This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json) Hash identifier: BkPR9NqsxBW8gTcBgyn4AGuGKy/c96w/xXe/9XprQKw= Subject key identifier: 86:D6:33:9B:6A:38:C1:24:78:87:96:45:8A:18:A8:5E:C8:E1:65:04 Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0E39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft Manifest number: 0E30 Signing time: Mon 22 Dec 2025 17:27:51 +0000 Manifest this update: Mon 22 Dec 2025 17:27:50 +0000 Manifest next update: Mon 29 Dec 2025 17:27:50 +0000 Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: YSAE4/g1oj3GO4qagv2stYICqAYZ2ZygwanOH4pGf1g=) 2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: J3asPRjW2OTxFxfAPN+SaGNCDyYHApcc4gcIkuEE9lM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3641 (0xe39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: Dec 22 17:27:50 2025 GMT Not After : Dec 29 17:27:50 2025 GMT Subject: CN=69497f97-5651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d0:e2:0f:5c:cb:3f:5d:0c:92:81:69:2f:56: 02:fa:5c:66:73:33:42:8c:02:4b:63:cc:86:4a:5a: 48:33:a4:96:ba:9a:2a:d4:4c:bc:8a:57:1b:44:93: 59:53:d6:df:0a:b9:b4:98:7b:92:95:12:a4:fa:b9: f7:5a:e0:b7:41:98:bd:4f:f8:4d:f3:55:ae:86:ee: b3:11:1e:da:57:a8:88:c6:e9:bf:8a:72:fb:b3:c6: 9b:bf:37:60:2b:2e:88:89:1d:bf:2d:bf:b7:30:43: 0f:c0:ea:d5:7e:90:7c:6b:cc:da:5b:f7:97:c0:67: 17:7c:15:ea:77:42:cb:c9:9d:01:d3:51:97:ea:c1: c8:4e:9c:a2:ef:19:c0:dd:36:8f:d9:8c:f7:36:ab: ce:9d:76:f2:fa:4e:d2:91:36:2e:e2:7c:a9:ab:5a: 45:6f:e8:ac:9c:32:7f:ea:98:01:16:d0:b2:89:2a: d9:ec:6a:23:5c:bf:9f:1a:b6:2e:11:59:26:81:f2: 2c:37:60:34:d7:c7:c6:93:dc:d1:e7:ed:76:cb:4d: 08:50:37:b5:14:f6:0a:71:3c:cd:b3:b0:c4:47:59: e6:2f:e3:c7:4f:71:69:24:fc:bb:61:93:19:c5:e2: bb:59:d5:2c:64:17:09:87:75:6f:b5:94:7b:80:d9: 76:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D6:33:9B:6A:38:C1:24:78:87:96:45:8A:18:A8:5E:C8:E1:65:04 X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9f:c1:d4:52:77:bd:1d:ec:bd:ae:e2:06:4c:6a:41:2d:76: 76:ef:99:b7:72:b9:7b:f3:33:99:b4:e9:52:d9:c3:e7:b8:06: fe:d8:f3:bc:e2:94:04:50:17:b4:db:93:04:38:0a:45:c2:08: 50:33:7b:34:15:2d:32:2e:99:a9:52:78:e9:61:b8:ae:92:29: 82:20:95:f9:41:bb:89:1e:06:04:6f:ab:01:b5:9a:80:5c:82: 6c:71:d0:6a:b2:7c:91:86:bf:c7:28:a5:fe:8a:9b:01:47:5d: 10:a6:bd:2b:91:86:a4:66:1d:1d:13:da:9e:a1:7e:60:fa:cc: 2e:43:6c:2a:f0:2c:49:61:0d:5c:2f:83:bc:9e:2b:45:08:0e: bc:98:52:fe:61:8c:e0:bc:95:ba:1e:c1:87:05:52:c6:86:d2: c4:33:17:ab:27:de:bc:e3:ac:7d:34:67:98:76:6c:30:8f:34: b5:03:04:87:77:d3:e2:7d:21:26:c4:ab:af:c2:6a:37:4f:78: e2:d2:ab:50:a3:d4:a0:52:5d:f1:c6:99:ac:99:c2:c0:ba:7a: 59:c3:a0:5d:dd:62:30:ca:b0:b3:76:34:90:cc:c5:0b:84:41: c5:e7:e3:4a:1d:0c:1d:53:aa:96:cd:25:ad:dc:3f:2b:fa:ed: 2c:f8:18:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjUxMjIyMTcyNzUwWhcNMjUxMjI5MTcyNzUwWjAYMRYwFAYD VQQDDA02OTQ5N2Y5Ny01NjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9DiD1zLP10MkoFpL1YC+lxmczNCjAJLY8yGSlpIM6SWupoq1Ey8ilcbRJNZ U9bfCrm0mHuSlRKk+rn3WuC3QZi9T/hN81Wuhu6zER7aV6iIxum/inL7s8abvzdg Ky6IiR2/Lb+3MEMPwOrVfpB8a8zaW/eXwGcXfBXqd0LLyZ0B01GX6sHITpyi7xnA 3TaP2Yz3NqvOnXby+k7SkTYu4nypq1pFb+isnDJ/6pgBFtCyiSrZ7GojXL+fGrYu EVkmgfIsN2A018fGk9zR5+12y00IUDe1FPYKcTzNs7DER1nmL+PHT3FpJPy7YZMZ xeK7WdUsZBcJh3VvtZR7gNl2pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbWM5tq OMEkeIeWRYoYqF7I4WUEMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbn8HUUne9Hey9ruIGTGpBLXZ275m3crl78zOZtOlS2cPnuAb+2PO8 4pQEUBe025MEOApFwghQM3s0FS0yLpmpUnjpYbiukimCIJX5QbuJHgYEb6sBtZqA XIJscdBqsnyRhr/HKKX+ipsBR10Qpr0rkYakZh0dE9qeoX5g+swuQ2wq8CxJYQ1c L4O8nitFCA68mFL+YYzgvJW6HsGHBVLGhtLEMxerJ96846x9NGeYdmwwjzS1AwSH d9PifSEmxKuvwmo3T3ji0qtQo9SgUl3xxpmsmcLAunpZw6Bd3WIwyrCzdjSQzMUL hEHF5+NKHQwdU6qWzSWt3D8r+u0s+BiY -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:49 2025 by rpki-client