This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
File: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft (raw, json)
Hash identifier: TiyivHoxm2tHG+PPV6C/nqxw0tFsgJVSfzsLQqXkP9M=
Subject key identifier: C5:4E:B9:44:6E:9A:90:07:50:7F:7A:69:A0:76:97:00:7D:28:95:2A
Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
Certificate issuer: /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Certificate serial: 07C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
Manifest number: 07A6
Signing time: Sat 24 Jan 2026 20:48:21 +0000
Manifest this update: Sat 24 Jan 2026 20:48:20 +0000
Manifest next update: Sat 31 Jan 2026 20:48:20 +0000
Files and hashes: 1: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl (hash: mPiFC7JhLDEQBcV4Yw+psqSmqXsluS3e4sKWgFzM1QE=)
2: 7B44296E33A611EB8B013530C4F9AE02.roa (hash: oDUZAaQl3lPYyTgIw4jAYKCdROz450OeSq3jTFkHMK8=)
3: 0ECDB4C65E7011EC8FE5F56DC4F9AE02.roa (hash: PgsReX4a/HcM3MuEijdLXSrLd7Vlscm+5dJmyynTyh0=)
4: 7D232E6033A611EB8B013530C4F9AE02.roa (hash: hDAuX39H3T612/n8lUzzs0AUGHN/iCv7TSdpcCPJeD8=)
5: 7C82C65A33A611EB8B013530C4F9AE02.roa (hash: XdLA28efVQQSfHK5ll0cvp5Im97+KOvTKJ73pGEogRs=)
6: 7ABF29BC33A611EB8B013530C4F9AE02.roa (hash: DkLMEslw0c7GL3UX6ZX4tSACXhQrny6AEc7AjFls8Qg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1987 (0x7c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F06A, serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Validity
Not Before: Jan 24 20:48:20 2026 GMT
Not After : Jan 31 20:48:20 2026 GMT
Subject: CN=69753015-0440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9d:07:be:d0:73:c0:3a:cd:75:ed:69:0f:7a:
61:b0:e3:fb:a2:97:4d:9a:b4:a9:42:ee:ea:24:13:
33:55:c4:d1:64:d6:c7:2b:64:eb:f9:cb:2e:2a:92:
8a:ef:d6:19:d0:f0:f2:8e:88:b8:f1:54:51:06:89:
1d:5b:90:71:f7:3b:29:c5:84:5e:cf:c6:c3:6a:75:
e3:64:4c:2b:e5:2d:f9:b7:12:a5:ef:02:02:7b:bb:
03:fc:1d:e1:18:09:37:4e:69:c1:06:8a:1d:f2:e5:
23:ba:2c:0e:2c:9b:fa:0b:7b:98:8b:47:64:eb:2f:
dd:5f:99:89:e2:bf:b1:1c:a7:4c:01:81:f9:d0:e5:
1e:31:83:31:38:f7:f7:36:52:20:f6:c3:1b:b0:6f:
8d:6e:22:9a:5d:85:ae:a1:14:4f:83:78:d5:29:fa:
a3:3a:1e:69:10:aa:bc:f2:4d:08:de:58:a0:7c:53:
45:3e:39:88:15:9f:be:a3:94:e9:d4:cb:03:3a:5f:
1a:46:aa:13:51:12:2e:c8:93:da:cc:02:7c:35:59:
fe:a8:e5:7d:cc:b8:fc:76:cd:d5:92:bf:14:a0:bf:
40:ec:66:b0:c0:aa:ae:e9:c8:f1:9e:f3:69:83:4c:
0b:5d:ab:90:1d:b1:79:cd:41:b7:ef:42:57:db:e1:
d2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4E:B9:44:6E:9A:90:07:50:7F:7A:69:A0:76:97:00:7D:28:95:2A
X509v3 Authority Key Identifier:
keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a8:8c:43:f0:0f:f2:92:fd:12:f5:5f:b3:4d:3b:08:2d:83:
04:2d:67:2d:48:52:62:b3:54:41:76:3b:de:f3:27:50:6f:f3:
59:79:38:ec:0b:c5:69:08:3b:db:a5:80:a9:90:9f:e9:f5:42:
9f:b3:63:64:31:2f:72:ab:a7:97:63:94:5d:02:aa:e0:64:cc:
50:7e:e1:05:f8:66:e3:46:be:e5:b5:88:39:d1:df:62:b0:f0:
42:af:79:4b:25:75:47:f8:bc:f4:f8:a3:cc:c9:b9:07:d3:93:
ba:78:cf:49:ff:3c:1e:fd:30:0b:51:85:d1:4f:b6:2a:af:fd:
86:ac:19:fc:56:22:fa:dc:13:6c:d3:92:ee:da:a2:cf:77:33:
41:d7:54:fd:d4:7d:ef:03:7a:0f:60:dd:5a:5d:90:05:60:47:
51:a7:dd:62:de:d0:4b:9e:12:fc:21:41:f9:2f:5b:08:48:99:
54:e0:c9:33:04:e5:d4:23:9b:80:fe:9e:68:83:26:09:98:fc:
4f:4d:79:e7:44:ca:3b:7f:cd:2d:63:89:47:88:8a:c7:00:06:
5c:86:7f:3a:62:eb:60:1e:17:0c:9f:65:9a:d3:10:a5:b1:9f:
25:85:78:f8:3c:e1:0d:9b:2f:ea:11:79:f4:13:cd:42:3c:72:
b4:c2:33:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:01:50 2026 by rpki-client