This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft File: vpHyHHoLwGQ389tbIUIIyHdO680.mft (raw, json) Hash identifier: kCXiz7AsGh8VUgzVVZ+ExcFllGBhp7xl5HWScHKG6OQ= Subject key identifier: 36:F6:F7:A7:7C:75:82:3D:95:64:F0:6C:5E:F6:0F:B5:5B:95:25:FB Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD Certificate issuer: /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft Manifest number: 017D Signing time: Tue 23 Dec 2025 02:47:16 +0000 Manifest this update: Tue 23 Dec 2025 02:47:16 +0000 Manifest next update: Tue 30 Dec 2025 02:47:16 +0000 Files and hashes: 1: vpHyHHoLwGQ389tbIUIIyHdO680.crl (hash: CxZxSRlfmEAKiek1YsskzmRSPyihTbBimZBAQENqH/0=) 2: F2AB0C4A68C011EFB9196160C4F9AE02.roa (hash: DaPiCEmlAJvbaPsIVw3SLkMWbmEd02jwt+sb94Y5y+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CEBD, serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Validity Not Before: Dec 23 02:47:16 2025 GMT Not After : Dec 30 02:47:16 2025 GMT Subject: CN=694a02b4-69c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:8d:8d:93:20:d4:bd:30:a6:a3:a1:96:f7: b2:fa:f9:88:86:f8:df:42:0a:66:f5:76:28:f0:c1: 93:f0:a8:1c:db:47:ce:94:87:c7:dd:29:58:5c:46: 86:30:c6:dc:19:ed:ef:b9:b3:a2:9f:0e:7e:4f:14: 4a:9d:30:26:ef:b3:df:c7:58:69:77:f7:ca:3d:b3: 11:38:82:fd:28:b4:34:6b:c9:08:2a:3f:ee:fe:30: 3e:17:f7:a6:12:df:5a:3d:9f:9e:cc:55:e1:4c:7c: 9c:a5:7c:d7:f7:bd:89:e1:b2:fa:5d:11:17:86:0a: dd:77:2b:be:48:f5:ca:bb:7f:3f:1a:27:f9:db:c6: 4f:58:36:0f:81:92:45:d3:7e:5a:6c:10:56:31:52: ed:67:ce:66:85:69:a4:a7:35:65:f3:0f:18:a3:04: fb:8f:1b:78:f8:f2:7f:13:e4:96:40:98:8a:97:5c: c4:cf:82:5d:51:d5:83:3b:c7:31:a4:4a:e6:55:6b: 60:50:c5:1b:2e:a5:3c:fb:3a:7b:6f:9c:29:d6:1e: f4:44:f2:09:d1:2d:bb:47:47:a3:ac:42:77:ab:01: 69:3f:fd:e3:da:4d:e3:e9:bc:ec:45:72:ff:a4:5b: d5:e5:7c:79:14:e9:92:a9:2b:19:55:c3:dc:35:8b: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F6:F7:A7:7C:75:82:3D:95:64:F0:6C:5E:F6:0F:B5:5B:95:25:FB X509v3 Authority Key Identifier: keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:23:ba:bf:19:c5:03:dc:71:3e:40:5e:fd:9b:62:f7:c1:64: 35:6b:e9:25:cb:46:5e:ad:80:15:df:b8:06:ac:3e:1c:cb:1e: 38:e9:20:26:5d:51:3d:1e:d1:c8:2b:63:1d:4e:76:7a:5f:9f: 1c:b9:74:1d:5f:be:01:1b:7d:e5:04:40:e4:2f:0d:c9:d0:47: 3b:0c:2a:64:16:66:52:9d:d2:ad:3a:7e:dc:c7:da:39:b4:2f: ae:25:03:4a:f8:e0:a5:13:a4:7a:35:d7:08:52:51:95:02:c5: 9a:e2:b5:91:90:74:f2:6e:b1:69:ca:60:82:57:10:71:b4:af: 74:e3:8a:7b:ea:36:b4:eb:01:4f:bd:f4:b5:7c:74:6f:27:c5: 2e:00:1a:af:6c:e8:ce:f7:27:b6:d6:59:11:aa:64:c9:ff:ac: 00:57:da:b5:f0:b9:3e:83:d6:c5:0a:e7:f1:8a:c2:84:f9:25: 42:7d:ef:66:a4:ff:88:96:76:aa:e9:a1:bd:ac:2b:2a:20:33: 90:4f:0b:ce:7d:95:a6:6c:a8:71:52:3a:9e:30:0f:7e:bf:a0: 3f:03:1c:ab:85:d9:3f:67:3f:88:3c:2c:50:9f:bb:ab:e7:78: 77:7e:f0:ad:4a:ba:bf:db:5b:e2:d3:22:d0:71:89:82:8e:0e: 3a:4f:e8:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFQkQxMTAvBgNVBAUTKEJFOTFGMjFDN0EwQkMwNjQzN0YzREI1QjIxNDIwOEM4 Nzc0RUVCQ0QwHhcNMjUxMjIzMDI0NzE2WhcNMjUxMjMwMDI0NzE2WjAYMRYwFAYD VQQDDA02OTRhMDJiNC02OWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9CNjZMg1L0wpqOhlvey+vmIhvjfQgpm9XYo8MGT8Kgc20fOlIfH3SlYXEaG MMbcGe3vubOinw5+TxRKnTAm77Pfx1hpd/fKPbMROIL9KLQ0a8kIKj/u/jA+F/em Et9aPZ+ezFXhTHycpXzX972J4bL6XREXhgrddyu+SPXKu38/Gif528ZPWDYPgZJF 035abBBWMVLtZ85mhWmkpzVl8w8YowT7jxt4+PJ/E+SWQJiKl1zEz4JdUdWDO8cx pErmVWtgUMUbLqU8+zp7b5wp1h70RPIJ0S27R0ejrEJ3qwFpP/3j2k3j6bzsRXL/ pFvV5Xx5FOmSqSsZVcPcNYvMywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDb296d8 dYI9lWTwbF72D7VblSX7MB8GA1UdIwQYMBaAFL6R8hx6C8BkN/PbWyFCCMh3TuvN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VCRC9DQ0Q4MTQyODk5 QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdHUTM4OXRiSVVJSXlIZE82 ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwSHlISG9Md0dRMzg5dGJJVUlJeUhkTzY4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VCRC9DQ0Q4MTQyODk5QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdH UTM4OXRiSVVJSXlIZE82ODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPI7q/GcUD3HE+QF79m2L3wWQ1a+kly0ZerYAV37gGrD4cyx446SAm XVE9HtHIK2MdTnZ6X58cuXQdX74BG33lBEDkLw3J0Ec7DCpkFmZSndKtOn7cx9o5 tC+uJQNK+OClE6R6NdcIUlGVAsWa4rWRkHTybrFpymCCVxBxtK9044p76ja06wFP vfS1fHRvJ8UuABqvbOjO9ye21lkRqmTJ/6wAV9q18Lk+g9bFCufxisKE+SVCfe9m pP+Ilnaq6aG9rCsqIDOQTwvOfZWmbKhxUjqeMA9+v6A/Axyrhdk/Zz+IPCxQn7ur 53h3fvCtSrq/21vi0yLQcYmCjg46T+gz -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:40 2025 by rpki-client