This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
File: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft (raw, json)
Hash identifier: uvmzdSdCRhyQt29cafo8ApZGPVjYnK/gnKBS0/Vpq2k=
Subject key identifier: 5B:BB:26:AF:71:B7:38:57:43:0F:49:59:66:D0:86:DA:8F:23:3A:78
Authority key identifier: BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
Certificate issuer: /CN=A918E1C4/serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
Manifest number: 05
Signing time: Wed 03 Dec 2025 06:18:14 +0000
Manifest this update: Wed 03 Dec 2025 06:18:14 +0000
Manifest next update: Wed 10 Dec 2025 06:18:14 +0000
Files and hashes: 1: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl (hash: vl3fgEfKjuJeUAu17WxZRweAnT6sunbvbgO0lJGakvg=)
2: 722C58FACE9311F0A2C11D25C4F9AE02.roa (hash: vbYGiXj/8596Y2OVsZjQ4JT9FfRktn7XEyP5V/XXG/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 06:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E1C4, serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Validity
Not Before: Dec 3 06:18:14 2025 GMT
Not After : Dec 10 06:18:14 2025 GMT
Subject: CN=692fd626-a87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:e6:a0:6d:02:04:07:3a:66:ea:4e:20:79:
fa:78:0a:17:98:f0:6a:5d:02:5e:79:80:d3:42:85:
9b:8b:46:17:6c:7a:73:86:2b:47:bb:ce:0c:43:df:
35:32:19:20:51:8d:78:a4:25:5e:e1:d1:3b:2e:1a:
db:5c:fa:9e:84:a5:61:1a:e1:6e:e0:b6:b6:22:ea:
d3:75:f1:c4:cb:bc:34:ae:9d:85:04:fe:2a:6b:37:
4d:2a:d6:01:ac:bc:3d:33:15:c6:50:fe:09:f0:52:
ae:d1:f5:0b:c6:e6:12:31:71:56:67:63:99:c1:62:
a7:12:2d:85:56:70:a3:3e:72:00:b1:c4:48:c3:bf:
3a:f0:9b:18:8d:e8:4d:00:d8:5b:b2:34:ed:71:c9:
cd:ba:d3:74:cd:01:fd:44:7c:6b:99:6b:1b:39:14:
d3:2b:82:44:73:c4:d2:43:82:b5:2e:a8:56:3e:fb:
04:86:da:d6:9d:18:a3:e7:1e:9f:aa:f1:e8:7f:8c:
9a:1b:1c:95:49:0f:5b:ca:85:57:bb:62:74:11:b8:
cc:5f:13:f4:99:16:6b:3f:48:07:d0:46:69:00:a9:
73:30:91:f2:c4:a7:8d:7c:5d:9f:1b:b0:c2:64:54:
a6:4e:a6:45:65:1b:1e:6e:67:b8:7e:c9:47:d6:08:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BB:26:AF:71:B7:38:57:43:0F:49:59:66:D0:86:DA:8F:23:3A:78
X509v3 Authority Key Identifier:
keyid:BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:5d:25:38:bf:5d:ca:af:1b:75:48:9a:ba:18:ae:85:d7:7e:
c2:90:cd:5d:e5:2e:92:9a:2c:46:16:51:1d:b7:bb:83:ac:73:
48:4a:2a:10:3e:21:46:00:e7:e0:38:c5:63:c3:af:22:cc:9e:
5c:60:e6:3e:bf:f2:de:93:8f:79:dc:6c:2f:c1:61:39:7a:d7:
34:8b:35:aa:e6:81:d7:a4:e3:42:26:9c:45:cd:d2:ba:da:69:
3f:31:ee:7b:d9:7b:28:97:c5:72:f5:89:c0:b1:f9:e5:31:b2:
0c:38:47:a2:d2:31:d3:d8:29:7a:f5:9f:fa:af:d5:e9:55:7e:
66:8a:ef:56:c2:85:2b:27:e3:d3:1a:37:6b:04:ed:56:78:dc:
4f:7d:32:e7:f5:3c:18:7c:05:05:41:57:18:f4:13:0a:24:54:
6d:a5:62:63:3e:ec:77:ef:30:56:c2:9a:3a:80:f2:db:d2:b8:
51:d1:09:5a:51:dc:08:3b:3d:ce:2f:c3:d2:19:8d:d2:6b:73:
3f:43:87:08:3e:30:6b:3b:78:4f:4e:05:5f:23:91:50:69:bd:
cc:8a:88:c7:73:58:29:3f:a3:9d:ca:49:d5:61:c9:ad:0e:15:
16:d2:00:04:eb:bf:96:a5:03:9c:a2:87:b2:6c:4d:bc:7f:7a:
5b:87:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:00:10 2025 by rpki-client