This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
File: VU9dfGbsUOhKiru6mWgXfkcp02Y.mft (raw, json)
Hash identifier: /zMFUZW/wKC63zB8tiEqsH+GalbqCIfuwPfW7QJmPw8=
Subject key identifier: 6A:74:49:3A:2C:24:C8:18:D6:83:45:34:ED:CD:04:6C:76:FE:1E:86
Authority key identifier: 55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66
Certificate issuer: /CN=A91E8BE3/serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
Manifest number: B4
Signing time: Fri 05 Dec 2025 04:04:36 +0000
Manifest this update: Fri 05 Dec 2025 04:04:35 +0000
Manifest next update: Fri 12 Dec 2025 04:04:35 +0000
Files and hashes: 1: VU9dfGbsUOhKiru6mWgXfkcp02Y.crl (hash: Q9M/CTK9M1YC3Rxxhx0yan9M+d0t0Vxk66g44YrdSww=)
2: 0AC098846EDA11F08D404571C4F9AE02.roa (hash: XUaCHo7ISEfVt8zg4dz4qiHM8RTC6XTgDTg25gi/BRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.crl
rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8BE3, serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366
Validity
Not Before: Dec 5 04:04:35 2025 GMT
Not After : Dec 12 04:04:35 2025 GMT
Subject: CN=693259d4-159a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:d5:75:73:94:dc:fa:3b:83:51:cd:c5:c2:
d9:e1:47:3a:57:30:0a:12:83:f2:9e:f2:bf:f8:32:
41:e1:93:51:64:49:5e:3b:39:64:ad:8f:06:03:89:
ee:43:c4:7d:f6:1d:4f:1c:9c:b4:bc:65:e2:4c:35:
85:0b:23:c3:8b:75:ca:65:b1:7a:28:09:0d:bd:32:
fe:1f:ab:62:17:f1:4b:94:75:85:5d:93:84:c0:ff:
8e:bf:ee:59:e7:56:17:a5:02:40:dd:03:35:41:74:
fb:7d:25:f8:87:d4:54:20:51:5a:55:ac:39:27:38:
69:e2:3c:2c:a2:fa:64:65:c8:d7:57:7e:11:69:9d:
04:05:24:95:42:a1:82:be:fc:37:6d:01:cd:78:b5:
d3:f4:9d:4e:60:be:bf:51:7c:ac:3b:0e:2b:12:f6:
e2:bd:c4:2d:f3:35:f9:75:84:7a:6c:9d:91:85:94:
d1:19:93:87:7e:ed:01:0d:94:87:ac:02:bd:9d:7b:
87:ce:f0:44:ef:de:1c:b1:f2:34:05:2f:77:18:d8:
0c:c5:00:75:db:5f:6d:b1:33:92:cb:78:0c:54:db:
ea:96:24:23:29:72:e8:e9:fd:91:78:85:8d:7a:4a:
e5:3f:fe:48:a0:61:a8:e5:cb:6c:c6:a7:b0:24:ec:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:74:49:3A:2C:24:C8:18:D6:83:45:34:ED:CD:04:6C:76:FE:1E:86
X509v3 Authority Key Identifier:
keyid:55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:4b:ad:f4:84:62:f5:0a:82:a0:c1:2a:23:c7:58:98:75:25:
3f:02:23:e3:07:8b:d1:cd:5c:d5:0a:f2:65:02:b3:f1:cf:54:
92:f3:8b:ca:3d:e3:c8:a3:08:dc:31:4c:ac:b0:c8:ad:95:ca:
e4:67:df:99:90:b4:dd:30:93:c3:c1:a9:25:8c:91:10:45:21:
64:60:74:97:bc:ef:0d:c0:49:f6:76:1e:ce:25:4b:2c:d3:80:
27:f5:e8:b6:0a:2a:17:40:48:17:5d:12:34:a0:c0:1d:c1:97:
9d:63:c5:0f:19:de:36:c5:06:a0:2e:d5:d3:e3:41:31:4d:8b:
cf:2a:d7:de:b4:4c:1e:5e:b7:46:95:2b:8a:c6:9c:5d:81:44:
91:50:80:9a:d2:e3:84:7f:e1:1e:be:63:7f:38:bf:f8:98:51:
45:e5:ea:04:e9:d9:46:5d:cd:39:77:8b:28:d8:a6:c6:2c:a5:
c5:bd:4f:a4:29:bd:be:e7:d7:3e:cd:6e:6f:69:79:f2:9e:9e:
c1:76:52:44:df:e9:07:86:02:6a:ad:ea:34:d1:64:8e:99:1b:
22:95:45:0e:86:a0:34:87:cd:9d:bc:6b:cd:93:37:7a:c4:20:
fc:0a:82:e0:b8:18:99:52:2f:e9:5d:53:27:01:f4:47:0b:d7:
a5:ee:73:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:35 2025 by rpki-client