This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft File: VsaTBbXrpUJVXYx4xWGremzRqiw.mft (raw, json) Hash identifier: 1GlhDZyhGmlW1pClkXsR6ew4FEjTwqsgZwPIoLaURiE= Subject key identifier: 70:95:3A:D2:A9:F1:E5:E9:C4:50:8E:A1:75:D9:49:E9:35:F7:48:E1 Authority key identifier: 56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C Certificate issuer: /CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft Manifest number: C4 Signing time: Tue 23 Dec 2025 04:54:34 +0000 Manifest this update: Tue 23 Dec 2025 04:54:33 +0000 Manifest next update: Tue 30 Dec 2025 04:54:33 +0000 Files and hashes: 1: VsaTBbXrpUJVXYx4xWGremzRqiw.crl (hash: klo0o7Pnxtcsn+TMw2X2+hoTpiGVmDKxZHHDHBVnqXs=) 2: 57680C9CCA9911F0A4E15D65C4F9AE02.roa (hash: Z9LTiur1herT8zSPtiHbMjkBlisQeIO9j0t2u6mg3io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EEF8, serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C Validity Not Before: Dec 23 04:54:33 2025 GMT Not After : Dec 30 04:54:33 2025 GMT Subject: CN=694a208a-62cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:e2:29:1e:b7:53:2a:a2:44:a7:ba:2e:41: 38:8c:64:02:24:74:5a:33:f5:b8:33:27:54:3a:98: 71:fc:dd:4a:a8:cc:9d:12:56:b3:19:a7:d5:38:03: c0:89:13:80:42:20:69:0a:a8:a9:ed:0f:39:16:5e: c5:14:98:15:88:e3:6b:bb:09:07:1b:c3:22:5a:0a: 69:87:34:c3:90:8d:b7:b0:5d:4a:82:80:cf:a7:1a: c6:30:45:2f:8e:ee:bd:42:22:8e:cb:f0:85:b3:b7: 18:b2:c7:a6:7d:cd:cd:b4:3f:5d:81:6a:cb:88:ef: 6b:b2:a8:1e:a9:20:b7:03:37:43:82:c0:28:0a:ed: 26:ba:a9:a8:e7:e8:c3:ad:17:72:d9:8d:0a:07:2f: 8e:b2:c4:18:c3:34:47:10:1c:a0:a6:41:57:b0:e7: 32:43:9b:50:4b:e7:f7:c5:b1:49:04:0d:00:b9:f5: 73:41:88:c7:35:41:79:e4:40:5a:70:9c:cd:7c:98: 78:6c:a0:03:59:1b:c8:39:8b:c9:87:3c:22:f0:95: 1d:ab:81:57:80:66:ea:8a:5d:4c:65:97:c9:58:6f: 30:4a:b7:c5:97:ce:25:e8:47:51:5b:d2:d7:fe:61: 34:ea:a6:cf:f5:1d:f9:84:8a:cb:69:92:82:c8:a8: e3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:95:3A:D2:A9:F1:E5:E9:C4:50:8E:A1:75:D9:49:E9:35:F7:48:E1 X509v3 Authority Key Identifier: keyid:56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:b8:41:0b:ec:a2:03:91:ca:79:b4:4f:c0:23:21:b3:66:d4: 85:9a:c9:6a:5a:74:4a:f1:b4:17:57:b7:28:76:e8:ac:1c:3d: 7e:02:50:fe:a2:10:70:33:02:57:d1:84:da:fa:72:7d:88:68: a3:32:7f:37:30:11:30:84:ef:9d:be:70:9d:ec:23:15:32:03: 1a:cb:2e:45:84:03:36:3d:d6:54:0c:dc:af:6d:1f:bf:b4:b5: 8c:1e:7e:b9:7e:9a:62:23:0a:bc:35:e0:da:83:a1:58:14:52: ef:e3:d7:9a:fb:54:24:c2:8a:b5:d5:01:3b:60:1b:86:02:58: f1:6c:24:9b:21:df:f0:65:92:d1:45:46:9a:21:a4:54:f6:d5: 32:82:02:b6:46:7c:30:c5:04:00:16:a5:21:cd:2c:45:dc:0e: 46:ee:7b:ad:3d:dc:1d:f7:0e:fa:4e:9a:62:ff:3e:af:37:df: 5c:c9:05:ff:aa:33:ba:dc:2c:c3:b5:b6:26:1f:b3:1c:bd:a7: a5:60:f2:7a:75:3f:2c:20:e4:7a:ac:08:cd:07:98:3a:84:88: e0:45:73:8c:39:97:81:88:81:a7:55:9f:60:c7:c6:02:4c:bc: 50:49:13:5b:98:03:d3:89:f8:09:c4:25:29:c0:a3:6c:78:ad: 3c:87:e8:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVFRjgxMTAvBgNVBAUTKDU2QzY5MzA1QjVFQkE1NDI1NTVEOEM3OEM1NjFBQjdB NkNEMUFBMkMwHhcNMjUxMjIzMDQ1NDMzWhcNMjUxMjMwMDQ1NDMzWjAYMRYwFAYD VQQDDA02OTRhMjA4YS02MmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxc3iKR63UyqiRKe6LkE4jGQCJHRaM/W4MydUOphx/N1KqMydElazGafVOAPA iROAQiBpCqip7Q85Fl7FFJgViONruwkHG8MiWgpphzTDkI23sF1KgoDPpxrGMEUv ju69QiKOy/CFs7cYssemfc3NtD9dgWrLiO9rsqgeqSC3AzdDgsAoCu0muqmo5+jD rRdy2Y0KBy+OssQYwzRHEBygpkFXsOcyQ5tQS+f3xbFJBA0AufVzQYjHNUF55EBa cJzNfJh4bKADWRvIOYvJhzwi8JUdq4FXgGbqil1MZZfJWG8wSrfFl84l6EdRW9LX /mE06qbP9R35hIrLaZKCyKjj5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCVOtKp 8eXpxFCOoXXZSek190jhMB8GA1UdIwQYMBaAFFbGkwW166VCVV2MeMVhq3ps0aos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUVGOC85Nzk5RTZEMEJC QzQxMUVGQjk4NUJFM0ZDNEY5QUUwMi9Wc2FUQmJYcnBVSlZYWXg0eFdHcmVtelJx aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZzYVRCYlhycFVKVlhZeDR4V0dyZW16UnFpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUVGOC85Nzk5RTZEMEJCQzQxMUVGQjk4NUJFM0ZDNEY5QUUwMi9Wc2FUQmJYcnBV SlZYWXg0eFdHcmVtelJxaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+uEEL7KIDkcp5tE/AIyGzZtSFmslqWnRK8bQXV7coduisHD1+AlD+ ohBwMwJX0YTa+nJ9iGijMn83MBEwhO+dvnCd7CMVMgMayy5FhAM2PdZUDNyvbR+/ tLWMHn65fppiIwq8NeDag6FYFFLv49ea+1Qkwoq11QE7YBuGAljxbCSbId/wZZLR RUaaIaRU9tUyggK2RnwwxQQAFqUhzSxF3A5G7nutPdwd9w76Tppi/z6vN99cyQX/ qjO63CzDtbYmH7McvaelYPJ6dT8sIOR6rAjNB5g6hIjgRXOMOZeBiIGnVZ9gx8YC TLxQSRNbmAPTifgJxCUpwKNseK08h+hR -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:38 2025 by rpki-client