This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft File: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json) Hash identifier: 7C/9z6IDG/9bzvLXe+HE8tBunocxzlDOBM174As8lic= Subject key identifier: B9:08:6E:EE:72:41:1B:B4:63:1B:C7:FE:01:72:42:5A:6E:E6:D4:EF Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Certificate serial: 0DFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft Manifest number: 0DEC Signing time: Mon 22 Dec 2025 17:30:56 +0000 Manifest this update: Mon 22 Dec 2025 17:30:55 +0000 Manifest next update: Mon 29 Dec 2025 17:30:55 +0000 Files and hashes: 1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: ra5IDt3FCpxHETpykT9jIxewlXbRDrt5Ga2A5bgetQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3581 (0xdfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DF, serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Validity Not Before: Dec 22 17:30:55 2025 GMT Not After : Dec 29 17:30:55 2025 GMT Subject: CN=6949804f-e07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4a:e6:6d:e1:0a:cc:ce:d6:35:83:d9:36:f7: 20:a2:7c:ff:41:18:43:a6:3b:11:1b:36:7b:58:1c: 35:f2:6d:6d:b5:ca:37:f3:25:26:25:32:63:af:e2: 4a:ba:1e:a7:66:91:9c:fa:a1:ef:87:50:64:35:ce: ee:94:d8:9e:11:3a:c0:46:bb:a5:d9:9b:66:b5:d8: e4:22:61:20:f2:f2:80:cb:d9:8d:96:38:b3:43:b3: 1d:ad:aa:a2:50:ba:8b:8e:59:93:e6:3d:04:ea:c0: c9:b2:50:be:4d:c1:2a:eb:78:18:d3:dd:1d:d9:93: 21:d8:c4:f9:76:d3:4c:24:71:34:d3:8f:b7:ee:15: 41:ea:90:fa:05:8d:3b:59:1d:ec:26:32:69:bf:1c: e6:bb:25:80:4a:a9:25:fa:e8:26:e6:34:93:cf:f9: 17:f2:2d:cd:c3:33:22:38:cd:12:1b:e0:a5:7d:09: cb:97:16:34:d2:82:5b:e7:d0:fb:00:8f:a0:5d:ea: 2f:2c:36:8b:8c:0f:28:10:75:4f:2d:7f:7c:13:3a: 32:be:26:bf:aa:ef:47:0b:1e:7d:8a:72:22:97:7d: 2d:e7:ab:66:9c:8b:c8:d8:2d:8d:90:f8:dc:42:17: af:29:63:16:94:df:72:d8:78:ab:36:d2:4a:1d:42: de:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:08:6E:EE:72:41:1B:B4:63:1B:C7:FE:01:72:42:5A:6E:E6:D4:EF X509v3 Authority Key Identifier: keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:54:2b:e7:a5:a3:0c:d3:89:c1:c0:61:ab:f3:85:a4:33:b2: 56:db:2e:b5:af:4d:eb:a7:44:2b:c3:3c:9b:e7:83:14:2f:0e: 66:0a:5b:12:cf:0b:53:1c:6a:8c:c8:f5:ab:c7:19:20:22:91: 2a:e0:ab:ec:d7:1f:fb:f9:ce:f2:22:69:fa:df:0d:4d:d6:b4: 39:41:c8:6d:38:9b:f4:13:25:75:ef:e3:74:8a:19:ce:93:f6: 89:97:00:02:58:89:8b:a3:d5:ae:73:b1:98:d5:c1:c2:98:03: f9:35:5f:01:50:4c:a4:f1:19:59:74:1d:ed:e3:76:6c:c9:b4: ba:13:bd:45:54:c7:71:e5:c7:3d:10:d4:52:73:d6:76:fd:0e: 9f:7c:3d:b3:09:fb:9d:42:7a:91:87:c9:e8:40:5e:18:c4:e4: 43:92:e4:b8:19:14:72:85:23:21:c4:ac:a0:01:03:6a:43:a6: d9:b7:ab:24:6c:4e:6b:a9:67:e5:2f:cc:d3:dd:75:8c:80:cd: 13:29:ce:4b:f6:fe:4f:0b:49:84:1c:53:51:e6:cd:13:e5:1e: 0a:1d:b6:1d:fb:6d:3c:bf:7b:30:20:72:8a:62:2e:8f:76:d5: db:e9:0e:fe:9c:8f:59:31:83:48:8b:d6:a0:03:37:22:1f:b6: 30:37:9d:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREYxMTAvBgNVBAUTKDU2NzkwQjhDOTUwN0Q5RDRGMzkwMDk1MEQzMjlFMjc1 NzQ3NzY3QUMwHhcNMjUxMjIyMTczMDU1WhcNMjUxMjI5MTczMDU1WjAYMRYwFAYD VQQDDA02OTQ5ODA0Zi1lMDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ErmbeEKzM7WNYPZNvcgonz/QRhDpjsRGzZ7WBw18m1ttco38yUmJTJjr+JK uh6nZpGc+qHvh1BkNc7ulNieETrARrul2ZtmtdjkImEg8vKAy9mNljizQ7Mdraqi ULqLjlmT5j0E6sDJslC+TcEq63gY090d2ZMh2MT5dtNMJHE004+37hVB6pD6BY07 WR3sJjJpvxzmuyWASqkl+ugm5jSTz/kX8i3NwzMiOM0SG+ClfQnLlxY00oJb59D7 AI+gXeovLDaLjA8oEHVPLX98Ezoyvia/qu9HCx59inIil30t56tmnIvI2C2NkPjc QhevKWMWlN9y2HirNtJKHULeRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkIbu5y QRu0YxvH/gFyQlpu5tTvMB8GA1UdIwQYMBaAFFZ5C4yVB9nU85AJUNMp4nV0d2es MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNERi85MjczOTdCNENB MzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJkVHprQWxRMHluaWRYUjNa NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Zua0xqSlVIMmRUemtBbFEweW5pZFhSM1o2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNERi85MjczOTdCNENBMzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJk VHprQWxRMHluaWRYUjNaNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNVCvnpaMM04nBwGGr84WkM7JW2y61r03rp0Qrwzyb54MULw5mClsS zwtTHGqMyPWrxxkgIpEq4Kvs1x/7+c7yImn63w1N1rQ5QchtOJv0EyV17+N0ihnO k/aJlwACWImLo9Wuc7GY1cHCmAP5NV8BUEyk8RlZdB3t43ZsybS6E71FVMdx5cc9 ENRSc9Z2/Q6ffD2zCfudQnqRh8noQF4YxORDkuS4GRRyhSMhxKygAQNqQ6bZt6sk bE5rqWflL8zT3XWMgM0TKc5L9v5PC0mEHFNR5s0T5R4KHbYd+208v3swIHKKYi6P dtXb6Q7+nI9ZMYNIi9agAzciH7YwN52X -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:41 2025 by rpki-client