This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft File: VFiH13GXSLRp0FP_MWpqV6uZYjM.mft (raw, json) Hash identifier: O0mgLBpruGkXqeQAtoQ++UEJv1MFY3EKyjGVkDFe1iU= Subject key identifier: 9B:AB:03:44:FC:05:33:7C:41:FB:FD:65:AD:5B:50:D9:A2:42:29:6C Authority key identifier: 54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 Certificate issuer: /CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233 Certificate serial: 087D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft Manifest number: 0871 Signing time: Mon 22 Dec 2025 19:59:58 +0000 Manifest this update: Mon 22 Dec 2025 19:59:57 +0000 Manifest next update: Mon 29 Dec 2025 19:59:57 +0000 Files and hashes: 1: VFiH13GXSLRp0FP_MWpqV6uZYjM.crl (hash: s2wTakkuadGMlwULvyzn3SQjDjBc0/xI2F58Mazsfl8=) 2: CA290E34341311EFA3C99F09C4F9AE02.roa (hash: F2ehSlNBpZVAOeI83NaC14EsDciABgTNrvpmZu4awNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2173 (0x87d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91173B6, serialNumber=545887D7719748B469D053FF316A6A57AB996233 Validity Not Before: Dec 22 19:59:57 2025 GMT Not After : Dec 29 19:59:57 2025 GMT Subject: CN=6949a33e-07fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:30:a3:11:b8:e7:ba:b1:a8:b3:3d:a2:cf:78: 5a:aa:47:cc:21:7a:e1:4c:75:54:37:f2:e3:64:58: 12:3c:a3:8b:e0:b8:23:84:c7:cb:e8:c2:a9:55:63: c4:66:73:ad:96:c6:a5:54:a7:18:47:23:e1:cf:eb: ac:b0:dc:fe:81:5e:58:96:5b:47:f4:67:9b:cd:aa: eb:76:7d:56:ea:b0:4b:4e:c2:e3:71:6e:19:08:4e: e2:b5:2f:be:ff:56:71:fb:2c:a6:ee:1a:ac:b1:90: 59:7c:1c:e6:22:88:d6:0f:ba:b8:98:8f:23:6b:fb: 46:cc:0d:c9:bd:ac:ff:7b:5d:49:36:bb:36:c6:48: 92:ea:46:9a:06:fd:5a:29:73:c3:98:bf:e7:0e:99: 0b:e9:f1:10:22:69:aa:b7:35:9e:b8:7c:46:45:8c: 3c:fa:5f:23:e8:29:35:3a:a1:a6:73:d0:99:cc:58: ea:bd:18:23:5c:68:91:6c:d9:ff:cb:02:b6:e7:26: 32:2b:cb:14:f9:69:6f:08:e4:54:c6:12:eb:c7:c5: 04:1f:1c:32:a0:16:1b:f2:df:c5:40:16:dc:bb:e6: 5a:75:44:5e:36:d2:79:98:85:6f:9b:b5:80:5b:83: 81:b2:1c:bc:ce:bf:95:d0:c1:50:0f:7a:60:ca:73: 46:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AB:03:44:FC:05:33:7C:41:FB:FD:65:AD:5B:50:D9:A2:42:29:6C X509v3 Authority Key Identifier: keyid:54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:0a:e9:70:d7:be:0b:99:ef:33:dc:2c:5b:e8:0c:9c:af:77: 98:79:4c:2b:2b:fb:fa:a5:e7:5a:87:d5:64:2f:71:f2:cd:b9: 59:6f:80:96:a7:24:13:43:28:61:8c:e4:c1:d3:3d:f9:76:72: a3:af:73:f4:33:e9:74:49:4e:2a:38:38:04:14:7a:db:80:dc: 51:a8:10:ec:c2:d6:c0:ad:ec:e1:a7:32:71:b5:b4:37:13:2a: c3:a4:4b:6c:eb:1b:2c:1a:1a:ef:1a:47:52:7b:56:ef:30:36: b6:a3:dc:d6:2e:5a:85:57:aa:ac:a7:8c:c2:8c:32:81:c8:07: 14:e9:b0:a2:e6:f9:f0:8a:35:8c:00:65:01:b9:7d:6f:03:93: 88:0c:0f:9d:06:1b:17:c2:a3:3d:38:97:64:d4:92:42:3c:f6: d2:db:d2:e6:ad:62:33:14:c3:76:67:66:8d:68:16:61:75:a1: 81:a2:f1:c3:07:3f:f6:17:92:bf:ca:c1:bd:a2:6b:23:d4:f9: 45:ab:c0:3f:77:98:23:45:13:e4:34:ba:8b:73:4c:93:59:3c: 82:96:87:97:b4:9e:39:1c:8b:5a:27:00:18:6d:80:2d:8d:8e: 6a:70:9e:f2:89:47:11:18:cc:e2:db:2b:55:fe:4c:5f:be:d7: 29:cd:37:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczQjYxMTAvBgNVBAUTKDU0NTg4N0Q3NzE5NzQ4QjQ2OUQwNTNGRjMxNkE2QTU3 QUI5OTYyMzMwHhcNMjUxMjIyMTk1OTU3WhcNMjUxMjI5MTk1OTU3WjAYMRYwFAYD VQQDDA02OTQ5YTMzZS0wN2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDCjEbjnurGosz2iz3haqkfMIXrhTHVUN/LjZFgSPKOL4LgjhMfL6MKpVWPE ZnOtlsalVKcYRyPhz+ussNz+gV5YlltH9Gebzarrdn1W6rBLTsLjcW4ZCE7itS++ /1Zx+yym7hqssZBZfBzmIojWD7q4mI8ja/tGzA3Jvaz/e11JNrs2xkiS6kaaBv1a KXPDmL/nDpkL6fEQImmqtzWeuHxGRYw8+l8j6Ck1OqGmc9CZzFjqvRgjXGiRbNn/ ywK25yYyK8sU+WlvCORUxhLrx8UEHxwyoBYb8t/FQBbcu+ZadUReNtJ5mIVvm7WA W4OBshy8zr+V0MFQD3pgynNG2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJurA0T8 BTN8Qfv9Za1bUNmiQilsMB8GA1UdIwQYMBaAFFRYh9dxl0i0adBT/zFqalermWIz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzNCNi8xMEY0ODQ4NkUx OUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNMUnAwRlBfTVdwcVY2dVpZ ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGaUgxM0dYU0xScDBGUF9NV3BxVjZ1WllqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzNCNi8xMEY0ODQ4NkUxOUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNM UnAwRlBfTVdwcVY2dVpZak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxCulw174Lme8z3Cxb6Aycr3eYeUwrK/v6pedah9VkL3HyzblZb4CW pyQTQyhhjOTB0z35dnKjr3P0M+l0SU4qODgEFHrbgNxRqBDswtbArezhpzJxtbQ3 EyrDpEts6xssGhrvGkdSe1bvMDa2o9zWLlqFV6qsp4zCjDKByAcU6bCi5vnwijWM AGUBuX1vA5OIDA+dBhsXwqM9OJdk1JJCPPbS29LmrWIzFMN2Z2aNaBZhdaGBovHD Bz/2F5K/ysG9omsj1PlFq8A/d5gjRRPkNLqLc0yTWTyCloeXtJ45HItaJwAYbYAt jY5qcJ7yiUcRGMzi2ytV/kxfvtcpzTfR -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:23 2025 by rpki-client