This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft File: Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft (raw, json) Hash identifier: OBfMzwXtYjLdL81xLPwcgfa0WxPjd9tlAI6siiA1iMI= Subject key identifier: 09:F2:F1:3D:23:40:95:F7:35:CF:7A:4A:01:99:3E:AC:13:02:3D:62 Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 Certificate issuer: /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft Manifest number: 0242 Signing time: Mon 08 Dec 2025 19:04:58 +0000 Manifest this update: Mon 08 Dec 2025 19:04:57 +0000 Manifest next update: Mon 15 Dec 2025 19:04:57 +0000 Files and hashes: 1: Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl (hash: 159f48UB5qeNCL8rkZAg4sbITrzUz9/AF6/2RkkFUTI=) 2: 8ED301D0782011F0BDB6E683C4F9AE02.roa (hash: qjBtyTQ/dYsRebIp6ZkwlHiVqfqKITocMEosdGcOqv0=) 3: 96C1C6A0782111F0A5880F87C4F9AE02.roa (hash: G2RSm0IwLRt/typGeA6hLdDQJj9eRF45VegOaQjSFIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 19:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Validity Not Before: Dec 8 19:04:57 2025 GMT Not After : Dec 15 19:04:57 2025 GMT Subject: CN=6937215a-6748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ed:be:66:3f:c1:39:cc:2a:07:8f:6b:dc:54: 6b:a8:50:dc:2e:73:da:9b:31:13:31:97:ea:c7:43: 9d:df:84:30:e6:7c:44:0d:ec:15:ff:f0:e8:be:fb: d3:88:85:81:57:9a:ae:5d:0c:3d:6b:e9:a7:b5:26: b8:0e:7a:f5:38:93:32:ba:84:2f:77:d0:69:6d:dd: ac:f9:33:b3:40:dc:0f:20:fe:37:63:52:a4:0a:ce: cf:a2:89:e2:2d:0e:c0:fa:96:fa:be:49:18:8b:b4: bf:d0:5c:14:89:ef:86:0d:a6:77:75:55:05:79:e0: ad:81:41:88:aa:bb:87:07:f4:82:96:be:35:fa:f4: 28:c2:98:11:3e:a5:58:48:c9:e3:2b:8b:5a:28:67: b1:6b:d0:02:df:84:24:98:cc:9b:17:18:c7:3e:1d: 2e:3b:4d:7e:26:37:60:55:6c:a4:6c:39:01:32:ea: 21:e0:ce:d0:ee:6e:99:b4:45:14:8f:5b:00:46:e5: b6:16:fb:3f:38:1d:5f:d4:0c:ee:fb:46:84:db:83: 08:17:b7:68:96:a3:fc:ad:66:15:fc:4a:ea:d5:68: 4f:c1:02:b1:6c:4a:3a:e4:ed:f3:75:96:b3:50:96: b2:f0:ac:63:d7:55:f1:cf:cf:6f:51:d0:87:29:62: b5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F2:F1:3D:23:40:95:F7:35:CF:7A:4A:01:99:3E:AC:13:02:3D:62 X509v3 Authority Key Identifier: keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:75:96:50:31:02:5d:71:e5:51:a7:d8:6c:74:d4:5e:91:32: 31:9c:84:1f:04:22:ac:b7:18:3a:bc:29:6f:2d:9d:bf:dc:fb: f5:43:dd:c9:ed:4f:4c:6d:60:e2:7d:b4:13:6a:2f:cf:31:d6: 3e:cf:c9:55:f6:c7:5b:45:36:52:57:26:36:ce:5f:15:a4:be: 68:f7:93:c9:6e:8b:6f:d8:13:3a:a1:69:ae:ed:39:46:26:23: 35:44:94:d0:5a:ed:e8:99:2e:81:3c:24:a1:77:73:b8:48:ef: d5:a3:e1:4d:a7:92:7a:5a:0b:d0:90:70:1f:63:65:4b:17:42: 8a:be:04:5b:c5:08:3a:6b:47:14:f6:d9:27:05:bf:d6:4c:5a: 5f:5d:81:5b:6b:4b:4c:e2:44:9b:a1:f9:f9:2e:89:8e:7c:ea: 70:d2:6b:dc:6d:82:4e:09:66:e9:c7:5d:92:54:70:29:dd:0c: f8:72:ad:33:c1:13:6f:90:98:8f:43:f5:20:1d:fc:37:1d:79: 23:54:90:36:2b:50:fd:06:a6:90:03:74:9d:25:ac:e8:b0:9b: bf:8e:35:6b:d0:5e:23:59:d4:e6:4f:60:2f:c9:fa:07:3b:75: f5:c9:00:d2:02:66:db:98:b5:de:24:44:00:be:23:fe:4b:54: 0d:d8:3c:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU1RkI3QkNDQTc0MDI4NUZDODFBQTM2MEYwMkNFMzJG OTU4MTZEQjYwHhcNMjUxMjA4MTkwNDU3WhcNMjUxMjE1MTkwNDU3WjAYMRYwFAYD VQQDEw02OTM3MjE1YS02NzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1O2+Zj/BOcwqB49r3FRrqFDcLnPamzETMZfqx0Od34Qw5nxEDewV//DovvvT iIWBV5quXQw9a+mntSa4Dnr1OJMyuoQvd9Bpbd2s+TOzQNwPIP43Y1KkCs7Pooni LQ7A+pb6vkkYi7S/0FwUie+GDaZ3dVUFeeCtgUGIqruHB/SClr41+vQowpgRPqVY SMnjK4taKGexa9AC34QkmMybFxjHPh0uO01+JjdgVWykbDkBMuoh4M7Q7m6ZtEUU j1sARuW2Fvs/OB1f1Azu+0aE24MIF7dolqP8rWYV/Erq1WhPwQKxbEo65O3zdZaz UJay8Kxj11Xxz89vUdCHKWK1DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAny8T0j QJX3Nc96SgGZPqwTAj1iMB8GA1UdIwQYMBaAFFX7e8ynQChfyBqjYPAs4y+VgW22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS9EQ0Y5OEExNjc3 ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtGX0lHcU5nOEN6akw1V0Ji YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZmdDd6S2RBS0ZfSUdxTmc4Q3pqTDVXQmJiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS9EQ0Y5OEExNjc3ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtG X0lHcU5nOEN6akw1V0JiYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgdZZQMQJdceVRp9hsdNRekTIxnIQfBCKstxg6vClvLZ2/3Pv1Q93J 7U9MbWDifbQTai/PMdY+z8lV9sdbRTZSVyY2zl8VpL5o95PJbotv2BM6oWmu7TlG JiM1RJTQWu3omS6BPCShd3O4SO/Vo+FNp5J6WgvQkHAfY2VLF0KKvgRbxQg6a0cU 9tknBb/WTFpfXYFba0tM4kSbofn5LomOfOpw0mvcbYJOCWbpx12SVHAp3Qz4cq0z wRNvkJiPQ/UgHfw3HXkjVJA2K1D9BqaQA3SdJazosJu/jjVr0F4jWdTmT2AvyfoH O3X1yQDSAmbbmLXeJEQAviP+S1QN2Dwk -----END CERTIFICATE-----Generated at Wed Dec 10 05:06:48 2025 by rpki-client