This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft File: VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json) Hash identifier: DLwH68VxI5ZHNb39YMih7J5/UrfF4R3yuOsvXQsroVQ= Subject key identifier: 42:C7:D3:24:0E:47:0B:1F:B2:47:B0:D8:22:07:C3:0F:1F:14:A1:20 Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64 Certificate issuer: /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64 Certificate serial: 34F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft Manifest number: 34F0 Signing time: Wed 24 Dec 2025 14:55:47 +0000 Manifest this update: Wed 24 Dec 2025 14:55:46 +0000 Manifest next update: Wed 31 Dec 2025 14:55:46 +0000 Files and hashes: 1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: +5MAt8rmxrwg0e2KLw647gIelHROf/bBK+fCNdhDS+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 14:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13552 (0x34f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D1DA, serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64 Validity Not Before: Dec 24 14:55:46 2025 GMT Not After : Dec 31 14:55:46 2025 GMT Subject: CN=694bfef3-cb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:04:11:05:fa:6a:3c:e5:af:52:29:b5:da:e5: 88:5f:4b:bb:3d:45:4c:66:e4:e8:28:a0:21:b3:2a: 06:ad:ae:ff:59:28:ba:68:94:d4:a4:ae:71:89:63: 00:0e:6c:14:a3:7e:f1:e2:b9:03:4a:4c:85:22:b9: 1a:bb:c1:e6:8f:e2:71:ff:3e:6e:e0:0b:78:29:3b: e6:69:36:12:f8:56:65:d9:61:e7:60:b8:df:9c:51: b7:bb:44:6f:a5:84:c3:3c:dc:02:19:3c:c6:af:e9: 63:85:38:4c:10:79:82:63:d9:53:af:98:06:85:0c: 0b:15:65:83:0b:10:a6:df:8a:ce:f6:8c:f9:5e:04: ab:1d:0a:84:38:6a:0d:a2:f8:ae:bc:8e:79:38:66: ac:2d:1b:33:94:7a:d9:7f:ec:d9:66:41:af:c7:82: de:98:a3:f7:a8:ba:32:06:8d:80:9b:e2:93:37:78: ad:3d:17:37:52:90:f9:b0:05:8a:e9:be:04:f1:78: 4b:22:57:df:a9:e5:39:e2:ea:5a:85:b3:13:d7:b2: 48:da:51:e3:18:65:c9:79:f9:ba:14:4d:a0:59:13: a5:21:39:34:1d:03:32:db:81:92:d6:9e:e6:c2:f9: b5:6b:4f:b0:63:d8:a0:21:fd:59:e5:89:9b:ff:5a: 48:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C7:D3:24:0E:47:0B:1F:B2:47:B0:D8:22:07:C3:0F:1F:14:A1:20 X509v3 Authority Key Identifier: keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:3d:5a:4a:c7:8e:2f:1f:dd:d6:11:63:af:aa:91:0d:d8:e4: e9:dd:c1:01:4c:1b:d3:d7:3e:c1:97:9a:e3:57:73:84:f7:f4: 82:e6:51:32:45:63:43:92:8f:39:0f:22:2a:0f:f7:e0:90:c4: d7:23:bd:94:03:f9:b0:ae:61:44:f4:e8:9b:cd:ef:3e:b1:25: 81:2c:df:21:8b:c8:94:f0:a8:c7:f3:4a:3c:c0:a6:42:5c:84: e7:59:f1:70:09:a4:ee:52:69:58:c1:34:4d:09:2f:e1:aa:7d: 2f:01:2d:a6:5c:d2:15:de:bb:ce:31:38:a2:03:b7:81:96:e1: c1:0c:8d:98:13:28:3b:eb:24:5c:75:93:e1:7c:94:c0:b2:13: f2:d5:5a:a2:15:08:85:2c:f5:1b:ea:6e:0e:61:3d:64:d6:98: 9f:66:01:e6:50:f0:48:6d:15:23:5b:58:ca:0b:7d:1b:4a:9e: be:3e:4a:02:8e:26:4b:e5:77:03:aa:2c:a7:e8:e4:94:bb:57: 7d:d0:c7:7a:8c:21:0b:03:3d:fd:fb:0d:bf:c9:63:24:99:a7: 6d:5f:13:24:fa:d1:54:60:fe:82:57:b1:1a:4b:5a:58:37:32: d6:fe:25:20:88:ef:57:f3:9c:ad:f7:62:04:e9:52:3b:e7:46: fa:1a:c4:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxREExMTAvBgNVBAUTKDU1MTRDMTgxMzdERUFCOEQxNEYxMTFDOTBGN0Y2QjdF MzBEMDFGNjQwHhcNMjUxMjI0MTQ1NTQ2WhcNMjUxMjMxMTQ1NTQ2WjAYMRYwFAYD VQQDDA02OTRiZmVmMy1jYjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjQQRBfpqPOWvUim12uWIX0u7PUVMZuToKKAhsyoGra7/WSi6aJTUpK5xiWMA DmwUo37x4rkDSkyFIrkau8Hmj+Jx/z5u4At4KTvmaTYS+FZl2WHnYLjfnFG3u0Rv pYTDPNwCGTzGr+ljhThMEHmCY9lTr5gGhQwLFWWDCxCm34rO9oz5XgSrHQqEOGoN oviuvI55OGasLRszlHrZf+zZZkGvx4LemKP3qLoyBo2Am+KTN3itPRc3UpD5sAWK 6b4E8XhLIlffqeU54upahbMT17JI2lHjGGXJefm6FE2gWROlITk0HQMy24GS1p7m wvm1a0+wY9igIf1Z5Ymb/1pImwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELH0yQO Rwsfskew2CIHww8fFKEgMB8GA1UdIwQYMBaAFFUUwYE33quNFPERyQ9/a34w0B9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDFEQS8wMDhDRTUyQTFE OUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0MFU4UkhKRDM5cmZqRFFI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVEJnVGZlcTQwVThSSEpEMzlyZmpEUUgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDFEQS8wMDhDRTUyQTFEOUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0 MFU4UkhKRDM5cmZqRFFIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmPVpKx44vH93WEWOvqpEN2OTp3cEBTBvT1z7Bl5rjV3OE9/SC5lEy RWNDko85DyIqD/fgkMTXI72UA/mwrmFE9Oibze8+sSWBLN8hi8iU8KjH80o8wKZC XITnWfFwCaTuUmlYwTRNCS/hqn0vAS2mXNIV3rvOMTiiA7eBluHBDI2YEyg76yRc dZPhfJTAshPy1VqiFQiFLPUb6m4OYT1k1pifZgHmUPBIbRUjW1jKC30bSp6+PkoC jiZL5XcDqiyn6OSUu1d90Md6jCELAz39+w2/yWMkmadtXxMk+tFUYP6CV7EaS1pY NzLW/iUgiO9X85yt92IE6VI750b6GsQe -----END CERTIFICATE-----Generated at Wed Dec 24 17:35:03 2025 by rpki-client