This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json) Hash identifier: jsN+CznUnoqUm74TZ4XnrZ6kHH5G3NWPrEtL1PXfMUk= Subject key identifier: 5A:70:58:A8:0D:77:5C:00:44:EE:90:49:2A:B2:FA:C5:D0:16:7D:BA Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft Manifest number: 0243 Signing time: Tue 23 Dec 2025 00:52:55 +0000 Manifest this update: Tue 23 Dec 2025 00:52:54 +0000 Manifest next update: Tue 30 Dec 2025 00:52:54 +0000 Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: nGwabjOjOeHIkCYLqRHbWsIb/UC7xUsBUOk0MqDQimU=) 2: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: yD2xkxCOsQInx9TqKYdMVD6Ht014JdYjJToJ+6C13nI=) 3: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: NpMgHBFk9cRmDwRCI3Qag1+PV5w2sgZ3yh4MiAg4Cs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Validity Not Before: Dec 23 00:52:54 2025 GMT Not After : Dec 30 00:52:54 2025 GMT Subject: CN=6949e7e7-675e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e3:42:97:59:13:51:92:0b:8a:af:a6:81:27: 2b:cd:06:3a:8e:6c:63:b6:79:8c:e5:0c:00:2d:9a: fe:a3:de:0b:a4:28:7c:35:66:51:83:9a:4c:eb:7b: 55:14:9e:1a:92:0c:f2:78:16:4f:cc:9b:6c:16:47: c3:9d:19:71:bc:77:b3:2f:68:06:7f:3c:16:51:a7: ee:dc:57:ff:b8:d9:5a:e4:b0:e3:cd:0e:b2:19:ca: a5:dc:ef:bb:7c:0a:e5:d5:8c:f9:85:5b:44:eb:2f: 2d:95:90:95:26:78:c4:2f:8d:eb:88:c7:c7:09:ac: e5:28:eb:56:a9:e7:4f:f9:95:dc:74:40:e9:9c:26: 3a:fb:1f:6a:fe:59:ac:9f:da:b0:20:d1:ec:12:aa: 9d:0f:e6:8f:93:3f:2c:c3:b6:f7:7b:5e:cc:74:69: 93:d9:15:cb:9e:f9:25:14:f8:17:07:2b:3d:38:e8: 12:2b:c3:b9:03:31:65:66:d6:f9:e1:ef:0c:12:d4: 0c:5a:c6:20:b1:83:f6:92:1c:1f:6f:54:4c:dd:43: 2f:c4:61:01:ee:bd:96:b4:ff:f4:ed:41:d8:9f:ef: c1:3a:a3:91:e8:9a:e5:ba:05:6b:5e:79:61:a2:58: e8:2c:2f:01:ce:3b:18:f3:3b:0d:2c:c4:93:81:3c: 80:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:70:58:A8:0D:77:5C:00:44:EE:90:49:2A:B2:FA:C5:D0:16:7D:BA X509v3 Authority Key Identifier: keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:00:ea:67:82:a8:e3:f9:aa:d0:a6:53:e3:4c:92:80:c7:ce: 0a:66:0b:4a:94:11:18:c2:40:f0:26:16:d0:f2:f2:3a:d4:40: bb:17:f7:21:c5:85:74:d0:b1:d4:ea:39:5a:a9:70:d6:b3:8d: f4:51:48:55:a6:20:da:c7:a4:7c:30:98:1d:0d:3f:71:3d:fc: 00:4e:65:a3:32:2f:f5:11:9c:b4:6c:74:8b:d8:f6:39:76:be: 69:76:67:2c:58:ee:09:98:08:aa:76:1b:60:b5:bc:59:20:7e: c2:f0:a4:a4:5a:3f:40:be:52:7a:0f:cc:e7:a3:12:b2:d7:20: 8a:e6:b7:a8:b8:d8:2f:2a:5e:18:12:c8:25:b5:80:ea:ae:a2: 7d:0c:1f:11:c4:96:e1:34:67:8d:3a:58:10:a6:31:63:0f:e3: c4:65:99:16:40:05:97:5b:f4:f4:1e:29:ad:93:6a:90:74:ae: ab:44:b4:ef:17:62:f4:13:e1:9d:aa:56:0a:a1:41:2f:f1:1f: 1a:a8:60:fb:8c:2d:8a:c5:3d:61:ee:5c:08:3b:82:b2:ed:d6: 16:ca:0a:11:98:ac:66:e2:3e:9e:f7:f8:f2:35:9d:d3:81:5d: 2d:1e:81:53:a4:6e:60:22:bb:73:49:aa:c3:eb:62:4a:3d:d9: 8f:99:02:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4 QkU1QzEzQjkwHhcNMjUxMjIzMDA1MjU0WhcNMjUxMjMwMDA1MjU0WjAYMRYwFAYD VQQDDA02OTQ5ZTdlNy02NzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAieNCl1kTUZILiq+mgScrzQY6jmxjtnmM5QwALZr+o94LpCh8NWZRg5pM63tV FJ4akgzyeBZPzJtsFkfDnRlxvHezL2gGfzwWUafu3Ff/uNla5LDjzQ6yGcql3O+7 fArl1Yz5hVtE6y8tlZCVJnjEL43riMfHCazlKOtWqedP+ZXcdEDpnCY6+x9q/lms n9qwINHsEqqdD+aPkz8sw7b3e17MdGmT2RXLnvklFPgXBys9OOgSK8O5AzFlZtb5 4e8MEtQMWsYgsYP2khwfb1RM3UMvxGEB7r2WtP/07UHYn+/BOqOR6JrlugVrXnlh oljoLC8BzjsY8zsNLMSTgTyAiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpwWKgN d1wARO6QSSqy+sXQFn26MB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG c0xvTUx2RlVGMHlMNWNFN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQAOpngqjj+arQplPjTJKAx84KZgtKlBEYwkDwJhbQ8vI61EC7F/ch xYV00LHU6jlaqXDWs430UUhVpiDax6R8MJgdDT9xPfwATmWjMi/1EZy0bHSL2PY5 dr5pdmcsWO4JmAiqdhtgtbxZIH7C8KSkWj9AvlJ6D8znoxKy1yCK5reouNgvKl4Y EsgltYDqrqJ9DB8RxJbhNGeNOlgQpjFjD+PEZZkWQAWXW/T0Himtk2qQdK6rRLTv F2L0E+GdqlYKoUEv8R8aqGD7jC2KxT1h7lwIO4Ky7dYWygoRmKxm4j6e9/jyNZ3T gV0tHoFTpG5gIrtzSarD62JKPdmPmQIP -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:13 2025 by rpki-client