This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft File: Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft (raw, json) Hash identifier: NedJemCJzIazgcSrbHJUSf7E6Jyudp1INGofsTarfa8= Subject key identifier: A6:FF:21:CE:42:45:DB:F9:A6:B9:90:7B:2D:E1:B8:98:75:80:0A:06 Authority key identifier: 57:1E:D2:56:D5:8F:85:C6:00:C6:4A:59:EE:7B:1D:36:AE:3C:B0:9B Certificate issuer: /CN=A9123059/serialNumber=571ED256D58F85C600C64A59EE7B1D36AE3CB09B Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft Manifest number: 43 Signing time: Tue 23 Dec 2025 06:15:39 +0000 Manifest this update: Tue 23 Dec 2025 06:15:39 +0000 Manifest next update: Tue 30 Dec 2025 06:15:39 +0000 Files and hashes: 1: Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl (hash: vbvP4vt8PHiwm9xxPSWUL04Np5QyfQfuT5m28LDD82w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123059, serialNumber=571ED256D58F85C600C64A59EE7B1D36AE3CB09B Validity Not Before: Dec 23 06:15:39 2025 GMT Not After : Dec 30 06:15:39 2025 GMT Subject: CN=694a338b-5cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:13:05:3c:74:c8:fd:02:3c:e7:4d:1b:e1:e0: 16:d7:2d:9c:9e:e4:1a:12:37:a0:9c:75:8a:7d:c6: dd:37:2e:f3:2f:d6:07:b1:82:09:43:d5:57:89:72: d3:7f:a7:90:01:c2:7b:02:68:d5:35:5b:95:10:df: d7:b2:86:53:02:e7:1d:48:c0:5a:e5:10:db:eb:bd: 61:61:a3:fd:2c:7f:fc:0e:14:05:d9:96:0d:d3:ac: f8:f3:af:37:7a:97:ee:42:ae:47:db:a7:d3:2f:28: 89:18:8a:1f:85:bf:9a:8e:0a:be:d8:4c:4e:4d:d4: 90:73:cb:7f:88:53:42:98:5a:0c:8d:81:fa:c3:40: e7:a6:1e:f8:b2:6d:5e:72:a1:43:c9:ba:0e:4a:eb: 7f:b3:01:5d:4c:84:8f:59:6d:99:c6:1c:cc:3c:23: 26:83:f2:dc:7a:97:0a:80:f5:70:34:bc:9f:bc:58: 16:1e:74:84:5e:91:a2:4b:0e:46:e1:be:82:af:f6: 69:39:0e:ff:00:6a:c3:bf:84:88:d8:00:f0:76:41: c0:b1:c1:29:84:8f:ed:c2:88:fd:a2:36:62:2d:f1: 48:2d:a2:0c:9c:bd:c6:5a:74:87:88:71:50:fa:0b: 76:0c:94:bf:8a:28:14:b6:3b:21:2d:0d:f0:70:87: 30:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FF:21:CE:42:45:DB:F9:A6:B9:90:7B:2D:E1:B8:98:75:80:0A:06 X509v3 Authority Key Identifier: keyid:57:1E:D2:56:D5:8F:85:C6:00:C6:4A:59:EE:7B:1D:36:AE:3C:B0:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:dc:56:6d:ab:80:09:ae:f1:ef:bf:59:2e:85:98:1b:b2:9a: 2b:28:cc:28:a7:cf:1e:fc:e6:30:c1:3e:e6:2d:45:8f:06:5f: 