This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft File: Vp-1bt2xandk-zENNy4XiFSCg5k.mft (raw, json) Hash identifier: +R7LldKQwiSXXbCWmYdTPwMjDVY+L3QykelJxUp05wU= Subject key identifier: D0:5B:DA:C4:6F:7D:22:C4:84:ED:50:DD:80:B2:D7:84:4A:54:AC:9F Authority key identifier: 56:9F:B5:6E:DD:B1:6A:77:64:FB:31:0D:37:2E:17:88:54:82:83:99 Certificate issuer: /CN=A91878B3/serialNumber=569FB56EDDB16A7764FB310D372E178854828399 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vp-1bt2xandk-zENNy4XiFSCg5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft Manifest number: 09 Signing time: Tue 23 Dec 2025 06:54:51 +0000 Manifest this update: Tue 23 Dec 2025 06:54:50 +0000 Manifest next update: Tue 30 Dec 2025 06:54:50 +0000 Files and hashes: 1: Vp-1bt2xandk-zENNy4XiFSCg5k.crl (hash: L00STJGQ23Yt71gJ29tlPwxeFg9X3kXzXA8iwSQtCpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.crl rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vp-1bt2xandk-zENNy4XiFSCg5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878B3, serialNumber=569FB56EDDB16A7764FB310D372E178854828399 Validity Not Before: Dec 23 06:54:50 2025 GMT Not After : Dec 30 06:54:50 2025 GMT Subject: CN=694a3cbb-45f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cd:fd:f1:44:16:4b:87:7e:de:73:98:9e:31: 31:64:00:a9:83:02:ea:00:45:65:d4:d0:64:e8:82: 51:67:2c:69:a5:f0:7a:e6:da:66:49:18:8b:71:1e: e3:69:74:b1:62:4c:34:1a:46:fc:62:38:58:fb:82: e9:0f:21:3d:00:1a:d4:92:a8:f4:06:3a:b2:bf:98: d2:6b:2e:4f:51:3c:72:ac:1b:f7:92:75:f0:15:95: 74:9e:ee:3e:68:77:b1:df:7f:c1:45:cf:a5:8d:58: 40:91:73:1a:dd:fd:e3:6a:28:fc:d0:8d:6d:38:34: 49:41:37:b6:28:d6:e4:b4:6f:7c:ea:5f:58:8e:b8: fa:5f:f9:6b:5e:a1:aa:ef:a4:c7:77:be:b5:22:7c: a4:08:68:5a:a2:52:34:3b:9f:25:c4:1c:f5:c4:16: 01:62:64:6d:39:cc:66:80:5c:61:0a:02:1e:3c:f7: 4a:6f:ca:0e:c9:79:e2:8c:d0:82:70:7f:3c:e1:90: ae:a6:c1:c9:8e:7e:09:6d:5f:51:58:0c:9c:39:af: af:e2:94:57:60:71:89:58:69:8f:d9:92:af:46:e7: 25:b6:5b:25:2b:83:4c:23:54:c2:09:d3:61:ed:24: e1:fa:d0:47:37:3c:27:61:f0:44:b0:89:bb:2a:7e: 31:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5B:DA:C4:6F:7D:22:C4:84:ED:50:DD:80:B2:D7:84:4A:54:AC:9F X509v3 Authority Key Identifier: keyid:56:9F:B5:6E:DD:B1:6A:77:64:FB:31:0D:37:2E:17:88:54:82:83:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vp-1bt2xandk-zENNy4XiFSCg5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:25:45:18:d2:b9:e4:d8:86:23:b4:5e:67:1a:05:14:01:4a: