This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
File: AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json)
Hash identifier: FaMi4fP1CsN2MMWJOoCYz9C9O7kagH+vYgR77sPc1ew=
Subject key identifier: 34:5D:71:EF:B7:50:31:B9:E1:04:B7:3A:A8:CE:FF:D7:B9:B6:45:AB
Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D
Certificate issuer: /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D
Certificate serial: 043D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
Manifest number: 0438
Signing time: Fri 26 Dec 2025 23:22:00 +0000
Manifest this update: Fri 26 Dec 2025 23:21:59 +0000
Manifest next update: Fri 02 Jan 2026 23:21:59 +0000
Files and hashes: 1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: Zlp+wZY9qBzOOoxQ59m6kjS3xHY7rbZ76EJY1hN0cEw=)
2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: 9AxcqXh9wRNZ9KWB7JmYs1ClA4NJwiNWZURNVazJEDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl
rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 23:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1085 (0x43d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91525A0, serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D
Validity
Not Before: Dec 26 23:21:59 2025 GMT
Not After : Jan 2 23:21:59 2026 GMT
Subject: CN=694f1898-6582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b4:da:7c:61:80:1d:3f:b2:77:77:cf:da:17:
10:f4:3c:86:61:cd:33:27:7f:bb:a0:0f:26:35:90:
28:24:6b:bb:4e:6f:ae:e2:69:66:e7:50:ad:12:1a:
24:44:ba:27:7a:76:49:5f:48:7f:b9:a1:8d:a4:c6:
8a:7b:84:b8:4c:d4:a4:a3:f0:91:b5:da:28:e4:51:
6e:77:1f:73:50:5f:da:9a:30:44:9b:51:3d:d8:f2:
b4:6e:5b:c4:32:02:ea:bf:76:ee:15:33:1e:d6:0e:
32:db:0f:8c:29:33:0d:67:50:47:17:72:1d:e8:d1:
ed:35:e4:da:62:6c:20:4d:f9:d9:0f:34:a3:ed:4d:
70:d5:5f:be:27:70:0b:da:51:b1:2e:a3:67:3c:d4:
37:ed:6d:f1:c8:76:c4:3b:50:60:ac:cd:9b:1a:c3:
00:6b:d3:93:a6:36:7b:39:23:02:96:c4:02:bf:55:
72:0d:9d:8a:b0:aa:25:82:e1:a6:c7:7e:d7:6a:84:
e9:95:69:14:d4:65:cd:2c:79:c9:a2:84:b5:53:ed:
ad:46:6d:5c:74:df:5b:52:40:b3:65:56:21:4d:9c:
72:30:9b:9d:74:8e:40:f0:b4:89:cb:bb:6a:4d:e4:
2c:09:0b:3c:42:a2:03:bf:6b:38:2d:6c:00:29:a3:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5D:71:EF:B7:50:31:B9:E1:04:B7:3A:A8:CE:FF:D7:B9:B6:45:AB
X509v3 Authority Key Identifier:
keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:57:9d:8b:81:ea:0c:08:ac:97:d5:8b:98:45:56:f1:b9:b2:
83:10:ff:47:f0:6d:96:fb:96:53:c6:a4:b7:e0:85:60:24:82:
67:88:d4:2a:53:de:81:66:d0:57:70:e8:45:b7:ba:31:51:59:
a6:e2:f4:ad:07:b1:8d:28:f9:59:cc:50:e5:3d:43:42:29:f0:
98:14:de:83:36:03:bf:49:24:9f:da:22:b6:53:2e:f9:78:8b:
87:43:d8:68:cd:65:da:ae:f3:9f:e6:32:93:28:1d:ed:67:08:
dd:94:26:03:fd:e9:fa:4e:2a:c8:75:74:e1:a9:93:4a:8a:da:
2f:36:26:39:08:b6:62:5e:28:0a:31:c9:e5:3d:e4:b7:38:77:
51:cf:c5:9b:d4:3f:c2:d4:48:31:d9:35:ff:64:83:d0:ef:2e:
ad:a1:63:f0:61:ca:ce:ce:22:d4:58:5c:59:df:27:37:f5:1d:
c8:5a:2e:a9:6c:34:92:7f:ed:09:fe:45:aa:35:47:c7:70:69:
43:bd:33:23:da:21:2d:b9:a1:33:84:c2:03:00:0a:7f:60:99:
3b:d1:70:84:c6:26:4a:ff:2a:76:b0:2f:43:d7:8b:98:87:aa:
14:5f:60:19:5f:d4:07:f1:e3:53:5e:4a:1e:40:92:1e:10:ee:
11:92:2f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 23:39:24 2025 by rpki-client