This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
File: AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json)
Hash identifier: EFRP1+skmb4cRaMS9QDy7zqlG6jy2jhfiVAM86Sqsds=
Subject key identifier: 4C:5F:1D:94:C5:8F:F7:EA:DB:ED:7F:B7:15:3E:DF:B0:2E:76:50:8A
Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D
Certificate issuer: /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D
Certificate serial: 043F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
Manifest number: 043A
Signing time: Tue 30 Dec 2025 23:26:29 +0000
Manifest this update: Tue 30 Dec 2025 23:26:28 +0000
Manifest next update: Tue 06 Jan 2026 23:26:28 +0000
Files and hashes: 1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: WTgur2sE48gAEQg04YSsKxaHps0anFd6dvB/LcH94a0=)
2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: 9AxcqXh9wRNZ9KWB7JmYs1ClA4NJwiNWZURNVazJEDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl
rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Jan 2026 23:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1087 (0x43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91525A0, serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D
Validity
Not Before: Dec 30 23:26:28 2025 GMT
Not After : Jan 6 23:26:28 2026 GMT
Subject: CN=69545fa4-66fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:2e:0e:5c:fe:41:09:d8:68:0d:2e:95:8e:
08:5a:30:73:0a:b6:d8:6b:fb:f8:3b:6a:48:bb:fc:
4e:f2:b5:9c:c9:5d:d9:20:a3:5a:95:8f:a3:2e:70:
0a:a4:47:6b:85:b4:9b:e8:88:b1:f2:8f:1a:be:d0:
a5:d7:59:0e:00:e1:52:be:bf:cd:ac:ad:c4:51:8d:
3d:7c:f3:90:1d:e3:dd:56:9b:46:a1:d6:39:6f:34:
69:9f:1b:7a:56:b6:c6:a4:76:eb:a9:c9:d6:ba:11:
92:53:64:66:36:f2:9c:03:98:3f:15:31:bd:14:5a:
ec:55:5d:57:51:7d:ab:90:cb:f1:46:32:75:5f:c1:
98:3a:8e:68:53:99:a5:94:79:f3:f6:43:f8:67:17:
3c:b4:be:3c:fe:ed:63:65:4b:19:e5:62:8e:f1:d0:
35:31:30:4b:a0:aa:8f:c9:63:77:5b:26:15:6d:da:
3c:1f:69:c8:d5:46:53:6f:3d:ab:2b:f3:5a:de:36:
d8:1a:22:a6:8a:86:9c:39:b1:14:e8:66:13:76:a6:
4b:09:fc:87:b3:b8:d7:19:4b:75:d4:6f:12:aa:23:
28:11:d8:9f:08:01:99:8e:3f:5e:87:12:a3:2b:2c:
07:55:86:ea:53:fa:3a:5a:b3:2e:b4:45:9b:ea:d1:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5F:1D:94:C5:8F:F7:EA:DB:ED:7F:B7:15:3E:DF:B0:2E:76:50:8A
X509v3 Authority Key Identifier:
keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:28:97:58:9d:60:8d:d5:79:8f:c1:e2:9e:36:df:e2:e1:a5:
db:d9:96:cc:27:dd:53:ca:a0:9c:ae:e7:1e:ee:12:3e:a8:f3:
2e:e6:3f:d2:e3:63:a7:28:53:7c:9b:a0:4d:a1:4c:4b:cc:77:
d9:99:28:65:4d:45:df:34:65:ce:e7:ba:2b:7e:48:44:c1:39:
2f:4b:29:52:2d:ef:37:f2:39:61:af:54:bb:20:5a:8c:f6:b2:
9e:ba:da:a7:45:c4:89:ee:6a:31:e4:22:05:46:8d:a3:ce:e1:
cb:41:07:ac:30:7a:0b:16:ad:80:c1:56:9a:b2:75:2f:41:3b:
01:00:3d:02:da:dc:73:ea:20:d3:66:7a:e3:0a:f4:38:8c:86:
3e:a9:04:f9:88:b6:57:c2:d1:79:56:df:b6:c3:9a:8f:2e:8d:
94:83:0e:3b:c2:48:02:a0:83:bd:68:cf:56:bd:ee:24:05:93:
09:b9:ed:e1:4a:ac:a7:8c:a7:3f:67:0f:bc:28:3c:ee:ac:96:
0b:83:4c:ba:e5:6a:c6:3b:f7:65:56:1a:51:f7:f6:2e:83:2c:
0a:33:c3:9b:fb:4e:87:3f:f8:e8:12:99:11:a2:4a:a9:a3:59:
9b:0b:65:06:89:c8:d0:66:db:57:68:74:cd:96:3c:fd:f2:90:
26:64:98:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 19:34:26 2025 by rpki-client