f1:2b:c0:f4:c1:5b:ac:5e:cc:b5:37:76:b9:55:11:d7:e4:fa: b4:60:f0:46:82:7e:b6:7a:4e:92:71:1d:28:15:72:33:da:86: 53:f3:70:51:46:51:f9:37:fc:dd:22:d0:17:8c:47:66:f5:db: ec:1e:7e:84:fb:0c:9a:23:1d:7d:a8:57:eb:1a:94:77:c1:be: d9:0c:93:82:1f:60:c8:9f:63:6e:23:2e:33:15:9a:25:9e:e3: 4d:ff:a7:6c:98:b8:a0:d6:fb:53:b1:b2:df:f6:2a:89:76:bb: f7:af:ef:e7:70:d6:e7:53:04:61:63:23:95:ff:d5:64:53:0c: 16:58:8d:97:31:ce:7d:7f:80:26:c3:da:aa:dd:02:15:bc:81: c8:c7:e1:2f:f8:12:03:d6:5d:b7:d7:d2:8d:15:bf:9a:1b:25: 7d:dc:a9:5d:4a:bc:ca:ec:42:2a:ea:1c:2a:28:f9:28:e3:10: 63:0c:31:0e:d5:ee:79:e6:d5:d0:76:7b:19:71:dc:b6:cf:7f: 84:07:c7:ff:15:39:00:35:a0:56:ab:99:d8:17:49:e3:7c:c2: 20:37:bc:60:ef:ce:b5:68:1c:24:f1:bf:29:66:63:6c:1b:98: 2a:0e:a2:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzhCMzExMC8GA1UEBRMoNTY5RkI1NkVEREIxNkE3NzY0RkIzMTBEMzcyRTE3ODg1 NDgyODM5OTAeFw0yNTEyMjMwNjU0NTBaFw0yNTEyMzAwNjU0NTBaMBgxFjAUBgNV BAMMDTY5NGEzY2JiLTQ1ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOzf3xRBZLh37ec5ieMTFkAKmDAuoARWXU0GToglFnLGml8Hrm2mZJGItxHuNp dLFiTDQaRvxiOFj7gukPIT0AGtSSqPQGOrK/mNJrLk9RPHKsG/eSdfAVlXSe7j5o d7Hff8FFz6WNWECRcxrd/eNqKPzQjW04NElBN7Yo1uS0b3zqX1iOuPpf+Wteoarv pMd3vrUifKQIaFqiUjQ7nyXEHPXEFgFiZG05zGaAXGEKAh4890pvyg7JeeKM0IJw fzzhkK6mwcmOfgltX1FYDJw5r6/ilFdgcYlYaY/Zkq9G5yW2WyUrg0wjVMIJ02Ht JOH60Ec3PCdh8ESwibsqfjErAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0FvaxG99 IsSE7VDdgLLXhEpUrJ8wHwYDVR0jBBgwFoAUVp+1bt2xandk+zENNy4XiFSCg5kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OEIzLzI4MzU1OTUwRDRC RTExRjBBM0RFRTIxNkM0RjlBRTAyL1ZwLTFidDJ4YW5kay16RU5OeTRYaUZTQ2c1 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVnAtMWJ0MnhhbmRrLXpFTk55NFhpRlNDZzVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 OEIzLzI4MzU1OTUwRDRCRTExRjBBM0RFRTIxNkM0RjlBRTAyL1ZwLTFidDJ4YW5k ay16RU5OeTRYaUZTQ2c1ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKIlRRjSueTYhiO0XmcaBRQBSvErwPTBW6xezLU3drlVEdfk+rRg8EaC frZ6TpJxHSgVcjPahlPzcFFGUfk3/N0i0BeMR2b12+wefoT7DJojHX2oV+salHfB vtkMk4IfYMifY24jLjMVmiWe403/p2yYuKDW+1Oxst/2Kol2u/ev7+dw1udTBGFj I5X/1WRTDBZYjZcxzn1/gCbD2qrdAhW8gcjH4S/4EgPWXbfX0o0Vv5obJX3cqV1K vMrsQirqHCoo+SjjEGMMMQ7V7nnm1dB2exlx3LbPf4QHx/8VOQA1oFarmdgXSeN8 wiA3vGDvzrVoHCTxvylmY2wbmCoOoo4= -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:05 2025 by rpki-client