This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft File: Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json) Hash identifier: 5M6AgJm5Hy93H5pLQy1VbIXAsU9B0Y/gBdwbCkRygAI= Subject key identifier: 2A:BD:BB:A8:71:63:41:69:0B:23:59:03:7D:79:9D:A9:91:0F:04:F3 Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 Certificate issuer: /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Certificate serial: 21F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft Manifest number: 21E4 Signing time: Mon 22 Dec 2025 15:42:39 +0000 Manifest this update: Mon 22 Dec 2025 15:42:39 +0000 Manifest next update: Mon 29 Dec 2025 15:42:39 +0000 Files and hashes: 1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: oq4Cd3vTGcZSNFUuiF8QaiXLfy7KjB4P6Uu6piXS2WM=) 2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: io/JzFFNu1EooH3T4S4KVIMDIKASV6Dqv1IIBBRZFQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8689 (0x21f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DC, serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Validity Not Before: Dec 22 15:42:39 2025 GMT Not After : Dec 29 15:42:39 2025 GMT Subject: CN=694966ef-ed4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:8c:37:a7:37:51:08:f3:76:d3:1d:b8:5d: 5c:55:eb:68:22:11:30:44:57:0f:36:af:fa:ba:be: 08:01:29:fd:05:fe:d6:1b:73:6e:ad:2d:94:d0:17: 56:dc:32:09:9e:c4:43:08:a2:9c:2c:ec:08:ee:ab: 55:07:50:df:48:8f:b4:b1:70:8e:e9:8e:8c:ab:56: 7e:04:31:5b:03:65:f4:d0:4b:03:39:c1:0f:15:c4: 92:79:6d:84:2d:36:dd:a6:39:ec:51:f1:4c:c8:6b: 00:dc:a3:65:32:27:4b:27:b8:9f:38:37:bf:81:e0: 94:9e:45:14:21:95:d6:62:7c:6e:9a:09:e1:7f:5f: df:53:73:21:8a:36:d4:c9:1e:a0:5d:46:4e:17:5a: e7:98:31:00:9e:4b:f9:89:44:37:8e:8b:35:b2:1c: 4a:a6:2c:02:d0:45:b1:8b:8e:19:b8:bc:65:10:e0: 61:6e:10:6e:10:a5:5c:e6:a0:ec:e1:9a:7f:8b:ea: 95:70:31:33:dc:2f:b1:c1:c7:ce:d2:3d:40:0f:e3: 34:f8:48:75:35:c8:e5:97:f5:d7:2c:12:de:21:83: 7b:38:38:4c:1e:2f:9c:64:81:ce:05:6a:00:12:46: 92:14:93:ec:54:a1:5c:62:9e:5a:85:b3:0d:29:47: 4c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BD:BB:A8:71:63:41:69:0B:23:59:03:7D:79:9D:A9:91:0F:04:F3 X509v3 Authority Key Identifier: keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:50:1f:cd:d0:22:b3:4c:9f:24:ea:88:de:cb:d2:c0:3a:fb: 78:ac:ed:fd:e5:32:1c:a8:68:9f:36:f7:73:e4:2f:0f:4a:bb: 9e:b2:e3:4c:4f:4e:c9:f6:e2:81:af:d1:48:35:90:d7:62:a2: be:c2:fd:16:f8:67:c9:fc:85:5e:71:aa:c6:61:b1:9b:94:d6: c2:93:60:1f:81:47:d7:96:d2:a1:fc:eb:41:e7:93:0f:00:7e: 08:0f:2f:f8:08:2a:7a:ab:9f:50:ce:0d:1c:a2:3f:39:98:19: 00:bc:46:7e:52:de:e9:09:53:11:5c:8b:c6:88:1e:41:d8:97: 7c:b1:0f:20:8c:95:ff:ce:e0:34:20:bd:68:e5:d8:df:f5:e0: a1:0f:2f:75:bd:78:e2:9c:7a:64:5a:0e:ca:91:0f:a6:ba:eb: d4:3f:0d:92:40:63:3f:f8:7e:bf:f0:4d:b6:4d:ed:b9:c6:80: 0c:82:54:da:5d:39:a5:7c:cc:68:b5:87:17:f8:f7:bf:42:8b: 23:7f:a0:35:3b:8e:a0:7a:06:aa:03:ad:fd:79:02:2f:7c:35: 83:e6:03:04:15:3f:9f:17:1f:90:b1:74:c3:87:81:5a:86:54: 01:fc:ad:47:0d:a7:c9:6e:76:92:a5:e5:69:19:44:77:0d:7b: bc:df:ac:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREMxMTAvBgNVBAUTKDU2NDZFMDdBMEY2MDI1RjFFMjYwRjFDNDk5NkY5QTY4 MUIyOTIwNzEwHhcNMjUxMjIyMTU0MjM5WhcNMjUxMjI5MTU0MjM5WjAYMRYwFAYD VQQDDA02OTQ5NjZlZi1lZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0mMN6c3UQjzdtMduF1cVetoIhEwRFcPNq/6ur4IASn9Bf7WG3NurS2U0BdW 3DIJnsRDCKKcLOwI7qtVB1DfSI+0sXCO6Y6Mq1Z+BDFbA2X00EsDOcEPFcSSeW2E LTbdpjnsUfFMyGsA3KNlMidLJ7ifODe/geCUnkUUIZXWYnxumgnhf1/fU3MhijbU yR6gXUZOF1rnmDEAnkv5iUQ3jos1shxKpiwC0EWxi44ZuLxlEOBhbhBuEKVc5qDs 4Zp/i+qVcDEz3C+xwcfO0j1AD+M0+Eh1Ncjll/XXLBLeIYN7ODhMHi+cZIHOBWoA EkaSFJPsVKFcYp5ahbMNKUdM0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCq9u6hx Y0FpCyNZA315namRDwTzMB8GA1UdIwQYMBaAFFZG4HoPYCXx4mDxxJlvmmgbKSBx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNEQy9GQUQzRDZGQ0RD NDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pmSGlZUEhFbVctYWFCc3BJ SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZrYmdlZzlnSmZIaVlQSEVtVy1hYUJzcElIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNEQy9GQUQzRDZGQ0RDNDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pm SGlZUEhFbVctYWFCc3BJSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXUB/N0CKzTJ8k6ojey9LAOvt4rO395TIcqGifNvdz5C8PSruesuNM T07J9uKBr9FINZDXYqK+wv0W+GfJ/IVecarGYbGblNbCk2AfgUfXltKh/OtB55MP AH4IDy/4CCp6q59Qzg0coj85mBkAvEZ+Ut7pCVMRXIvGiB5B2Jd8sQ8gjJX/zuA0 IL1o5djf9eChDy91vXjinHpkWg7KkQ+muuvUPw2SQGM/+H6/8E22Te25xoAMglTa XTmlfMxotYcX+Pe/Qosjf6A1O46gegaqA639eQIvfDWD5gMEFT+fFx+QsXTDh4Fa hlQB/K1HDafJbnaSpeVpGUR3DXu836zm -----END CERTIFICATE-----Generated at Wed Dec 24 14:13:54 2025 by rpki-client