This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft
File: AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft (raw, json)
Hash identifier: oJTlVcCWKPNeiQvNHXln2PdlY59UYzq/GNqV+TiZEBQ=
Subject key identifier: 0F:C1:57:63:46:B0:11:71:E3:41:0E:FD:D7:1E:93:66:72:E3:74:CA
Authority key identifier: 02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC
Certificate issuer: /CN=A9142BCC/serialNumber=020556F97D545434D2C854121DC5DC64634A64AC
Certificate serial: 193A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft
Manifest number: 191F
Signing time: Thu 18 Dec 2025 16:20:15 +0000
Manifest this update: Thu 18 Dec 2025 16:20:14 +0000
Manifest next update: Thu 25 Dec 2025 16:20:14 +0000
Files and hashes: 1: AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl (hash: uaxKTSB60eaIgLIvri8MxmOo+LKG+IpPS679D6o6nk0=)
2: 46BEDD64662411EBADFEB364C4F9AE02.roa (hash: 7ep9r2lhtkEoQQoSPoki8z12gP7TphhYgXVc5Ba6Qgs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl
rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 16:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6458 (0x193a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142BCC, serialNumber=020556F97D545434D2C854121DC5DC64634A64AC
Validity
Not Before: Dec 18 16:20:14 2025 GMT
Not After : Dec 25 16:20:14 2025 GMT
Subject: CN=694429bf-922b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:22:81:b6:ce:7a:20:49:28:8f:0f:90:60:b0:
49:45:81:51:5e:37:7a:80:86:28:87:27:3d:0d:0b:
aa:ae:3c:d8:28:5c:84:8b:d3:5c:79:32:b1:14:f6:
05:5e:4e:43:6d:a5:8a:34:0e:81:df:e1:fc:6c:d7:
f0:90:12:9b:23:ef:8f:ed:ff:c0:19:1e:82:39:17:
99:d9:da:49:ab:ad:de:11:c0:51:9a:9e:90:21:7f:
f9:d0:ed:c8:6e:f4:a3:b5:b8:5f:56:af:d6:8d:9b:
ae:8d:3c:06:c5:12:75:ff:8f:48:b1:5d:df:70:e8:
bc:37:4d:c3:f4:c4:a7:c2:20:b5:5b:1d:68:5d:91:
a7:f1:bf:93:14:aa:36:70:cc:b2:2d:2e:49:b7:86:
96:d7:d1:b3:a4:51:7c:81:db:da:bb:c2:aa:8f:7d:
c6:75:24:d5:fc:9e:8f:31:7a:2e:5f:dd:cb:a2:24:
9d:a5:03:cd:89:c3:d7:d1:df:51:ac:9b:04:8a:de:
97:58:d2:4d:b0:ce:3d:d1:51:26:cf:5f:99:43:4b:
d6:b5:2b:bc:6e:8e:4a:14:9f:df:07:62:1a:e6:95:
71:f6:71:e8:30:54:67:42:74:13:29:db:21:8c:bd:
3e:f4:fc:2d:1e:49:e0:ec:b8:71:94:9b:0c:d9:9b:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C1:57:63:46:B0:11:71:E3:41:0E:FD:D7:1E:93:66:72:E3:74:CA
X509v3 Authority Key Identifier:
keyid:02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a7:d6:0e:b4:1f:dc:46:a2:eb:be:0b:bb:11:39:f7:a9:49:
35:42:b9:d3:98:fd:5a:7d:17:4e:c8:1f:e8:24:2e:70:50:d5:
19:48:56:52:5e:77:d1:e7:7e:85:2c:a7:4d:5d:dc:38:c8:bc:
34:93:8c:4e:66:36:db:fa:08:49:cc:d8:9f:1e:1d:31:06:06:
4a:99:6a:32:ee:de:36:53:90:b6:32:25:ef:29:41:90:35:e8:
34:b7:e8:6a:8e:93:b0:75:de:ae:9b:22:ac:99:a7:15:6c:d4:
cf:c8:b9:2a:77:60:51:9f:81:16:21:c3:de:49:13:c0:e3:92:
ca:14:90:a0:08:e9:66:24:21:0b:99:2c:6b:76:ac:8c:3a:50:
08:9c:2a:64:4e:2f:c0:98:e8:62:25:21:b3:91:88:a9:dd:5d:
a6:5d:2a:05:8f:ba:fc:e7:39:84:b2:85:39:06:b0:c5:bb:c0:
b1:63:25:09:9b:74:0c:1a:84:a5:61:5f:0e:00:53:4c:ae:c2:
e1:95:31:b5:3f:56:15:4c:70:0d:1a:06:38:72:94:db:2b:65:
7b:e2:68:23:c5:19:dd:7c:73:38:c3:15:9e:11:91:3a:7b:c7:
8e:1d:fa:e1:b8:f5:5e:d2:90:c8:e3:63:ca:4c:a1:f3:8b:5d:
ef:33:f4:5e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJCQ0MxMTAvBgNVBAUTKDAyMDU1NkY5N0Q1NDU0MzREMkM4NTQxMjFEQzVEQzY0
NjM0QTY0QUMwHhcNMjUxMjE4MTYyMDE0WhcNMjUxMjI1MTYyMDE0WjAYMRYwFAYD
VQQDDA02OTQ0MjliZi05MjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+CKBts56IEkojw+QYLBJRYFRXjd6gIYohyc9DQuqrjzYKFyEi9NceTKxFPYF
Xk5DbaWKNA6B3+H8bNfwkBKbI++P7f/AGR6COReZ2dpJq63eEcBRmp6QIX/50O3I
bvSjtbhfVq/WjZuujTwGxRJ1/49IsV3fcOi8N03D9MSnwiC1Wx1oXZGn8b+TFKo2
cMyyLS5Jt4aW19GzpFF8gdvau8Kqj33GdSTV/J6PMXouX93LoiSdpQPNicPX0d9R
rJsEit6XWNJNsM490VEmz1+ZQ0vWtSu8bo5KFJ/fB2Ia5pVx9nHoMFRnQnQTKdsh
jL0+9PwtHkng7LhxlJsM2Zt+bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/BV2NG
sBFx40EO/dcek2Zy43TKMB8GA1UdIwQYMBaAFAIFVvl9VFQ00shUEh3F3GRjSmSs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJDQy84QTU2QzA5RTk4
M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZEVFN5RlFTSGNYY1pHTkta
S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FnVlctWDFVVkRUU3lGUVNIY1hjWkdOS1pLdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkJDQy84QTU2QzA5RTk4M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZE
VFN5RlFTSGNYY1pHTktaS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCzp9YOtB/cRqLrvgu7ETn3qUk1QrnTmP1afRdOyB/oJC5wUNUZSFZS
XnfR536FLKdNXdw4yLw0k4xOZjbb+ghJzNifHh0xBgZKmWoy7t42U5C2MiXvKUGQ
Neg0t+hqjpOwdd6umyKsmacVbNTPyLkqd2BRn4EWIcPeSRPA45LKFJCgCOlmJCEL
mSxrdqyMOlAInCpkTi/AmOhiJSGzkYip3V2mXSoFj7r85zmEsoU5BrDFu8CxYyUJ
m3QMGoSlYV8OAFNMrsLhlTG1P1YVTHANGgY4cpTbK2V74mgjxRndfHM4wxWeEZE6
e8eOHfrhuPVe0pDI42PKTKHzi13vM/Re
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:25:38 2025 by rpki-client