This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: XCUXT0iC2RKxMH2C5vkQ3YfVhFY9ceJUHeqOr8FZWy8= Subject key identifier: 6B:DB:E0:56:16:BA:1C:ED:BF:B5:6F:CC:05:C9:27:27:BC:4D:D3:16 Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 12D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 1297 Signing time: Mon 22 Dec 2025 16:49:24 +0000 Manifest this update: Mon 22 Dec 2025 16:49:23 +0000 Manifest next update: Mon 29 Dec 2025 16:49:23 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: AhHX6pYFm6AAVaS6uiFf3ePXOOCru6c/QtBr8bHs+LQ=) 2: 3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa (hash: 4YmEMzZF9Z0+vuAqy9c7qXvkwg3h0FbJupKtjQXz9Dw=) 3: DA505546B74C11ED916B5A6AC4F9AE02.roa (hash: bQXgreOQfjcZIW7Fs2Nd+z0T7ScPCTCPY8Qz24HcTtw=) 4: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: ugTs/oyoKALkGSyMUkjHh2f/tiPGip4BWJ+dEzDMSyU=) 5: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (hash: 11dlVlB/PO6fnix52QSfsX/IiOKlpmgXxr8nA3TejRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4816 (0x12d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Dec 22 16:49:23 2025 GMT Not After : Dec 29 16:49:23 2025 GMT Subject: CN=69497693-6f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:a7:52:c3:de:ac:78:b7:4a:c9:af:3e:6e: 86:af:7e:81:a7:a3:28:80:05:c5:ad:eb:32:78:ca: cd:b0:6d:03:dd:94:7e:21:2a:00:82:80:49:b9:b4: b8:47:2c:16:76:d1:4c:88:61:d5:a3:20:52:91:e7: d7:a1:bc:86:a4:af:2b:3d:d2:6f:b7:0d:c1:e8:ee: 8f:fa:d6:ed:4a:5c:fb:fb:5b:8e:f8:7e:c1:d2:45: 63:00:e0:42:97:f4:e3:f5:83:a3:a2:bc:f2:7a:b3: 15:d5:c8:c4:ab:32:9a:6a:c6:7f:d0:53:ef:3d:1c: 2c:d5:d6:fb:75:c5:72:92:01:13:e3:0a:22:ce:c6: 94:f7:76:57:c0:42:c7:47:01:9b:e9:81:8d:89:a0: 57:72:a7:9b:08:09:22:d5:bd:e3:5d:ea:b7:00:50: e2:67:e5:1c:91:01:ce:ea:bd:d8:a1:26:e3:98:6c: f5:d7:5d:74:ff:ba:7d:2e:22:b0:5f:4b:07:10:37: 0b:19:26:3b:92:37:98:92:1c:80:8c:0d:e4:6a:ba: 7a:ba:a5:77:aa:60:91:01:fe:43:c7:6f:0c:3c:b1: dd:af:3b:d3:df:f4:92:64:17:aa:e1:bc:3a:f1:01: df:76:3e:fe:45:a7:a1:9f:21:8a:e1:9b:60:26:99: 92:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DB:E0:56:16:BA:1C:ED:BF:B5:6F:CC:05:C9:27:27:BC:4D:D3:16 X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d5:57:ed:d8:4e:fe:30:16:40:0c:a4:ae:48:82:13:2d:f1: c8:d2:74:35:9a:73:ba:53:ee:76:fd:93:c5:49:85:80:44:7b: a4:8c:44:2c:05:aa:ca:f2:2b:50:bb:9e:16:2e:a4:0b:b9:b2: 3c:29:49:30:e5:b8:0e:f8:45:19:ef:a0:e0:89:8b:cb:3b:2a: d4:d2:59:b6:75:3c:69:7b:fd:f4:da:e3:e3:90:8c:2c:e4:57: 42:88:64:c4:55:a9:8f:6a:6a:ff:04:45:46:78:2d:a3:2e:4f: 22:72:3f:b1:9b:d3:19:e7:cc:2a:1f:a0:f0:ed:29:43:08:a9: 9b:43:c6:88:2f:5e:34:e0:89:fd:22:07:b8:6d:5f:ed:62:27: 70:1e:49:1a:e6:cc:cd:28:6d:dd:6d:98:eb:6e:aa:bc:08:70: 96:81:4f:01:45:f7:b1:03:6a:2a:ff:9e:08:45:7a:38:d4:2a: c0:93:f4:e6:03:0a:7f:07:b0:62:63:f6:87:47:45:07:18:e7: 5d:d5:f3:59:07:74:4d:55:61:f3:ff:ab:2a:f2:90:a5:78:c5: bd:7b:c2:6d:8a:89:bb:7f:dc:f3:b9:c3:6f:7e:15:7b:82:90: a3:ba:d5:d7:b2:2d:b5:1e:30:3c:36:30:f1:ad:da:40:e5:90: 66:2f:3c:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjUxMjIyMTY0OTIzWhcNMjUxMjI5MTY0OTIzWjAYMRYwFAYD VQQDDA02OTQ5NzY5My02ZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKKnUsPerHi3SsmvPm6Gr36Bp6MogAXFresyeMrNsG0D3ZR+ISoAgoBJubS4 RywWdtFMiGHVoyBSkefXobyGpK8rPdJvtw3B6O6P+tbtSlz7+1uO+H7B0kVjAOBC l/Tj9YOjorzyerMV1cjEqzKaasZ/0FPvPRws1db7dcVykgET4woizsaU93ZXwELH RwGb6YGNiaBXcqebCAki1b3jXeq3AFDiZ+UckQHO6r3YoSbjmGz11110/7p9LiKw X0sHEDcLGSY7kjeYkhyAjA3karp6uqV3qmCRAf5Dx28MPLHdrzvT3/SSZBeq4bw6 8QHfdj7+RaehnyGK4ZtgJpmSZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvb4FYW uhztv7VvzAXJJye8TdMWMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA71Vft2E7+MBZADKSuSIITLfHI0nQ1mnO6U+52/ZPFSYWARHukjEQs BarK8itQu54WLqQLubI8KUkw5bgO+EUZ76DgiYvLOyrU0lm2dTxpe/302uPjkIws 5FdCiGTEVamPamr/BEVGeC2jLk8icj+xm9MZ58wqH6Dw7SlDCKmbQ8aIL1404In9 Ige4bV/tYidwHkka5szNKG3dbZjrbqq8CHCWgU8BRfexA2oq/54IRXo41CrAk/Tm Awp/B7BiY/aHR0UHGOdd1fNZB3RNVWHz/6sq8pCleMW9e8Jtiom7f9zzucNvfhV7 gpCjutXXsi21HjA8NjDxrdpA5ZBmLzxQ -----END CERTIFICATE-----Generated at Tue Dec 23 21:54:30 2025 by rpki-client