This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
File: pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft (raw, json)
Hash identifier: w+dwOPg3Iq1QkJn3ZGARKgFZVFMf0tpmaEdckOe3ONc=
Subject key identifier: 6B:01:11:2D:CA:A0:1A:E2:E5:97:E6:9C:74:83:5C:78:89:12:D5:2E
Authority key identifier: A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67
Certificate issuer: /CN=A919AD11/serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
Manifest number: 0113
Signing time: Sun 21 Dec 2025 04:03:39 +0000
Manifest this update: Sun 21 Dec 2025 04:03:39 +0000
Manifest next update: Sun 28 Dec 2025 04:03:39 +0000
Files and hashes: 1: pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl (hash: ZpvKCzY37XaXWneIF+48CS3WMZQiwI4mhIHip7AROEU=)
2: FB29FEA06C1F11EFA8C5694EC4F9AE02.roa (hash: lcZB3z1c/RDD2H75d40NX0zmlgKhDSF1Om3/hMjJ4tA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl
rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AD11, serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
Validity
Not Before: Dec 21 04:03:39 2025 GMT
Not After : Dec 28 04:03:39 2025 GMT
Subject: CN=6947719b-ff4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:df:1a:4a:25:d0:f6:58:d5:a8:6c:6d:f2:
cf:5b:4c:8f:ae:4d:95:f9:2c:19:a4:79:b4:97:71:
3e:ac:be:ca:bd:2f:2c:00:25:c5:44:e9:cd:9c:51:
fc:59:c4:76:2e:c0:98:7b:0e:a3:12:25:10:ca:1d:
04:f4:1a:00:33:c6:c2:ec:ee:dc:4d:c4:36:c6:95:
67:7e:4b:cf:81:dd:ad:c6:69:bf:b2:b6:ca:14:cc:
c0:58:88:c0:59:b7:86:c4:31:10:f5:46:6d:b6:67:
dd:b7:35:9c:b1:13:31:df:1f:1d:a1:65:15:57:76:
67:54:7b:10:40:4b:b7:85:c6:88:50:5a:46:c8:1b:
31:ac:05:bb:96:f1:6c:4d:89:d3:cd:f2:83:37:bb:
2e:7f:78:12:98:53:5f:39:ca:7d:9a:73:d8:54:ec:
d7:23:1a:9e:ea:72:78:6b:e0:b6:30:98:fb:f7:2c:
17:6e:ef:37:77:09:e0:4f:d8:e7:67:86:dc:88:47:
43:ff:49:11:6c:d3:95:96:f5:1e:c0:db:17:b6:16:
78:47:dd:82:31:38:b2:56:77:4c:d1:f1:4b:07:02:
23:6a:5e:5c:50:a5:79:e5:ce:32:f1:7e:fc:e3:25:
7a:56:b1:59:48:16:e5:7a:d8:5e:b1:f6:c8:2d:2a:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:01:11:2D:CA:A0:1A:E2:E5:97:E6:9C:74:83:5C:78:89:12:D5:2E
X509v3 Authority Key Identifier:
keyid:A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:a7:c4:9c:49:20:13:7e:ad:a3:8c:e5:3e:47:37:ec:1a:be:
bc:5f:bd:a9:d4:72:55:36:f2:5d:79:15:50:0f:b1:3b:de:76:
73:f0:02:96:96:3c:62:15:86:d8:df:fa:37:db:a2:a6:45:fb:
9a:d7:4c:08:8b:73:66:54:27:da:f6:b8:c5:d9:09:3e:3f:88:
de:d2:5e:6f:ad:8f:dc:73:b5:62:9b:0f:80:7b:6b:d8:e7:e5:
10:d0:37:1f:b2:ce:57:fd:f8:ae:ae:67:ba:a0:3d:58:2e:fa:
a3:66:55:e6:89:00:75:b8:82:d5:b4:f3:16:1b:17:71:d8:7c:
6c:e1:0e:b1:8e:99:2d:c9:8e:20:2c:f0:91:eb:cb:d6:c8:34:
13:b9:41:32:e7:e6:7e:c5:6a:68:13:9a:dd:13:53:d1:64:27:
2e:09:ca:3f:fd:60:99:10:5c:68:a2:52:66:7f:44:b4:78:47:
f4:a9:4d:cd:28:96:9d:a3:41:a4:5f:a2:08:49:25:af:ab:c8:
dc:3f:67:ef:7f:73:0d:91:f5:8e:36:68:60:d5:78:4a:7a:af:
93:fc:0d:2c:68:47:58:d8:3b:8a:53:28:97:d2:46:1a:64:57:
16:5b:28:f4:b0:ee:68:77:b1:f9:9f:45:94:35:ff:73:8c:43:
79:fb:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 10:05:29 2025 by rpki-client