This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
File: V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft (raw, json)
Hash identifier: vtLlbe992K2Wvubb0kkF2F2UurGklWB+1GaqpOVJjwQ=
Subject key identifier: 3F:BA:BF:A9:70:83:BF:52:38:5E:82:38:14:5D:4D:2C:9A:FF:94:7F
Authority key identifier: 57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1
Certificate issuer: /CN=A919C1A2/serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1
Certificate serial: 0262
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
Manifest number: 025C
Signing time: Tue 23 Dec 2025 00:40:17 +0000
Manifest this update: Tue 23 Dec 2025 00:40:17 +0000
Manifest next update: Tue 30 Dec 2025 00:40:17 +0000
Files and hashes: 1: V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl (hash: a7QLcPGli9cKvvl7VgB8/ElU3+Lw0mIHQzc3fUB8JLE=)
2: 46B3DF5A46E111EDB39B8526C4F9AE02.roa (hash: h0Rd404TCo1v+12j0LNcfmWqFAfQqCTjn2QEViHWWT8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl
rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C1A2, serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1
Validity
Not Before: Dec 23 00:40:17 2025 GMT
Not After : Dec 30 00:40:17 2025 GMT
Subject: CN=6949e4f1-e362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:d5:63:57:bb:46:e4:1b:a4:7e:d2:2d:56:
93:8f:a9:c3:51:79:8f:6f:76:64:4d:d8:f3:09:20:
e3:24:ea:9b:7a:e2:c0:b7:f1:e7:af:4e:69:a8:e4:
ab:7e:b9:44:ae:2d:38:60:ad:6a:69:91:0b:35:2e:
c9:1f:5d:a3:4d:74:6e:a3:97:e6:e9:a9:2a:df:3b:
d2:b9:5d:07:b9:88:14:2d:0b:ca:64:df:98:49:9a:
9a:a4:7b:4d:ec:e9:29:6d:14:fe:ed:af:86:31:e1:
40:e5:c2:0b:40:ca:d4:3b:61:07:9c:a9:73:a5:4a:
06:ac:72:17:3b:4f:20:84:cb:b8:2c:1d:eb:e4:36:
63:db:82:88:24:77:ac:a7:65:8d:6a:c4:69:bf:82:
00:db:84:b7:01:5b:c3:e9:82:49:74:a2:6a:5e:e2:
31:5a:66:33:c8:64:f4:4e:3b:fd:fb:eb:d9:12:3a:
37:2e:3f:de:48:59:19:d4:45:9b:57:8c:cd:2f:7a:
db:b6:9e:23:42:d1:b2:02:b4:0b:22:6d:10:75:24:
87:a8:56:85:aa:53:82:13:7f:0a:56:c8:ad:fd:fa:
2e:05:a5:8b:54:8f:a7:60:c5:75:76:b4:cb:1c:61:
0a:ce:b0:87:c7:48:15:85:37:ed:81:16:5c:3c:40:
df:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BA:BF:A9:70:83:BF:52:38:5E:82:38:14:5D:4D:2C:9A:FF:94:7F
X509v3 Authority Key Identifier:
keyid:57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:a9:d8:a6:f4:34:51:63:26:a5:de:8b:22:bb:25:f1:68:f8:
2f:2f:61:5c:4d:29:46:0a:7c:08:5f:3e:c7:72:5d:e5:ec:fd:
f2:0c:38:47:0c:37:29:13:35:c7:33:74:a1:2c:8e:ec:54:1d:
ff:81:6d:38:2f:ca:f6:b8:fc:34:2c:a1:13:d7:46:bb:40:21:
97:e3:79:86:62:0f:c2:fe:c2:4f:c2:d0:27:2f:d5:00:00:14:
7e:bc:4b:08:db:51:ec:65:c5:4d:0d:3e:0b:73:ae:fe:51:41:
4c:15:9a:ea:38:b8:28:ed:bb:dc:3b:9f:ec:96:05:90:82:b0:
b8:97:f3:bb:39:4b:5e:13:73:c3:64:71:f9:6b:33:b8:5f:9c:
b7:7e:93:aa:0c:42:80:f2:61:db:b7:f0:8a:06:c3:9c:30:e8:
49:45:90:55:ac:92:13:b7:0d:dd:4f:58:2d:63:25:46:ad:52:
c1:29:86:d1:88:bd:f4:3b:ec:93:21:48:6c:c6:23:00:d0:3c:
3b:8f:06:f3:ab:d0:80:4a:30:73:06:9d:88:0a:5d:f3:74:f3:
be:35:08:d0:25:3d:5e:6a:3d:9f:bb:51:9d:5a:97:d9:d8:f5:
42:ee:3f:80:9b:d4:1c:0d:8b:be:fe:ff:f3:3a:be:c6:06:6c:
23:93:49:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 00:21:22 2025 by rpki-client