This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft File: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft (raw, json) Hash identifier: BC3wnDoxFkeNGBXOIOPAAU9fjqy5MHHWmKkiWvW0jk4= Subject key identifier: C0:75:E8:F4:AC:C9:C3:75:13:B0:ED:87:74:B6:EF:83:18:9D:B9:8F Authority key identifier: BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A Certificate issuer: /CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A Certificate serial: 1ECC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft Manifest number: 1EA3 Signing time: Wed 24 Dec 2025 15:53:06 +0000 Manifest this update: Wed 24 Dec 2025 15:53:05 +0000 Manifest next update: Wed 31 Dec 2025 15:53:05 +0000 Files and hashes: 1: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl (hash: /ZCKSOqPKlKPoWa7FXJGuZkRDFotEtKwLD+bnCvgPzs=) 2: C22F80E4D1F011EEB68A503EC4F9AE02.roa (hash: Kjjm0gZskFT6tVxY5Ur25GzEYJIZngsq5sGod6YlbMM=) 3: BE047E02DBA411EAAF00CC6CC4F9AE02.roa (hash: w99/DAXuJPeoejD7jO/GwyxzGwiaUuCijwIrsTGlFkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7884 (0x1ecc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157861, serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A Validity Not Before: Dec 24 15:53:05 2025 GMT Not After : Dec 31 15:53:05 2025 GMT Subject: CN=694c0c61-5a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:93:9e:be:70:b6:37:e2:6a:4e:25:0f:2d: 3a:b1:95:1a:a9:2e:5f:f1:e9:5f:9e:01:c4:c7:54: ae:c5:d9:b4:61:d7:be:42:98:73:c4:f0:80:83:c4: ca:f1:e9:7f:96:f3:a2:aa:07:db:ba:06:32:1b:e1: ec:b0:34:60:64:23:20:1b:29:45:39:23:20:6a:46: db:e8:e8:b2:8a:67:57:f2:e6:c0:6d:52:82:d8:e0: 96:eb:10:55:e6:16:fd:74:70:40:cb:fb:a6:50:83: 01:e0:50:85:1f:df:45:50:4f:d1:30:0b:b6:86:26: cf:fb:8c:5f:53:81:ec:f3:e8:53:59:fe:eb:da:cb: 8c:94:2b:ec:84:be:d3:c9:b6:8d:bd:68:7a:74:c5: e4:23:8d:b1:19:97:91:d7:33:ce:e7:16:3c:8e:f9: fc:c9:27:ef:18:33:f6:a0:63:f3:e7:54:49:1d:36: 8b:c4:27:10:f2:2e:35:bf:af:fa:32:41:79:76:06: 67:1c:8c:eb:b6:c6:92:40:3c:a6:3e:8a:b5:9f:e8: e3:27:12:56:44:13:a0:54:3f:bb:ad:65:59:53:1c: cd:8b:57:c1:26:2c:bc:d3:aa:fc:86:c8:cf:1e:e0: 27:ba:9b:a8:20:f1:41:bb:cc:1b:d5:c0:6d:a3:d3: 42:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:75:E8:F4:AC:C9:C3:75:13:B0:ED:87:74:B6:EF:83:18:9D:B9:8F X509v3 Authority Key Identifier: keyid:BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:6e:aa:be:b1:dd:d6:25:fa:c5:5e:00:e0:37:2e:4d:99:de: d4:fa:a4:d8:75:77:79:cd:d8:11:d5:40:46:cb:2e:f6:ad:ab: c1:59:59:99:94:39:a4:83:a2:b2:f2:e5:05:fc:30:b8:c9:f0: dc:d1:f7:1e:0f:55:7f:3a:48:76:30:3f:e7:2c:6e:84:4e:d3: 76:1b:71:32:9a:ee:85:fc:fd:1d:e8:bb:2f:fe:85:4a:8e:15: 50:07:0a:58:af:06:80:57:47:c7:eb:0f:69:92:87:84:42:86: bc:98:88:d7:ad:c3:24:b2:bf:02:ac:ed:b9:7c:39:f8:34:b4: 8a:b7:8d:8c:b2:62:97:a1:7d:5c:1b:bf:66:06:44:96:6b:89: 93:57:7a:ec:8d:62:08:98:f3:17:7a:1e:8d:30:49:31:82:13: 95:95:bd:67:71:42:4d:db:37:3f:28:eb:e7:65:7c:ba:cd:8f: cc:92:3d:2b:0f:c9:5b:04:62:ac:c1:a7:dc:b3:6e:58:ec:60: 0e:a2:cd:48:94:9d:ca:c0:82:2f:e1:9f:13:fd:52:de:fe:d9: 40:73:e1:29:e1:75:43:61:ed:6e:a0:0c:9e:fa:0a:fb:e6:72: 5b:ea:5c:a4:91:47:55:68:96:43:13:89:09:7c:4d:09:da:8c: 81:09:2e:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc4NjExMTAvBgNVBAUTKEJENUYwODg4OTREOURBNzU2NUQ0NDM2MTQzRUUwMjZD MzIwRTRBMkEwHhcNMjUxMjI0MTU1MzA1WhcNMjUxMjMxMTU1MzA1WjAYMRYwFAYD VQQDDA02OTRjMGM2MS01YTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjOTnr5wtjfiak4lDy06sZUaqS5f8elfngHEx1Suxdm0Yde+QphzxPCAg8TK 8el/lvOiqgfbugYyG+HssDRgZCMgGylFOSMgakbb6OiyimdX8ubAbVKC2OCW6xBV 5hb9dHBAy/umUIMB4FCFH99FUE/RMAu2hibP+4xfU4Hs8+hTWf7r2suMlCvshL7T ybaNvWh6dMXkI42xGZeR1zPO5xY8jvn8ySfvGDP2oGPz51RJHTaLxCcQ8i41v6/6 MkF5dgZnHIzrtsaSQDymPoq1n+jjJxJWRBOgVD+7rWVZUxzNi1fBJiy806r8hsjP HuAnupuoIPFBu8wb1cBto9NCUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMB16PSs ycN1E7Dth3S274MYnbmPMB8GA1UdIwQYMBaAFL1fCIiU2dp1ZdRDYUPuAmwyDkoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2MS8zNEQyNkM4ODg0 NkYxMUU2QTMxM0MwMjJDNEY5QUUwMi92VjhJaUpUWjJuVmwxRU5oUS00Q2JESU9T aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZWOElpSlRaMm5WbDFFTmhRLTRDYkRJT1Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Nzg2MS8zNEQyNkM4ODg0NkYxMUU2QTMxM0MwMjJDNEY5QUUwMi92VjhJaUpUWjJu VmwxRU5oUS00Q2JESU9TaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5bqq+sd3WJfrFXgDgNy5Nmd7U+qTYdXd5zdgR1UBGyy72ravBWVmZ lDmkg6Ky8uUF/DC4yfDc0fceD1V/Okh2MD/nLG6ETtN2G3Eymu6F/P0d6Lsv/oVK jhVQBwpYrwaAV0fH6w9pkoeEQoa8mIjXrcMksr8CrO25fDn4NLSKt42MsmKXoX1c G79mBkSWa4mTV3rsjWIImPMXeh6NMEkxghOVlb1ncUJN2zc/KOvnZXy6zY/Mkj0r D8lbBGKswafcs25Y7GAOos1IlJ3KwIIv4Z8T/VLe/tlAc+Ep4XVDYe1uoAye+gr7 5nJb6lykkUdVaJZDE4kJfE0J2oyBCS7a -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:54 2025 by rpki-client