This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft File: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft (raw, json) Hash identifier: gnprUMfsE+x+j2B1Mf+uCyOfwX56jT8xcMeifiMJUPY= Subject key identifier: 18:1B:A1:50:00:EC:FF:3B:F6:26:7C:02:1E:D9:67:0D:01:A5:4E:74 Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE Certificate issuer: /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft Manifest number: 020D Signing time: Tue 23 Dec 2025 01:17:24 +0000 Manifest this update: Tue 23 Dec 2025 01:17:23 +0000 Manifest next update: Tue 30 Dec 2025 01:17:23 +0000 Files and hashes: 1: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl (hash: S1rLGtdN/BB56EVFrMzKdeCoohqWCrLDTXFtRzZm+q4=) 2: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (hash: 4FOvuF+lrbDRETyeVF9s3HBZnjQN5y+IfUmzH88TfmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91433B3, serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE Validity Not Before: Dec 23 01:17:23 2025 GMT Not After : Dec 30 01:17:23 2025 GMT Subject: CN=6949eda4-d267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e5:73:67:bf:44:f3:60:4c:4f:67:32:25:28: c5:b6:42:15:e7:b3:41:62:1f:f6:94:c9:f2:bd:bf: 28:88:11:5c:ba:56:fc:83:12:45:eb:79:eb:ec:17: db:e2:e0:00:64:e9:e7:fb:04:1d:0d:bf:97:a6:ac: b1:c6:b7:cc:f8:b5:29:3f:8b:b3:39:93:4f:05:93: 2b:7a:5e:9b:58:b0:02:13:ac:64:7e:77:da:36:43: 60:21:88:42:42:00:b3:2a:66:0e:ab:7f:93:d3:a4: c6:bb:74:99:cf:48:7d:af:93:fb:24:1d:07:7b:53: 93:bc:8a:6a:64:b2:ba:12:f5:b9:cc:e7:8d:00:a7: 3b:b0:d2:0e:cd:30:05:ca:8a:11:3d:ca:65:2a:5d: c3:7e:ea:d5:3c:f5:89:6e:03:10:c6:02:52:fc:49: 68:56:5e:cd:7d:02:f0:4a:66:ea:35:3c:67:d5:d1: 07:a3:65:77:b9:c9:7b:19:6a:1e:f6:e3:ea:7d:fa: f4:3e:e2:b4:fd:ad:fc:84:eb:e1:00:c0:52:d3:8e: 0b:9e:1c:fa:d8:99:cd:5a:33:a1:ad:4e:b7:bc:ba: 44:63:bb:96:66:32:24:fa:33:14:4c:b4:33:4c:57: 3e:89:e6:7b:fe:d2:38:08:ff:38:c6:36:f9:8f:2e: 53:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1B:A1:50:00:EC:FF:3B:F6:26:7C:02:1E:D9:67:0D:01:A5:4E:74 X509v3 Authority Key Identifier: keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:86:52:99:58:4b:fe:90:85:94:bd:cc:1b:e7:bc:4d:d6:bb: 9b:3e:0a:89:6a:32:b3:6a:3f:35:fd:2b:c9:fa:50:f0:f1:82: f3:93:58:b2:80:ef:72:8f:8f:25:dc:b4:b7:4e:7d:53:bb:9d: a2:54:d3:b7:a9:45:1a:2a:32:7e:7b:11:8d:a1:44:2a:32:3f: 4e:38:c3:84:18:92:19:fe:45:e4:06:73:f1:70:c1:b1:b8:e0: 33:4c:2e:7f:67:4a:4d:2d:1e:12:0d:37:1c:f3:6d:ef:ac:1b: 85:70:a8:95:e3:d5:df:ad:03:df:b3:6a:0a:0f:32:5d:45:44: 69:05:0e:5b:48:a4:94:16:a9:2d:41:84:62:66:f3:79:d5:42: 40:f8:8b:98:d2:28:e6:3f:43:98:27:cc:10:36:63:33:de:2e: f1:6a:43:cf:c2:68:5f:7f:6f:a7:f9:92:35:14:0a:74:9b:65: 8a:8f:86:21:8b:37:da:c5:42:7a:f8:89:23:2c:7a:0e:10:1d: 79:16:8b:37:30:7a:9f:c6:78:fd:cc:d5:d0:be:5a:bb:54:ee: 68:e1:4e:90:ec:19:f6:34:6c:34:99:8b:e2:74:39:13:7a:eb: 8d:50:06:49:91:78:9c:a3:c0:c8:74:71:ac:a8:83:a6:8a:4d: 77:a7:16:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzQjMxMTAvBgNVBAUTKDU2QkI2RjMxMzdEOEREOUVCOTdFMzgzQkM3RjQ2MUQ5 MEY4NURERkUwHhcNMjUxMjIzMDExNzIzWhcNMjUxMjMwMDExNzIzWjAYMRYwFAYD VQQDDA02OTQ5ZWRhNC1kMjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjOVzZ79E82BMT2cyJSjFtkIV57NBYh/2lMnyvb8oiBFculb8gxJF63nr7Bfb 4uAAZOnn+wQdDb+XpqyxxrfM+LUpP4uzOZNPBZMrel6bWLACE6xkfnfaNkNgIYhC QgCzKmYOq3+T06TGu3SZz0h9r5P7JB0He1OTvIpqZLK6EvW5zOeNAKc7sNIOzTAF yooRPcplKl3DfurVPPWJbgMQxgJS/EloVl7NfQLwSmbqNTxn1dEHo2V3ucl7GWoe 9uPqffr0PuK0/a38hOvhAMBS044Lnhz62JnNWjOhrU63vLpEY7uWZjIk+jMUTLQz TFc+ieZ7/tI4CP84xjb5jy5TGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgboVAA 7P879iZ8Ah7ZZw0BpU50MB8GA1UdIwQYMBaAFFa7bzE32N2euX44O8f0YdkPhd3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzNCMy9CREZFMThDQ0I1 RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNaNjVmamc3eF9SaDJRLUYz ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZydHZNVGZZM1o2NWZqZzd4X1JoMlEtRjNmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzNCMy9CREZFMThDQ0I1RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNa NjVmamc3eF9SaDJRLUYzZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhhlKZWEv+kIWUvcwb57xN1rubPgqJajKzaj81/SvJ+lDw8YLzk1iy gO9yj48l3LS3Tn1Tu52iVNO3qUUaKjJ+exGNoUQqMj9OOMOEGJIZ/kXkBnPxcMGx uOAzTC5/Z0pNLR4SDTcc823vrBuFcKiV49XfrQPfs2oKDzJdRURpBQ5bSKSUFqkt QYRiZvN51UJA+IuY0ijmP0OYJ8wQNmMz3i7xakPPwmhff2+n+ZI1FAp0m2WKj4Yh izfaxUJ6+IkjLHoOEB15Fos3MHqfxnj9zNXQvlq7VO5o4U6Q7Bn2NGw0mYvidDkT euuNUAZJkXico8DIdHGsqIOmik13pxbN -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:07 2025 by rpki-client