This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json) Hash identifier: HM3auz4gES4PJXjmaRyfKzrpmw+P6Jpa60M6DMVjIAA= Subject key identifier: 64:94:58:B9:EE:A4:BE:5C:AF:A2:FC:79:4F:48:EF:9C:5C:AD:26:5D Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Certificate serial: 048B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft Manifest number: 0486 Signing time: Mon 22 Dec 2025 23:08:47 +0000 Manifest this update: Mon 22 Dec 2025 23:08:46 +0000 Manifest next update: Mon 29 Dec 2025 23:08:46 +0000 Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: 8GC7dhmbKx4iy7CwhbiYruhTnF7Sb15T7KNTzBcgcoY=) 2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: oV8jstChrG2LMgvNNWOO9hMkyB2Ar9RL1KKMQtKZSu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1163 (0x48b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Validity Not Before: Dec 22 23:08:46 2025 GMT Not After : Dec 29 23:08:46 2025 GMT Subject: CN=6949cf7f-19a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d3:cc:f5:a6:95:fd:e8:2e:8d:1f:26:ee:89: 95:0e:45:3b:2b:88:40:ec:af:0d:c7:7b:8a:79:d7: 70:0e:2e:7c:25:44:87:73:10:c1:11:8e:ac:d0:ef: be:8f:60:49:e1:57:a1:24:fd:b3:e7:e1:04:2c:9c: a7:c6:25:ca:b9:bd:7e:33:4e:16:a5:55:3d:bb:f0: ae:9e:db:c9:e1:41:ce:71:8f:08:c9:68:e5:2d:34: ea:7f:3a:8a:a5:ea:7e:32:36:d5:04:29:20:b2:df: 6f:b3:cf:b7:7a:2f:72:90:b5:09:58:4c:e0:ed:63: 62:e7:d7:c0:3a:5e:b0:5e:fe:33:33:65:9c:51:fd: e6:4b:2e:27:bb:70:16:91:df:55:6c:3b:06:ff:6d: 3a:49:c7:3b:95:4f:51:ab:32:54:7f:b2:77:85:94: 52:eb:a0:d3:8a:f2:eb:fd:38:58:9e:e5:2a:58:b8: 72:d7:cd:31:3d:3b:91:7f:cc:e0:66:76:54:11:fd: c1:31:44:5b:d0:7d:32:a0:fb:14:9b:e9:dc:62:02: d1:ea:34:df:45:3d:a7:45:15:ce:2d:b7:96:ce:ea: 2e:b4:96:d0:7e:43:8e:f7:38:9c:8c:ac:60:54:58: 9e:77:ec:cb:ad:be:9e:8e:04:ce:05:99:c9:40:a7: 50:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:94:58:B9:EE:A4:BE:5C:AF:A2:FC:79:4F:48:EF:9C:5C:AD:26:5D X509v3 Authority Key Identifier: keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6e:b6:50:ea:7f:a0:98:17:a5:8a:ba:6e:d1:af:eb:3f:b0: f3:01:47:36:37:1f:6c:f2:ee:c5:7a:ba:c2:88:9d:37:05:5b: bb:32:1c:b9:88:18:d3:41:32:7a:28:e5:c0:10:0b:23:96:f3: ce:8f:a0:0a:24:b4:96:c8:35:2e:4b:3c:fb:21:ad:6a:0d:fc: 4c:fb:6f:84:a5:45:46:93:63:2c:ea:6e:ee:13:c5:19:c6:48: f6:2b:d1:f8:61:a9:17:3e:65:60:39:dc:56:44:f8:d0:d3:cc: 61:5c:34:40:06:42:c7:65:db:f6:e8:bf:41:98:8c:35:2d:3e: 86:94:ed:82:da:5c:cf:d9:53:5b:39:3c:36:c5:6d:19:87:bb: da:56:1e:d6:f3:e1:72:77:8a:26:7a:84:a9:62:14:80:2d:2b: 9f:ff:df:40:ac:2d:a2:39:c3:0b:48:f4:65:8f:df:e5:e5:0c: 80:33:44:44:1b:73:2b:6f:51:e2:8c:24:7e:bb:d3:17:b6:ff: af:de:fd:dc:a1:22:fc:08:11:99:ee:47:44:8c:5f:fb:f7:b2: 4b:8e:db:1f:cb:e1:1e:c3:a3:4c:97:20:36:65:dc:8c:98:68: b1:08:ce:f2:62:d2:f4:e3:33:a6:b5:50:48:56:0d:3e:2b:9c: b5:38:4f:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1Q0QxMTAvBgNVBAUTKEJEQjU5MjZBODk2QkI2NTFBMEU3NTQwQTM5OENENUVG MDcxNDE3MUYwHhcNMjUxMjIyMjMwODQ2WhcNMjUxMjI5MjMwODQ2WjAYMRYwFAYD VQQDDA02OTQ5Y2Y3Zi0xOWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9PM9aaV/egujR8m7omVDkU7K4hA7K8Nx3uKeddwDi58JUSHcxDBEY6s0O++ j2BJ4VehJP2z5+EELJynxiXKub1+M04WpVU9u/CuntvJ4UHOcY8IyWjlLTTqfzqK pep+MjbVBCkgst9vs8+3ei9ykLUJWEzg7WNi59fAOl6wXv4zM2WcUf3mSy4nu3AW kd9VbDsG/206Scc7lU9RqzJUf7J3hZRS66DTivLr/ThYnuUqWLhy180xPTuRf8zg ZnZUEf3BMURb0H0yoPsUm+ncYgLR6jTfRT2nRRXOLbeWzuoutJbQfkOO9zicjKxg VFied+zLrb6ejgTOBZnJQKdQKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSUWLnu pL5cr6L8eU9I75xcrSZdMB8GA1UdIwQYMBaAFL21kmqJa7ZRoOdUCjmM1e8HFBcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTVDRC8yOTQzNkZDRTY4 N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRsR2c1MVFLT1l6Vjd3Y1VG eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiV1Nhb2xydGxHZzUxUUtPWXpWN3djVUZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTVDRC8yOTQzNkZDRTY4N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRs R2c1MVFLT1l6Vjd3Y1VGeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7brZQ6n+gmBelirpu0a/rP7DzAUc2Nx9s8u7FerrCiJ03BVu7Mhy5 iBjTQTJ6KOXAEAsjlvPOj6AKJLSWyDUuSzz7Ia1qDfxM+2+EpUVGk2Ms6m7uE8UZ xkj2K9H4YakXPmVgOdxWRPjQ08xhXDRABkLHZdv26L9BmIw1LT6GlO2C2lzP2VNb OTw2xW0Zh7vaVh7W8+Fyd4omeoSpYhSALSuf/99ArC2iOcMLSPRlj9/l5QyAM0RE G3Mrb1HijCR+u9MXtv+v3v3coSL8CBGZ7kdEjF/797JLjtsfy+Eew6NMlyA2ZdyM mGixCM7yYtL04zOmtVBIVg0+K5y1OE9t -----END CERTIFICATE-----Generated at Wed Dec 24 17:35:07 2025 by rpki-client