This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft File: Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json) Hash identifier: Q0fslWr16570Z+oHYvBBxzeVNV1N5RtKHJBZ6LD1DBI= Subject key identifier: 69:10:42:7A:96:14:9B:8A:60:81:A3:A9:F6:0F:F5:3F:98:17:63:2C Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF Certificate issuer: /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft Manifest number: 01E2 Signing time: Tue 23 Dec 2025 01:41:25 +0000 Manifest this update: Tue 23 Dec 2025 01:41:25 +0000 Manifest next update: Tue 30 Dec 2025 01:41:25 +0000 Files and hashes: 1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: 5LrEi0Oj6d6hfwyOEt2Gu8Nm4NttAmI8RL6cKA9XaVg=) 2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: jnuMHWmzh0Mkxo/UqfQiHQK9zwVM6oBly72+HKRXMlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Validity Not Before: Dec 23 01:41:25 2025 GMT Not After : Dec 30 01:41:25 2025 GMT Subject: CN=6949f345-4a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:67:56:e4:0f:cb:51:15:1a:38:2b:eb:4b:d5: ef:53:e1:e7:71:55:83:85:8c:6a:c3:e5:cb:a0:08: ce:95:6e:68:b5:92:79:7a:e7:02:7d:4a:82:0f:69: 14:17:9a:ed:62:83:28:0c:01:da:ef:96:91:49:cc: ed:d4:a3:fb:12:98:1d:77:42:f8:29:ab:42:86:ee: da:26:6d:7d:20:c4:15:91:3f:fd:74:65:9c:1f:13: 7e:0c:0a:a1:9d:14:ce:e1:11:15:ff:53:0b:13:23: b3:ed:2e:d0:ba:0b:d8:ec:fc:18:dc:c9:f3:4f:74: 80:ba:a5:80:4b:60:d2:87:3e:08:4f:df:e2:c5:4e: b0:c4:78:c6:9d:d1:53:76:29:a8:8a:ac:02:f0:6e: 5b:f2:ac:01:42:40:86:9a:19:cb:6c:8e:fc:d7:1e: 30:82:c4:47:e6:0c:d3:19:b1:1e:cc:a5:e5:a7:e3: 59:fb:48:c7:ee:cd:3d:eb:96:53:46:15:9c:8a:61: bc:0f:e7:11:a7:1e:22:05:d6:84:37:44:3d:44:d6: 35:6a:5b:7e:89:f4:81:b1:63:b4:32:d2:b0:05:88: 21:ee:a9:7a:43:51:64:19:c2:a1:7a:55:88:6f:df: 18:e9:9e:fe:9b:0a:ff:6e:a5:52:40:a0:6e:68:a0: 26:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:10:42:7A:96:14:9B:8A:60:81:A3:A9:F6:0F:F5:3F:98:17:63:2C X509v3 Authority Key Identifier: keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:a6:ed:36:8d:ab:6d:da:ac:21:71:94:1d:81:4d:bc:9f:09: 5d:7c:13:76:32:3b:87:42:0e:f5:7d:28:94:5c:b4:26:84:f0: b9:bf:ba:1e:61:de:a9:ba:54:49:74:8d:a6:0f:1e:53:ca:ed: c4:6c:0b:1b:6b:a6:f2:6b:a3:c5:a3:b8:d5:17:30:b5:09:40: 11:d8:29:9d:d9:81:0f:e0:a0:59:dc:37:6d:0f:31:d1:07:18: 1a:d3:53:a7:e6:61:48:c1:75:d1:c3:81:0d:26:b0:88:97:67: 18:84:02:ce:74:39:73:2a:67:d6:a2:b9:6e:13:1c:ba:84:43: eb:62:19:72:81:ef:01:93:9f:23:99:25:26:6d:2c:41:d2:c8: c7:17:b8:59:a3:d6:71:f5:24:51:0c:ea:49:53:fc:11:e1:52: b1:68:63:15:f2:71:c9:34:5c:51:a1:62:a0:41:e9:f6:b8:20: 12:b9:b9:9d:c4:ae:06:ab:4a:1d:82:dc:bb:7d:eb:82:e0:f3: 9c:f5:08:1f:5b:4d:6a:98:f6:e7:d4:09:76:1f:ca:72:fd:73: 46:07:ed:4c:f4:ff:40:4e:5f:c7:b9:0f:52:7e:74:45:7c:cf: 0c:ce:48:4b:7b:60:3c:7e:7b:d8:57:3e:ae:b2:77:46:69:22: c5:dc:34:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MjYxMTAvBgNVBAUTKDU2MERDNDBGRjNBNTA5RjlFRkRCNTI2MEVFMUJCMzg2 MkRCNkQ4REYwHhcNMjUxMjIzMDE0MTI1WhcNMjUxMjMwMDE0MTI1WjAYMRYwFAYD VQQDDA02OTQ5ZjM0NS00YTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGdW5A/LURUaOCvrS9XvU+HncVWDhYxqw+XLoAjOlW5otZJ5eucCfUqCD2kU F5rtYoMoDAHa75aRSczt1KP7Epgdd0L4KatChu7aJm19IMQVkT/9dGWcHxN+DAqh nRTO4REV/1MLEyOz7S7QugvY7PwY3MnzT3SAuqWAS2DShz4IT9/ixU6wxHjGndFT dimoiqwC8G5b8qwBQkCGmhnLbI781x4wgsRH5gzTGbEezKXlp+NZ+0jH7s0965ZT RhWcimG8D+cRpx4iBdaEN0Q9RNY1alt+ifSBsWO0MtKwBYgh7ql6Q1FkGcKhelWI b98Y6Z7+mwr/bqVSQKBuaKAm6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkQQnqW FJuKYIGjqfYP9T+YF2MsMB8GA1UdIwQYMBaAFFYNxA/zpQn579tSYO4bs4Ytttjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyNi84NjY3NkRBMEZB MDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENmbnYyMUpnN2h1emhpMjIy TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZnM0VEX09sQ2ZudjIxSmc3aHV6aGkyMjJOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyNi84NjY3NkRBMEZBMDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENm bnYyMUpnN2h1emhpMjIyTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSpu02jatt2qwhcZQdgU28nwldfBN2MjuHQg71fSiUXLQmhPC5v7oe Yd6pulRJdI2mDx5Tyu3EbAsba6bya6PFo7jVFzC1CUAR2Cmd2YEP4KBZ3DdtDzHR Bxga01On5mFIwXXRw4ENJrCIl2cYhALOdDlzKmfWorluExy6hEPrYhlyge8Bk58j mSUmbSxB0sjHF7hZo9Zx9SRRDOpJU/wR4VKxaGMV8nHJNFxRoWKgQen2uCASubmd xK4Gq0odgty7feuC4POc9QgfW01qmPbn1Al2H8py/XNGB+1M9P9ATl/HuQ9SfnRF fM8MzkhLe2A8fnvYVz6usndGaSLF3DQF -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:32 2025 by rpki-client