This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
File: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft (raw, json)
Hash identifier: royCWCugyGxYzxDPzLEk5y83K84n5jczEictMdVxE00=
Subject key identifier: 15:49:53:B5:60:29:4C:68:50:F0:D2:A5:F1:8A:5E:B3:A2:6E:5F:4E
Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
Certificate issuer: /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Certificate serial: 07AA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
Manifest number: 078D
Signing time: Sat 06 Dec 2025 20:32:48 +0000
Manifest this update: Sat 06 Dec 2025 20:32:47 +0000
Manifest next update: Sat 13 Dec 2025 20:32:47 +0000
Files and hashes: 1: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl (hash: +9HY91RWjc2ks/nySWEkxKnwty25pgeKGMI9s7AzBRc=)
2: 0ECDB4C65E7011EC8FE5F56DC4F9AE02.roa (hash: PgsReX4a/HcM3MuEijdLXSrLd7Vlscm+5dJmyynTyh0=)
3: 7D232E6033A611EB8B013530C4F9AE02.roa (hash: hDAuX39H3T612/n8lUzzs0AUGHN/iCv7TSdpcCPJeD8=)
4: 7C82C65A33A611EB8B013530C4F9AE02.roa (hash: XdLA28efVQQSfHK5ll0cvp5Im97+KOvTKJ73pGEogRs=)
5: 7B44296E33A611EB8B013530C4F9AE02.roa (hash: oDUZAaQl3lPYyTgIw4jAYKCdROz450OeSq3jTFkHMK8=)
6: 7ABF29BC33A611EB8B013530C4F9AE02.roa (hash: DkLMEslw0c7GL3UX6ZX4tSACXhQrny6AEc7AjFls8Qg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1962 (0x7aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F06A, serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Validity
Not Before: Dec 6 20:32:47 2025 GMT
Not After : Dec 13 20:32:47 2025 GMT
Subject: CN=693492f0-ff73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:51:8a:b0:92:07:83:54:60:48:3a:47:c3:
a7:85:6a:6c:50:80:ab:20:bb:44:61:70:d7:f8:78:
d1:e9:6b:cc:28:3b:4d:68:fa:d0:6e:d4:b1:cc:2f:
b6:bf:1a:35:01:a4:e9:45:e6:af:19:dc:02:52:b6:
82:72:a0:ac:91:87:8b:2c:a4:a6:6c:c7:54:8e:03:
35:b5:fc:d9:0d:b0:d2:74:0c:96:ba:16:bc:c5:94:
13:06:60:02:fb:39:f0:c6:96:73:6e:4e:46:de:1c:
f4:fd:1d:a5:1a:17:9f:75:2a:7f:95:0d:4d:6e:a8:
d4:a3:e6:16:12:55:f8:4d:e7:e3:a6:64:43:65:5d:
61:78:ad:f1:0d:a9:27:5a:f2:2b:16:ba:9c:35:51:
b9:61:5a:b9:4f:ae:c7:46:6e:07:fa:a3:64:4c:c7:
25:fc:3c:37:92:b5:b2:ed:ec:00:f7:f0:a7:b2:1e:
b6:b0:34:0d:8c:4a:b2:8a:a8:8e:a5:73:54:c9:5b:
06:f4:94:d7:5f:9d:dd:f8:23:cf:49:34:3d:b3:4c:
88:43:0f:24:76:27:bf:ec:e4:38:d3:9d:d9:77:6b:
22:8f:fe:78:16:1c:db:4e:3f:9e:60:e7:0c:51:95:
ae:12:c6:59:10:cb:8f:be:5c:9c:52:c1:8c:7a:b6:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:49:53:B5:60:29:4C:68:50:F0:D2:A5:F1:8A:5E:B3:A2:6E:5F:4E
X509v3 Authority Key Identifier:
keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:72:08:76:1d:3f:f5:f4:53:e5:a2:6e:83:da:cb:40:47:73:
31:3b:70:16:3e:dc:25:a8:c6:dc:0b:cc:13:fc:61:6c:5d:4b:
53:7f:c8:40:56:fc:1a:82:48:24:b6:79:dd:0b:bd:28:87:a0:
21:63:19:28:4a:64:9b:aa:f3:79:03:26:31:29:09:b1:89:4d:
ed:17:54:29:18:53:0d:b3:95:5f:b6:1f:7f:b2:17:b2:19:a2:
8c:e4:d2:26:8c:09:a5:f9:93:2d:59:45:a9:d6:c7:cb:44:82:
02:af:d3:93:61:4d:eb:ac:a3:2a:d0:ea:4b:87:3d:f9:4b:21:
f3:f4:9f:6a:10:09:ff:16:a9:63:c8:ba:91:3a:73:46:11:71:
aa:3f:63:7f:83:ac:cc:88:7a:d5:4e:99:e5:6c:27:79:4d:37:
a9:3e:cd:19:38:0f:02:ae:c4:9f:36:c6:36:86:00:b3:02:b7:
8e:c7:26:48:2d:be:b5:68:38:d0:e3:c3:bb:bb:1e:7c:e3:db:
15:74:f7:f8:90:32:0b:97:de:4f:59:6b:55:a2:8a:d9:43:23:
56:41:da:7f:a0:5f:97:9a:5c:e2:42:73:ba:55:66:e7:a5:ed:
58:f2:97:5d:b6:c3:78:02:77:c6:e4:64:79:6f:3b:90:fa:bf:
cf:11:bb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:40:25 2025 by rpki-client