This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft File: vIlHKy_1NJ5Maoqwmc745o3XuZU.mft (raw, json) Hash identifier: wQ8UxOIYv/IpXsLMWqBXk/waf9gj5mgJZe8Cww/O2JE= Subject key identifier: FD:51:C4:19:4B:FC:C6:09:C5:6A:23:12:F5:92:FC:A9:FC:6E:D8:CE Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 Certificate issuer: /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft Manifest number: 084A Signing time: Mon 22 Dec 2025 20:04:16 +0000 Manifest this update: Mon 22 Dec 2025 20:04:15 +0000 Manifest next update: Mon 29 Dec 2025 20:04:15 +0000 Files and hashes: 1: vIlHKy_1NJ5Maoqwmc745o3XuZU.crl (hash: PT1QKVYy7Sc2Em95HtR36HiNLtk6OddV9cWFIn6Z6n4=) 2: 27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (hash: g+6S4S2dxNtg0BGxl2vF4MpJIveeS58PPReJPs/GBY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91495CF, serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Validity Not Before: Dec 22 20:04:15 2025 GMT Not After : Dec 29 20:04:15 2025 GMT Subject: CN=6949a440-f21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9a:9b:8e:17:ea:ef:5f:92:a6:3c:fe:8a:fa: 41:fe:77:58:d1:b7:b4:e7:30:ca:77:66:45:e7:8f: 3a:15:34:d3:65:62:5b:ee:98:8a:ef:a3:a1:28:b5: 88:2f:cd:28:11:09:85:a0:0e:49:7d:46:2a:ef:df: 2b:fb:01:b4:62:c2:7c:56:2b:85:d8:bc:27:f7:d3: ea:0a:08:89:6c:fa:73:2d:2a:58:57:51:a0:d3:9b: c3:1f:cf:41:a6:19:ed:03:cf:2f:87:31:b6:31:fb: 48:26:27:32:9c:b7:3a:77:c2:88:6a:c5:8f:71:d1: 4e:aa:0e:ee:4d:91:c8:5e:a7:4e:ef:e9:c9:e8:50: c1:e4:ff:b7:d9:39:18:ee:19:27:fa:cf:43:38:91: 8a:47:f7:71:a1:7c:60:0b:b6:33:00:20:52:ab:04: a6:32:ce:3f:a7:95:db:12:d4:c5:68:ac:b4:1e:48: 96:de:0a:43:74:16:34:12:94:7f:4a:33:da:0b:76: 65:ae:0b:c2:ff:14:b1:2d:b2:c0:04:4d:37:49:09: 01:e0:82:57:e2:2c:fa:da:84:8e:ce:af:b4:46:90: 72:b6:dc:f9:00:4d:d1:17:70:a0:71:d8:80:9d:cd: fa:95:7c:96:fc:c7:ce:aa:6e:eb:17:29:1f:07:72: 2d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:51:C4:19:4B:FC:C6:09:C5:6A:23:12:F5:92:FC:A9:FC:6E:D8:CE X509v3 Authority Key Identifier: keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:36:bc:07:46:ef:6b:d5:aa:35:df:37:f7:e4:8f:af:81:b9: 19:a9:0d:ee:d7:38:53:3d:b9:2b:78:f2:3c:98:4b:c4:35:0f: 4d:6c:fd:8b:f8:38:be:f0:ec:31:03:d0:b3:52:33:af:d3:49: 15:c2:38:d9:87:13:48:b6:eb:f7:6a:20:25:a9:5f:1f:64:9e: f9:a4:48:b1:e3:0b:18:f7:59:39:2e:cd:a8:33:ce:7d:78:8f: 7e:56:5c:32:54:5f:ff:1e:6b:b7:3f:f5:7a:4c:c2:3c:e7:46: 6e:c5:b1:57:0d:c7:5a:2e:96:66:b5:bd:88:54:79:52:4e:ae: 96:7a:2e:93:db:d5:11:cb:a8:41:48:b5:db:4c:6d:27:a4:c6: 12:13:de:2f:32:b3:c8:51:91:c0:f8:29:7e:72:08:82:28:6b: 07:7c:39:e6:fb:c2:b1:f4:53:00:33:c8:a9:1a:91:5d:0d:f8: 91:e8:1c:d7:4f:fc:c4:21:8e:ae:c6:2c:07:5f:2d:de:36:73: da:a7:43:c8:a7:fb:f6:da:f8:05:9a:a0:eb:cf:ff:af:2d:66: 47:25:a6:f7:22:4e:1f:bc:ff:dc:8a:86:72:64:fb:44:87:62: e5:e2:fe:57:4c:7d:32:ce:2c:e9:62:3c:2c:99:e5:4c:0f:8c: 0f:2a:ee:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk1Q0YxMTAvBgNVBAUTKEJDODk0NzJCMkZGNTM0OUU0QzZBOEFCMDk5Q0VGOEU2 OEREN0I5OTUwHhcNMjUxMjIyMjAwNDE1WhcNMjUxMjI5MjAwNDE1WjAYMRYwFAYD VQQDDA02OTQ5YTQ0MC1mMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJqbjhfq71+Spjz+ivpB/ndY0be05zDKd2ZF5486FTTTZWJb7piK76OhKLWI L80oEQmFoA5JfUYq798r+wG0YsJ8ViuF2Lwn99PqCgiJbPpzLSpYV1Gg05vDH89B phntA88vhzG2MftIJicynLc6d8KIasWPcdFOqg7uTZHIXqdO7+nJ6FDB5P+32TkY 7hkn+s9DOJGKR/dxoXxgC7YzACBSqwSmMs4/p5XbEtTFaKy0HkiW3gpDdBY0EpR/ SjPaC3ZlrgvC/xSxLbLABE03SQkB4IJX4iz62oSOzq+0RpByttz5AE3RF3CgcdiA nc36lXyW/MfOqm7rFykfB3ItiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1RxBlL /MYJxWojEvWS/Kn8btjOMB8GA1UdIwQYMBaAFLyJRysv9TSeTGqKsJnO+OaN17mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTVDRi8yQTUxMDY5Q0VC QUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5KNU1hb3F3bWM3NDVvM1h1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJbEhLeV8xTko1TWFvcXdtYzc0NW8zWHVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTVDRi8yQTUxMDY5Q0VCQUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5K NU1hb3F3bWM3NDVvM1h1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByNrwHRu9r1ao13zf35I+vgbkZqQ3u1zhTPbkrePI8mEvENQ9NbP2L +Di+8OwxA9CzUjOv00kVwjjZhxNItuv3aiAlqV8fZJ75pEix4wsY91k5Ls2oM859 eI9+VlwyVF//Hmu3P/V6TMI850ZuxbFXDcdaLpZmtb2IVHlSTq6Wei6T29URy6hB SLXbTG0npMYSE94vMrPIUZHA+Cl+cgiCKGsHfDnm+8Kx9FMAM8ipGpFdDfiR6BzX T/zEIY6uxiwHXy3eNnPap0PIp/v22vgFmqDrz/+vLWZHJab3Ik4fvP/cioZyZPtE h2Ll4v5XTH0yzizpYjwsmeVMD4wPKu4a -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:57 2025 by rpki-client