This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json)
Hash identifier: ulNILMNr4IJ6E60UdzC14f7c3LC+uxxQDSBcfesoVCk=
Subject key identifier: 0D:00:F2:CD:27:00:DB:FC:F9:E8:B9:6A:1F:17:16:A3:1D:E2:2C:D3
Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Certificate serial: 15A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
Manifest number: 1585
Signing time: Wed 31 Dec 2025 16:34:46 +0000
Manifest this update: Wed 31 Dec 2025 16:34:46 +0000
Manifest next update: Wed 07 Jan 2026 16:34:46 +0000
Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: HMLO/bx+kApTcYohMbl99yqwlx+PiLcqDoxgd+mUYwM=)
2: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: 9hsbmWbhyRE5mUOuFHl04Y4Uut8mlBoehod5tJbgja0=)
3: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: HFVHQ+wL1mQEZ01i4CvLThp7tarfU14b1p5XC7Hrt/Y=)
4: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: WVZ1/uIyOSqp7Em7YlQqzkYloU6mxq2B8kLksLfxIF8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 16:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5536 (0x15a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Validity
Not Before: Dec 31 16:34:46 2025 GMT
Not After : Jan 7 16:34:46 2026 GMT
Subject: CN=695550a6-7375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:01:e5:53:a8:7e:e7:fc:45:7b:56:b0:b2:84:
8c:75:49:0b:df:aa:2a:51:33:4c:c3:c2:91:22:35:
79:59:64:b6:8b:0a:1a:af:6b:a7:fe:d0:a4:06:06:
c8:80:8a:8c:60:30:ad:a3:a1:b2:b1:f5:b0:40:28:
e1:f9:84:8c:b1:ba:fb:a9:4f:d0:c6:51:fe:24:b7:
81:1e:07:17:80:83:b7:50:00:50:d9:f3:76:65:db:
d1:35:a7:04:8b:f1:7d:22:f7:10:2d:c0:4a:7b:5a:
b0:dd:d4:83:d3:51:7c:41:44:ec:eb:19:58:ef:4d:
8e:9e:16:8d:86:b0:e6:2a:df:8d:5b:d8:cd:fc:bb:
5c:a2:e1:20:cb:b8:2b:15:ef:c6:34:b4:aa:ad:61:
af:ef:5b:69:1d:80:86:cc:66:6a:21:74:52:93:c7:
59:0f:39:f4:66:30:7c:12:88:00:c9:9b:9b:0e:e3:
17:ba:c1:b1:54:a9:db:34:7e:3d:59:4c:a8:40:9b:
de:5b:71:a6:5f:b8:30:0e:49:84:7b:1c:7e:88:5e:
f9:e6:39:ef:73:73:f9:33:66:43:14:2c:41:53:55:
94:2d:09:c4:21:18:d7:10:dd:de:d2:33:18:60:55:
3a:c9:c9:a9:9f:ce:21:f2:09:4e:1d:15:0e:3c:17:
36:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:00:F2:CD:27:00:DB:FC:F9:E8:B9:6A:1F:17:16:A3:1D:E2:2C:D3
X509v3 Authority Key Identifier:
keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:d9:ee:e3:d7:db:12:2a:d2:be:11:9d:05:40:31:88:51:2e:
8e:2d:73:d3:c2:3a:b6:90:72:0d:3f:40:3e:e4:5b:48:9b:a7:
fa:c0:92:23:6e:3b:59:5f:f6:af:56:62:49:80:ac:94:77:38:
08:4a:72:ab:f4:1a:fe:2a:0b:61:29:57:b2:b9:1f:d2:34:32:
1f:40:13:e8:29:d3:2b:e8:4a:97:79:0a:ef:6f:ff:fc:8e:ec:
17:5f:86:a4:6e:63:27:41:93:8d:a3:b8:55:c0:42:43:ac:ed:
cc:7a:1b:02:bc:ad:fd:dc:47:d8:0a:27:b6:e3:5b:70:b2:55:
fa:60:3c:5a:6f:6a:c1:d8:01:9f:8a:65:b9:23:36:54:24:a8:
ae:d8:58:ea:8d:93:08:0e:63:13:77:6b:f4:c3:66:a4:11:62:
1a:19:4f:df:fa:22:1f:9e:59:46:a9:75:13:33:3c:cf:fe:18:
a7:10:d9:0e:fe:50:b6:47:9f:04:09:a4:e3:94:2a:e9:3b:60:
2c:3a:2e:40:74:e4:af:4c:88:d9:5a:a1:85:9a:96:5f:52:28:
ad:fd:06:6f:7c:99:9a:89:ab:59:65:13:f4:ef:a5:10:c1:a8:
8b:48:0a:27:58:ac:23:15:98:55:3f:27:0a:df:c7:76:ba:38:
64:79:f7:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD
QzQ5NzA1OTMwHhcNMjUxMjMxMTYzNDQ2WhcNMjYwMTA3MTYzNDQ2WjAYMRYwFAYD
VQQDDA02OTU1NTBhNi03Mzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhgHlU6h+5/xFe1awsoSMdUkL36oqUTNMw8KRIjV5WWS2iwoar2un/tCkBgbI
gIqMYDCto6GysfWwQCjh+YSMsbr7qU/QxlH+JLeBHgcXgIO3UABQ2fN2ZdvRNacE
i/F9IvcQLcBKe1qw3dSD01F8QUTs6xlY702OnhaNhrDmKt+NW9jN/LtcouEgy7gr
Fe/GNLSqrWGv71tpHYCGzGZqIXRSk8dZDzn0ZjB8EogAyZubDuMXusGxVKnbNH49
WUyoQJveW3GmX7gwDkmEexx+iF755jnvc3P5M2ZDFCxBU1WULQnEIRjXEN3e0jMY
YFU6ycmpn84h8glOHRUOPBc2xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0A8s0n
ANv8+ei5ah8XFqMd4izTMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD
QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03
emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBo2e7j19sSKtK+EZ0FQDGIUS6OLXPTwjq2kHINP0A+5FtIm6f6wJIj
bjtZX/avVmJJgKyUdzgISnKr9Br+KgthKVeyuR/SNDIfQBPoKdMr6EqXeQrvb//8
juwXX4akbmMnQZONo7hVwEJDrO3MehsCvK393EfYCie241twslX6YDxab2rB2AGf
imW5IzZUJKiu2FjqjZMIDmMTd2v0w2akEWIaGU/f+iIfnllGqXUTMzzP/hinENkO
/lC2R58ECaTjlCrpO2AsOi5AdOSvTIjZWqGFmpZfUiit/QZvfJmaiatZZRP076UQ
waiLSAonWKwjFZhVPycK38d2ujhkefe0
-----END CERTIFICATE-----
Generated at Thu Jan 1 19:35:25 2026 by rpki-client