b3:11:df:18:2c:
3c:d5:07:3a:04:38:24:9b:d0:f3:a5:09:62:0a:3f:
b6:3d:1a:89:4a:7c:16:f5:e2:49:9a:10:60:b0:aa:
f4:c8:89:a3:39:94:1c:f8:e6:a4:4a:30:10:3f:04:
d5:f9:4a:77:0c:cd:a2:42:c7:41:cb:21:b5:8e:ee:
96:76:4e:3a:90:b5:94:86:82:f9:3d:6a:b8:1b:01:
77:ff:6b:79:b1:e0:94:87:b6:df:83:d6:c4:c2:cc:
61:5b:fa:c9:84:c8:78:29:62:02:2e:12:94:91:2f:
3f:7f:85:25:cb:c4:71:40:db:b4:3a:a5:47:06:98:
d2:ad:80:c2:fc:f8:66:8c:31:f8:a8:c7:a6:2a:dc:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DB:0B:F3:D3:0D:5F:2B:66:D3:29:A9:42:17:E4:6F:2C:90:D2:2A
X509v3 Authority Key Identifier:
keyid:54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:ce:3a:34:35:39:f8:60:69:e9:b8:73:17:a6:c5:3f:6c:88:
ac:ef:a3:4d:6d:b3:17:ac:20:4b:e2:f8:11:86:45:63:89:86:
7f:cf:4f:08:fe:42:be:39:bf:c6:53:e8:74:f5:d7:e2:bb:7d:
32:4e:0f:0c:28:f1:7b:43:80:78:77:a5:a2:ab:59:23:b1:8c:
47:90:12:e2:18:21:26:a9:47:14:7b:09:24:ff:b2:b3:bc:b5:
96:2a:10:e3:46:16:c6:d8:5c:39:53:a0:c6:a0:a3:74:b7:cf:
7b:04:ed:92:9a:16:07:2c:5c:e1:87:23:2f:ea:90:e3:d9:c8:
9a:9d:92:2b:42:d5:7e:b6:db:74:27:3b:a9:6b:3a:cd:01:f3:
d7:8f:6a:54:8e:e9:80:b1:fe:af:ac:32:b7:fd:7b:14:ec:d4:
37:04:ff:ea:7d:bc:9f:ce:73:d1:4d:1f:68:c0:68:1d:48:18:
1d:86:bf:2c:86:ec:4a:01:5d:a5:60:55:bc:b6:56:f2:2c:e3:
26:de:aa:73:a8:16:8f:bc:3f:2a:17:0b:7a:f7:4b:81:a3:59:
f2:42:e5:1e:54:3c:f2:20:f3:28:be:29:ff:5f:79:6d:87:d4:
4b:28:9b:bc:34:42:ce:55:3e:ce:48:18:f6:8b:1f:6e:cd:15:
a1:e0:a6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:12:17 2025 by rpki-client