This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft File: VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft (raw, json) Hash identifier: wABDmvtnm1AXPV5fy0ZSCUs5mb/BqHkppbr6D6M8Z5E= Subject key identifier: FD:2F:4C:8B:8E:8E:E9:21:5B:BA:CC:67:62:60:90:29:2A:EE:25:AB Authority key identifier: 55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61 Certificate issuer: /CN=A913E614/serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft Manifest number: 11 Signing time: Wed 03 Dec 2025 06:09:51 +0000 Manifest this update: Wed 03 Dec 2025 06:09:51 +0000 Manifest next update: Wed 10 Dec 2025 06:09:51 +0000 Files and hashes: 1: VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl (hash: z3OqjnAv3l0clJVzD/ikVHr6t7Gp+gP926XnRjScdzg=) 2: 390B7BFAC62311F092B8183CC4F9AE02.roa (hash: IttW8lnhM9U/w4yhzUeGX0DYIjEGvnTp18lKA3bXa/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E614, serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661 Validity Not Before: Dec 3 06:09:51 2025 GMT Not After : Dec 10 06:09:51 2025 GMT Subject: CN=692fd42f-44ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e8:4b:7e:d4:f2:96:13:d2:c8:ad:af:85:6b: d4:83:3d:41:55:d2:8a:1a:52:41:40:b6:e8:4a:77: 98:16:05:88:de:fa:18:0d:53:a5:d4:a6:e0:b1:d9: 5f:a1:7e:a8:73:49:5d:e2:fd:90:23:14:f1:74:f9: 23:4c:37:4c:65:4a:7c:99:95:9d:3a:97:ec:c8:f1: 3e:61:4b:53:f6:ff:be:0f:55:3b:8f:ed:0f:b0:02: 15:26:ea:49:ac:d6:8b:6a:c0:71:c7:dc:fb:33:77: b4:24:8b:b7:82:24:dd:ff:19:1f:5d:08:66:ff:09: 2a:23:76:cd:ba:7c:88:f0:2b:00:aa:1a:d8:df:22: dd:74:09:1d:14:53:ff:b1:3e:d1:95:00:7e:44:37: 8a:98:dc:4d:48:db:85:43:cb:9c:8b:14:aa:fc:9c: 17:b4:bb:7e:65:c1:1b:4a:94:2f:0a:74:20:63:c6: 9a:66:0f:6d:60:86:a5:b5:8c:c1:8f:0e:8c:dc:4e: b0:e8:63:7f:b4:57:93:0d:83:4f:72:aa:45:b0:f5: e6:08:af:df:1d:cb:08:c4:4a:95:c3:00:f0:15:36: 1f:a9:1a:01:ff:d5:42:3b:ca:cd:a5:f6:47:20:d9: 5b:c8:65:28:55:e3:8f:b3:24:33:65:aa:a4:92:0e: 79:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2F:4C:8B:8E:8E:E9:21:5B:BA:CC:67:62:60:90:29:2A:EE:25:AB X509v3 Authority Key Identifier: keyid:55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:cb:ec:4b:e5:2d:c1:3d:40:91:92:bf:08:38:cc:51:78:51: 25:d9:b5:1a:df:b9:fc:10:16:87:ff:32:65:72:58:af:46:b4: 07:29:2e:06:40:ba:f9:5d:36:46:09:b8:00:9a:dd:ac:16:0d: d9:16:bf:3c:dd:b8:72:55:11:3a:40:71:31:6d:d3:ef:61:9e: b8:de:73:98:11:02:0b:d9:f4:00:33:c8:57:c2:5f:67:e0:c2: 74:a8:7a:aa:81:da:ea:33:28:ac:74:e9:08:dd:3a:c6:70:c4: 8b:73:93:0e:77:5e:66:19:03:23:32:76:f9:05:bf:3b:02:1c: ae:73:10:9f:16:57:59:ac:42:a7:5f:f7:2a:54:23:e1:0e:2f: d0:c5:98:90:c6:92:d9:7e:7f:61:d4:a9:2e:3a:76:56:d3:dc: 9d:5c:4a:3b:42:c7:28:67:00:df:03:2e:6f:08:4f:42:e5:cf: cc:d2:d8:af:54:1d:ee:4a:cc:be:20:fd:6b:51:e1:2b:7e:d5: d2:12:95:b0:67:09:c0:8c:fd:64:ce:38:62:c0:24:de:76:e6: 99:f4:c6:33:61:0d:88:d2:d1:5f:10:8a:4c:86:37:45:1a:10: 82:b6:d7:e8:2e:46:88:18:79:ae:eb:f7:10:d0:c6:1d:55:7e: 66:d0:9c:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYxNDExMC8GA1UEBRMoNTU3M0M1NjhBRTAxNDgxNEQxQjRERUFGNjhGQTQ2NEY0 OTUyMzY2MTAeFw0yNTEyMDMwNjA5NTFaFw0yNTEyMTAwNjA5NTFaMBgxFjAUBgNV BAMTDTY5MmZkNDJmLTQ0ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk6Et+1PKWE9LIra+Fa9SDPUFV0ooaUkFAtuhKd5gWBYje+hgNU6XUpuCx2V+h fqhzSV3i/ZAjFPF0+SNMN0xlSnyZlZ06l+zI8T5hS1P2/74PVTuP7Q+wAhUm6kms 1otqwHHH3Pszd7Qki7eCJN3/GR9dCGb/CSojds26fIjwKwCqGtjfIt10CR0UU/+x PtGVAH5EN4qY3E1I24VDy5yLFKr8nBe0u35lwRtKlC8KdCBjxppmD21ghqW1jMGP DozcTrDoY3+0V5MNg09yqkWw9eYIr98dywjESpXDAPAVNh+pGgH/1UI7ys2l9kcg 2VvIZShV44+zJDNlqqSSDnlBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/S9Mi46O 6SFbusxnYmCQKSruJaswHwYDVR0jBBgwFoAUVXPFaK4BSBTRtN6vaPpGT0lSNmEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjE0LzJGRDkwMEUwQzNB MTExRjA5QjFCQzMzOUM0RjlBRTAyL1ZYUEZhSzRCU0JUUnRONnZhUHBHVDBsU05t RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVlhQRmFLNEJTQlRSdE42dmFQcEdUMGxTTm1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NjE0LzJGRDkwMEUwQzNBMTExRjA5QjFCQzMzOUM0RjlBRTAyL1ZYUEZhSzRCU0JU UnRONnZhUHBHVDBsU05tRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHnL7EvlLcE9QJGSvwg4zFF4USXZtRrfufwQFof/MmVyWK9GtAcpLgZA uvldNkYJuACa3awWDdkWvzzduHJVETpAcTFt0+9hnrjec5gRAgvZ9AAzyFfCX2fg wnSoeqqB2uozKKx06QjdOsZwxItzkw53XmYZAyMydvkFvzsCHK5zEJ8WV1msQqdf 9ypUI+EOL9DFmJDGktl+f2HUqS46dlbT3J1cSjtCxyhnAN8DLm8IT0Llz8zS2K9U He5KzL4g/WtR4St+1dISlbBnCcCM/WTOOGLAJN525pn0xjNhDYjS0V8QikyGN0Ua EIK21+guRogYea7r9xDQxh1VfmbQnIA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:13 2025 by rpki-client