This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft File: VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft (raw, json) Hash identifier: UPzTvuQW5PEYj0parIzTMo2BXCmOjthTxBZZQUVe754= Subject key identifier: 9D:62:D6:13:4C:83:0E:6D:32:E3:83:40:7A:BE:83:03:CE:C0:94:72 Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 Certificate issuer: /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Certificate serial: 0BB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft Manifest number: 0BA8 Signing time: Mon 22 Dec 2025 18:30:06 +0000 Manifest this update: Mon 22 Dec 2025 18:30:05 +0000 Manifest next update: Mon 29 Dec 2025 18:30:05 +0000 Files and hashes: 1: VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl (hash: jHxn4dyaudpAnro7zmAcYpghNxz5bCrSevt2XJ/EAm8=) 2: 8789C45E384311EAAA40EE51C4F9AE02.roa (hash: MAWDNXgpu9PgJn7Gnnkwa2ICesKD1B+IPcDJf1k8UoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2992 (0xbb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154534, serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Validity Not Before: Dec 22 18:30:05 2025 GMT Not After : Dec 29 18:30:05 2025 GMT Subject: CN=69498e2e-60c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f4:17:e6:d9:19:cf:c1:2b:57:d1:58:c6:37: 87:43:54:5a:ec:cf:e2:16:1a:8c:64:a9:5e:e5:08: 94:66:5c:5f:fc:61:05:39:72:82:0d:b2:12:40:09: 6d:70:89:a9:cc:92:e0:f3:f9:dc:f3:a9:c0:be:1a: 43:1c:3c:cf:30:35:61:30:18:7b:82:17:43:2c:de: 93:34:fe:ea:fb:cd:08:78:87:5b:ac:7e:d3:d0:83: 91:a1:99:ef:dd:c8:38:89:c8:3c:5e:2c:ed:83:05: be:d0:dc:5a:40:52:41:75:cd:6b:df:db:0f:34:16: 21:2f:50:46:e3:6f:08:4d:26:61:c0:79:9e:29:4f: c7:3b:bd:aa:74:bc:5d:33:88:c8:c6:e4:d1:6e:f3: 92:f4:83:ca:6c:be:58:f8:47:da:e5:26:12:c6:ed: eb:e0:f4:57:f2:66:8c:1d:93:cf:e3:c2:b8:5f:05: 4e:01:7b:70:cf:2d:b4:9a:df:5e:13:1b:88:98:d6: 35:2e:5f:f4:65:31:78:68:79:93:06:84:ec:d2:96: 8c:73:69:20:08:18:ca:55:c1:75:85:1f:37:1f:89: 9f:7b:8c:1d:12:c5:20:b5:1b:85:08:2a:cc:62:0c: b5:26:fe:7c:87:36:89:6c:bd:88:3a:04:48:16:4e: e9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:62:D6:13:4C:83:0E:6D:32:E3:83:40:7A:BE:83:03:CE:C0:94:72 X509v3 Authority Key Identifier: keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:f9:fc:82:a9:c1:c5:ec:9c:6b:29:9c:3b:ba:80:18:b6:7f: 4e:00:bf:52:7b:62:71:52:29:95:b0:f7:d2:ea:0b:50:95:7c: 5b:cb:cb:aa:39:81:48:be:67:62:22:d5:54:dc:38:35:44:6d: d5:83:14:e8:8f:a7:87:c1:ee:28:29:8f:be:ae:fb:e3:6d:09: 40:a3:4a:d6:8f:3a:6e:b9:60:a3:7f:d4:28:d1:ba:8c:28:94: 02:31:e1:f3:ab:9e:88:e9:b1:06:4e:4d:9b:58:05:2e:ca:0a: 59:59:6b:a5:67:13:4e:59:f2:66:63:0b:44:3d:dd:7f:e6:eb: 84:dd:52:a9:b4:07:e2:13:f9:58:f6:bc:93:4b:73:31:a7:e2: fb:02:35:b2:4c:66:d1:28:4f:ae:74:8c:05:a3:ee:77:4f:e3: ac:34:81:57:05:7a:60:64:fd:6a:79:0d:4d:27:44:d4:2e:e4: 89:4f:40:4f:80:07:9b:37:a9:4f:b6:43:fb:82:46:2f:53:23: 84:8b:b5:4f:11:19:fd:50:6a:e0:45:e5:8b:43:f2:32:18:d7: 73:72:c0:2f:00:b8:8b:c8:9c:bf:c8:4b:aa:a4:fe:0b:2d:44: 92:3a:1a:52:36:df:56:a9:eb:79:1c:d4:23:f2:ea:0f:e5:89: 14:64:8d:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MzQxMTAvBgNVBAUTKDU1QzQ2ODU1Q0M5MUFDNTRBQzA3NUMyOTdCNzUzMUZB ODhBNzM1RDkwHhcNMjUxMjIyMTgzMDA1WhcNMjUxMjI5MTgzMDA1WjAYMRYwFAYD VQQDDA02OTQ5OGUyZS02MGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PQX5tkZz8ErV9FYxjeHQ1Ra7M/iFhqMZKle5QiUZlxf/GEFOXKCDbISQAlt cImpzJLg8/nc86nAvhpDHDzPMDVhMBh7ghdDLN6TNP7q+80IeIdbrH7T0IORoZnv 3cg4icg8XiztgwW+0NxaQFJBdc1r39sPNBYhL1BG428ITSZhwHmeKU/HO72qdLxd M4jIxuTRbvOS9IPKbL5Y+Efa5SYSxu3r4PRX8maMHZPP48K4XwVOAXtwzy20mt9e ExuImNY1Ll/0ZTF4aHmTBoTs0paMc2kgCBjKVcF1hR83H4mfe4wdEsUgtRuFCCrM Ygy1Jv58hzaJbL2IOgRIFk7pkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1i1hNM gw5tMuODQHq+gwPOwJRyMB8GA1UdIwQYMBaAFFXEaFXMkaxUrAdcKXt1MfqIpzXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUzNC9CRDI2OTA5RTM4 NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJGU3NCMXdwZTNVeC1vaW5O ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZjUm9WY3lSckZTc0Ixd3BlM1V4LW9pbk5kay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUzNC9CRDI2OTA5RTM4NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJG U3NCMXdwZTNVeC1vaW5OZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy+fyCqcHF7JxrKZw7uoAYtn9OAL9Se2JxUimVsPfS6gtQlXxby8uq OYFIvmdiItVU3Dg1RG3VgxToj6eHwe4oKY++rvvjbQlAo0rWjzpuuWCjf9Qo0bqM KJQCMeHzq56I6bEGTk2bWAUuygpZWWulZxNOWfJmYwtEPd1/5uuE3VKptAfiE/lY 9ryTS3Mxp+L7AjWyTGbRKE+udIwFo+53T+OsNIFXBXpgZP1qeQ1NJ0TULuSJT0BP gAebN6lPtkP7gkYvUyOEi7VPERn9UGrgReWLQ/IyGNdzcsAvALiLyJy/yEuqpP4L LUSSOhpSNt9Wqet5HNQj8uoP5YkUZI1x -----END CERTIFICATE-----Generated at Tue Dec 23 14:36:25 2025 by rpki-client