8a:b8:2d:3d:5f:93:5b:aa:b1:8e:3a:5f:7f:0e:30:9e:4a:a1: 44:87:61:4a:ec:35:07:e2:a6:e1:d9:f0:8d:6d:60:92:97:a3: cf:7f:27:47:66:db:85:89:b4:b5:0e:c6:42:ed:a5:bd:ae:62: 42:61:08:f8:48:b3:68:14:39:77:ae:d4:93:b3:0b:26:75:08: 4e:31:e2:88:fb:fb:11:a1:a3:18:1e:e1:79:10:33:ff:fd:d1: 19:a4:cd:94:73:b1:07:c8:e7:43:cd:7e:49:cc:13:61:3a:d5: c9:b2:45:5f:63:46:2a:3d:5c:f2:b1:54:3e:aa:41:83:ac:72: 1e:1e:00:f8:bb:e4:66:41:1f:df:1f:81:92:97:27:ef:f2:48: ca:44:17:10:b6:e1:9e:22:e8:bd:9c:1e:48:c6:25:bb:dc:c2: cf:76:83:8e:1d:4c:ab:87:9c:83:42:31:0c:2a:54:ce:a4:03: 9a:c7:f9:2a:4d:f1:8d:26:57:1a:58:24:07:8e:0e:f8:81:d1: 39:e9:33:40:5f:91:bd:a7:11:13:41:3e:e8:92:65:ef:9d:11: 77:75:24:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzA1OTExMC8GA1UEBRMoNTcxRUQyNTZENThGODVDNjAwQzY0QTU5RUU3QjFEMzZB RTNDQjA5QjAeFw0yNTEyMjMwNjE1MzlaFw0yNTEyMzAwNjE1MzlaMBgxFjAUBgNV BAMMDTY5NGEzMzhiLTVjZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbEwU8dMj9AjznTRvh4BbXLZye5BoSN6CcdYp9xt03LvMv1gexgglD1VeJctN/ p5ABwnsCaNU1W5UQ39eyhlMC5x1IwFrlENvrvWFho/0sf/wOFAXZlg3TrPjzrzd6 l+5Crkfbp9MvKIkYih+Fv5qOCr7YTE5N1JBzy3+IU0KYWgyNgfrDQOemHviybV5y oUPJug5K63+zAV1MhI9ZbZnGHMw8IyaD8tx6lwqA9XA0vJ+8WBYedIRekaJLDkbh voKv9mk5Dv8AasO/hIjYAPB2QcCxwSmEj+3CiP2iNmIt8UgtogycvcZadIeIcVD6 C3YMlL+KKBS2OyEtDfBwhzCXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpv8hzkJF 2/mmuZB7LeG4mHWACgYwHwYDVR0jBBgwFoAUVx7SVtWPhcYAxkpZ7nsdNq48sJsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMDU5L0JCQkQ4MDI2NzlG NjExRjA5Q0U5QzMyOEM0RjlBRTAyL1Z4N1NWdFdQaGNZQXhrcFo3bnNkTnE0OHNK cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVng3U1Z0V1BoY1lBeGtwWjduc2ROcTQ4c0pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MDU5L0JCQkQ4MDI2NzlGNjExRjA5Q0U5QzMyOEM0RjlBRTAyL1Z4N1NWdFdQaGNZ QXhrcFo3bnNkTnE0OHNKcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFHcVm2rgAmu8e+/WS6FmBuymisozCinzx785jDBPuYtRY8GX4q4LT1f k1uqsY46X38OMJ5KoUSHYUrsNQfipuHZ8I1tYJKXo89/J0dm24WJtLUOxkLtpb2u YkJhCPhIs2gUOXeu1JOzCyZ1CE4x4oj7+xGhoxge4XkQM//90RmkzZRzsQfI50PN fknME2E61cmyRV9jRio9XPKxVD6qQYOsch4eAPi75GZBH98fgZKXJ+/ySMpEFxC2 4Z4i6L2cHkjGJbvcws92g44dTKuHnINCMQwqVM6kA5rH+SpN8Y0mVxpYJAeODviB 0TnpM0Bfkb2nERNBPuiSZe+dEXd1JK0= -----END CERTIFICATE-----Generated at Wed Dec 24 17:35:02 2025 by rpki-client