This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
File: V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft (raw, json)
Hash identifier: WfTI0HI1GjWzVx8YEhh28VXQxhF1Ll0dk6U94uo/8tw=
Subject key identifier: D9:50:BA:10:0D:E1:C9:6F:3B:63:6B:90:34:2A:BA:AB:44:53:6B:7D
Authority key identifier: 57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1
Certificate issuer: /CN=A919C1A2/serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1
Certificate serial: 0261
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
Manifest number: 025B
Signing time: Sun 21 Dec 2025 00:53:48 +0000
Manifest this update: Sun 21 Dec 2025 00:53:48 +0000
Manifest next update: Sun 28 Dec 2025 00:53:48 +0000
Files and hashes: 1: V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl (hash: Vsv+/aftIePWV47nOgpWOnBIrVL/vbcjE3oNOPZnUCU=)
2: 46B3DF5A46E111EDB39B8526C4F9AE02.roa (hash: h0Rd404TCo1v+12j0LNcfmWqFAfQqCTjn2QEViHWWT8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl
rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 00:53:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C1A2, serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1
Validity
Not Before: Dec 21 00:53:48 2025 GMT
Not After : Dec 28 00:53:48 2025 GMT
Subject: CN=6947451c-d6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:08:17:31:a7:45:11:8d:7d:d1:e1:32:1a:
9c:44:70:7c:cb:a3:3c:30:59:40:cb:de:18:91:61:
be:9d:42:03:e2:6c:7c:17:65:ef:62:f8:69:90:9d:
7f:61:05:79:cf:42:22:b3:51:16:c8:ff:57:a1:b9:
1d:72:88:e3:72:f8:b6:db:e8:e6:51:cd:31:50:0a:
37:fd:b1:cf:16:da:2f:85:ee:04:40:fa:9d:60:fd:
a4:bc:47:cc:78:61:1e:9f:d4:32:54:8d:f9:e8:43:
58:01:a2:dd:49:4b:40:c2:e7:ab:bb:d0:2a:f8:74:
f1:b0:20:3b:d7:ff:48:93:51:04:ae:ff:92:2b:98:
e0:9e:70:52:08:e0:08:fe:4c:b1:3a:b0:b2:38:de:
bc:3d:07:fa:9a:79:ff:de:2a:57:c6:ee:03:a5:64:
2c:67:32:45:4b:67:e3:a3:57:c9:7d:80:0f:59:e0:
23:87:f2:8e:ab:f7:fa:35:9b:8e:09:de:e7:73:63:
80:1f:5e:11:da:e2:02:e6:da:84:bc:da:4c:d2:ab:
cd:4a:d5:af:f2:4e:f7:53:fd:eb:ac:d5:36:02:55:
88:64:37:02:ae:38:3a:0c:af:e0:19:45:6b:87:f3:
ac:90:35:35:41:c5:3f:8b:32:6a:49:ca:22:c6:3a:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:50:BA:10:0D:E1:C9:6F:3B:63:6B:90:34:2A:BA:AB:44:53:6B:7D
X509v3 Authority Key Identifier:
keyid:57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:27:cc:eb:3a:e1:97:fe:46:ed:5c:98:df:9d:a0:55:bb:4e:
82:90:64:61:f4:29:62:3a:57:f5:0e:e6:91:7b:4a:8a:6d:90:
fa:e1:e9:24:eb:86:c1:84:4e:35:d7:b1:4f:ea:6d:90:07:9b:
b7:ec:e0:86:c8:d5:d7:99:0d:ab:af:0c:71:3c:03:96:3c:4f:
59:91:67:a1:38:8c:02:04:c0:28:02:a6:83:de:e1:f1:ba:8e:
d9:94:fe:f6:12:3d:92:6e:d3:35:54:1e:71:f6:69:c5:68:79:
50:21:c1:e3:a6:2d:e3:7f:ed:c9:c9:2e:30:b7:ce:55:7a:93:
30:80:98:f5:dc:24:e5:89:1a:06:fb:c6:0f:45:ab:f1:41:90:
60:1a:88:34:7d:b7:c5:33:29:8a:df:f5:66:01:90:65:7f:59:
f1:3b:bd:72:ba:ff:72:9e:eb:36:5d:51:d7:ad:63:24:d5:98:
42:e3:3a:00:b2:14:11:05:20:fe:d5:96:01:fe:58:6a:34:b4:
a7:86:20:e0:00:12:47:cf:a7:68:7e:6a:ba:a5:a0:c0:20:6f:
e1:cc:2c:e6:6f:30:89:5d:70:bc:1d:98:8b:66:ed:de:e8:ca:
9b:d0:0d:c0:91:c4:16:d5:3c:d8:8f:e8:07:58:2c:63:7e:77:
17:e7:37:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 13:04:29 2025 by rpki-client