This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
File: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft (raw, json)
Hash identifier: luJj1RdYOZfR7laofEgs5FmfPLIK24XBUJNcGj8e4zI=
Subject key identifier: A3:42:39:66:4F:A4:6C:55:D3:39:B7:05:9F:1B:F3:8B:68:7A:E6:F2
Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
Certificate issuer: /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Certificate serial: 07AE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
Manifest number: 0791
Signing time: Sun 14 Dec 2025 20:54:04 +0000
Manifest this update: Sun 14 Dec 2025 20:54:03 +0000
Manifest next update: Sun 21 Dec 2025 20:54:03 +0000
Files and hashes: 1: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl (hash: kASlBdrr+D3FG+JQ+OV2j7QAHDYeoip38JzDafHq31M=)
2: 7ABF29BC33A611EB8B013530C4F9AE02.roa (hash: DkLMEslw0c7GL3UX6ZX4tSACXhQrny6AEc7AjFls8Qg=)
3: 7B44296E33A611EB8B013530C4F9AE02.roa (hash: oDUZAaQl3lPYyTgIw4jAYKCdROz450OeSq3jTFkHMK8=)
4: 7D232E6033A611EB8B013530C4F9AE02.roa (hash: hDAuX39H3T612/n8lUzzs0AUGHN/iCv7TSdpcCPJeD8=)
5: 7C82C65A33A611EB8B013530C4F9AE02.roa (hash: XdLA28efVQQSfHK5ll0cvp5Im97+KOvTKJ73pGEogRs=)
6: 0ECDB4C65E7011EC8FE5F56DC4F9AE02.roa (hash: PgsReX4a/HcM3MuEijdLXSrLd7Vlscm+5dJmyynTyh0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 20:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1966 (0x7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F06A, serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Validity
Not Before: Dec 14 20:54:03 2025 GMT
Not After : Dec 21 20:54:03 2025 GMT
Subject: CN=693f23ec-5d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bc:e0:a8:be:d8:6b:66:6b:a9:13:b1:a3:8b:
f2:c0:ed:f9:ed:df:13:0c:28:9a:a3:80:e6:e8:71:
11:ed:f2:5b:64:d9:e5:a8:bf:c8:17:ad:e1:11:55:
d7:d9:4e:92:92:43:1a:00:20:7c:9e:cc:e2:b3:de:
54:f2:47:c1:04:44:54:ca:2f:be:9a:45:81:61:a2:
87:ca:04:15:e3:91:77:5f:46:4f:d4:4b:75:51:b9:
54:a7:f5:76:ad:0f:dd:a8:77:40:b8:0f:9b:d9:38:
56:29:b6:bc:1e:c6:52:bb:13:5b:aa:b6:e6:bc:87:
5d:99:40:57:35:23:23:aa:dc:9c:59:e7:26:87:91:
e6:12:9f:c2:4c:45:c0:2f:71:fc:af:5c:a7:38:04:
56:fe:b4:10:68:91:eb:0a:d6:3a:ad:45:75:85:eb:
d1:5b:52:fa:64:c9:31:88:9a:d1:1a:e9:b9:91:ba:
d0:51:58:93:f9:aa:98:77:06:e5:dc:62:24:d0:c6:
23:32:e0:c3:4e:e5:bb:3a:fd:bb:b0:b8:40:c5:cf:
9f:d8:0e:c9:a2:9a:6b:ed:d4:e6:a7:7c:e8:d9:8c:
a6:64:7c:d0:b6:ee:d1:c7:ee:0b:3b:66:59:aa:70:
81:1d:01:4c:c3:a9:c3:92:27:fe:0e:c3:10:86:45:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:42:39:66:4F:A4:6C:55:D3:39:B7:05:9F:1B:F3:8B:68:7A:E6:F2
X509v3 Authority Key Identifier:
keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5d:c3:c9:b6:93:6f:52:40:d5:bd:aa:30:96:0a:69:d0:bd:
c4:1e:4c:65:c3:43:75:d8:82:70:28:68:96:af:5f:ea:9f:f8:
02:f2:3d:e5:0b:96:72:90:6e:6c:52:3b:99:8c:43:a9:18:b4:
00:c1:38:be:18:2b:a4:8b:54:8c:d3:06:d8:31:2b:e4:21:71:
3f:1d:48:2e:e1:b9:6a:49:1a:21:63:9c:d3:03:9f:28:37:fb:
24:71:37:b6:cc:62:d0:3e:98:5c:2e:eb:01:e8:a3:aa:ed:e4:
5f:fa:17:23:46:65:03:82:37:9f:cb:fb:5f:a3:66:30:5f:75:
3b:39:90:14:58:43:54:a4:77:c0:b8:74:57:df:e0:e1:37:4e:
69:89:d7:0a:da:ae:4c:eb:44:27:4a:1b:37:25:2e:f8:6b:e1:
c2:ad:41:57:c6:fa:16:dd:aa:c4:a9:0b:d6:41:3f:92:13:23:
2e:5c:06:f6:a1:2d:59:5b:d5:96:29:d9:9f:ec:ca:d0:43:33:
da:ad:e5:41:f9:81:af:4b:0d:24:8c:cb:c0:f3:8a:4e:a0:8c:
1e:e0:ab:b3:1b:72:79:a9:35:ce:28:c2:ce:ec:d2:7d:ae:de:
3b:b4:6b:80:15:76:c7:ef:db:fa:51:47:83:e1:6f:3e:37:3f:
85:ee:49:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:05:41 2025 by rpki-client