This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft File: VKJNxo3yZA57s_8PNreO-IQAww8.mft (raw, json) Hash identifier: uAquuBzAKysl6tK3Y2yRjoDVMMx4ZoWZn5T6fyX5m38= Subject key identifier: BC:49:CC:01:B5:60:7F:15:5E:85:E6:B7:63:CD:9E:DB:C1:68:D1:D7 Authority key identifier: 54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F Certificate issuer: /CN=A91362EB/serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft Manifest number: 4C Signing time: Wed 03 Dec 2025 05:29:30 +0000 Manifest this update: Wed 03 Dec 2025 05:29:29 +0000 Manifest next update: Wed 10 Dec 2025 05:29:29 +0000 Files and hashes: 1: VKJNxo3yZA57s_8PNreO-IQAww8.crl (hash: G5SLRpHa472PMTzLxzdEU5iCC3XSCw4nmzIhja5yVig=) 2: 0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa (hash: /uTCkM+7T3MX4CR0F7TNTBgsSs4yKxKjHNmhUVycHRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362EB, serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Validity Not Before: Dec 3 05:29:29 2025 GMT Not After : Dec 10 05:29:29 2025 GMT Subject: CN=692fcaba-50e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8a:a6:db:56:97:c0:53:8f:1d:9b:cc:a4:17: 20:75:bc:65:02:99:81:39:09:9e:e1:48:0a:19:b5: cc:9b:a9:88:01:4a:e6:1b:8e:0d:72:a1:cf:81:9f: b7:3e:fa:21:80:ca:39:79:81:46:9c:23:a7:bb:86: 44:9f:88:f9:33:76:dc:89:01:f6:f9:ce:71:1c:c0: 1e:92:2c:43:96:67:0a:1f:ca:61:b7:04:b0:7c:79: ab:3c:71:28:d2:20:76:23:16:3f:6e:32:ef:0a:26: 33:4e:a7:1d:a0:20:c2:3b:27:2c:32:99:e5:ad:ac: 55:1a:71:03:29:75:57:5f:fc:e9:99:b1:32:68:be: bc:50:e2:bb:bf:49:36:63:0d:e7:7c:dd:14:0d:a6: 58:e1:5e:99:15:eb:53:6b:cb:5d:17:9d:6a:a9:83: f1:85:0c:cb:62:ca:04:f1:28:58:cd:65:1c:30:16: f7:59:09:2e:9a:4b:ef:0b:8a:9c:ee:51:a1:69:10: 0d:94:85:10:f4:44:1f:7f:41:64:b7:80:62:b7:b3: be:66:db:a9:bf:83:f8:b1:7d:14:fc:23:21:f4:ea: b0:c3:98:7f:86:ce:2a:fb:93:03:bb:c7:31:95:ba: 66:fa:1b:69:19:f3:ea:ea:c0:20:a8:b9:19:c7:38: 16:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:49:CC:01:B5:60:7F:15:5E:85:E6:B7:63:CD:9E:DB:C1:68:D1:D7 X509v3 Authority Key Identifier: keyid:54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c2:5c:1e:40:3f:1d:42:e2:cb:a5:0a:f7:da:07:49:da:07: 08:75:72:52:36:e5:9a:f4:7b:59:1c:6c:c4:97:4c:c5:8e:d9: 54:de:df:4c:68:87:39:84:92:a8:3d:ed:58:fc:1f:16:f8:27: c7:8e:72:65:b3:5f:34:0f:c3:ee:40:87:14:fb:4f:87:0f:f8: df:d5:0d:a7:12:ea:3c:e0:08:26:ac:0d:5e:03:f7:be:f9:06: 62:3f:95:90:14:ee:c8:21:00:db:22:49:e6:bd:9d:7f:67:3e: 14:84:85:6d:8d:23:84:e8:4a:87:1b:fe:85:5f:f8:e5:77:25: 2c:45:36:a8:b8:42:b0:4c:3c:f5:ac:10:cc:6b:42:68:69:b8: 05:3c:5f:ea:3f:2e:ba:47:8a:25:5e:2e:34:e8:36:44:b3:24: f6:e1:15:2b:d4:12:32:cc:2a:f0:c9:35:f9:51:79:b3:c1:2b: 54:f4:40:8e:a5:cb:93:be:c4:04:9b:f5:cc:fd:23:ab:f1:62: 49:38:db:6b:66:ed:19:3e:b6:26:02:bc:ad:fa:b4:4b:44:30: 3d:ac:db:4f:e5:0f:e1:97:5e:f3:26:85:c8:9a:29:4c:93:6e: 6f:35:77:f0:66:4e:f5:b5:22:44:41:9c:45:bc:5d:5d:b0:1b: 5c:cc:90:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjJFQjExMC8GA1UEBRMoNTRBMjREQzY4REYyNjQwRTdCQjNGRjBGMzZCNzhFRjg4 NDAwQzMwRjAeFw0yNTEyMDMwNTI5MjlaFw0yNTEyMTAwNTI5MjlaMBgxFjAUBgNV BAMTDTY5MmZjYWJhLTUwZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaiqbbVpfAU48dm8ykFyB1vGUCmYE5CZ7hSAoZtcybqYgBSuYbjg1yoc+Bn7c+ +iGAyjl5gUacI6e7hkSfiPkzdtyJAfb5znEcwB6SLEOWZwofymG3BLB8eas8cSjS IHYjFj9uMu8KJjNOpx2gIMI7JywymeWtrFUacQMpdVdf/OmZsTJovrxQ4ru/STZj Ded83RQNpljhXpkV61Nry10XnWqpg/GFDMtiygTxKFjNZRwwFvdZCS6aS+8Lipzu UaFpEA2UhRD0RB9/QWS3gGK3s75m26m/g/ixfRT8IyH06rDDmH+Gzir7kwO7xzGV umb6G2kZ8+rqwCCouRnHOBaNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvEnMAbVg fxVehea3Y82e28Fo0dcwHwYDVR0jBBgwFoAUVKJNxo3yZA57s/8PNreO+IQAww8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MkVCL0RGNTQ1Q0M4NUM5 OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1N3NfOFBOcmVPLUlRQXd3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVktKTnhvM3laQTU3c184UE5yZU8tSVFBd3c4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MkVCL0RGNTQ1Q0M4NUM5OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1 N3NfOFBOcmVPLUlRQXd3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHjCXB5APx1C4sulCvfaB0naBwh1clI25Zr0e1kcbMSXTMWO2VTe30xo hzmEkqg97Vj8Hxb4J8eOcmWzXzQPw+5AhxT7T4cP+N/VDacS6jzgCCasDV4D9775 BmI/lZAU7sghANsiSea9nX9nPhSEhW2NI4ToSocb/oVf+OV3JSxFNqi4QrBMPPWs EMxrQmhpuAU8X+o/LrpHiiVeLjToNkSzJPbhFSvUEjLMKvDJNflRebPBK1T0QI6l y5O+xASb9cz9I6vxYkk422tm7Rk+tiYCvK36tEtEMD2s20/lD+GXXvMmhciaKUyT bm81d/BmTvW1IkRBnEW8XV2wG1zMkOw= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:23 2025 by rpki-client