This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft File: VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json) Hash identifier: P3jgKk9EPHC0pY/T8YnI5WLeayqJVA3PTJ6HLb3hZ2o= Subject key identifier: E8:39:AE:CF:F9:AF:A9:AF:4B:5E:60:19:03:F3:98:FF:34:86:BC:EF Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Certificate serial: 0CEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft Manifest number: 0CD8 Signing time: Mon 22 Dec 2025 17:46:41 +0000 Manifest this update: Mon 22 Dec 2025 17:46:41 +0000 Manifest next update: Mon 29 Dec 2025 17:46:41 +0000 Files and hashes: 1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: EFvyrcFntoDlsmUn3kI5XmCviMIaAY3UBWuaRMxNKLg=) 2: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: 4YH39eDrIDa7IadaSN/cuxBt6gEtX4YBHrWkQQlMsw4=) 3: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: +KOn7mdx2UIcOidbcffpTudXCnUkrRKRoWxktoOxGu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3310 (0xcee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Validity Not Before: Dec 22 17:46:41 2025 GMT Not After : Dec 29 17:46:41 2025 GMT Subject: CN=69498401-53bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:27:c5:b6:73:c4:f7:9c:47:c2:2b:34:97:03: f0:51:6d:15:3f:2f:40:b6:dd:dd:7f:22:c4:c8:d7: 6d:a1:e1:35:63:a9:1f:ec:ca:67:e7:97:88:83:dc: ab:94:cb:f1:81:41:7d:c4:0c:d7:00:34:50:8c:57: c2:d5:cf:7a:b0:32:f8:48:19:05:34:07:6e:c0:bc: 1c:8b:c6:41:16:e8:27:a6:32:93:39:e1:87:92:c0: 86:6e:89:2a:d8:ce:24:79:0a:48:8f:70:00:43:06: d7:3a:60:7f:b5:11:c2:5f:bf:8a:c3:4a:f9:fc:8d: 5a:c4:35:9f:4a:88:3f:34:f6:59:23:d4:8c:f9:cd: d6:07:a6:18:cd:fc:bd:50:7f:a7:f4:00:b1:4c:f2: 86:a5:68:37:52:21:81:14:f1:2d:ce:18:3d:52:84: 13:a7:3e:29:56:c1:05:a2:05:14:19:2d:29:08:44: b8:c1:e0:2a:c8:7c:ae:6e:3a:96:d4:1d:3a:18:bc: a3:00:60:1a:87:81:66:da:35:ec:98:e7:23:2a:7f: b3:76:9e:c0:03:39:87:67:6f:ee:ec:61:28:c9:08: ad:fe:4e:3d:5f:21:84:5c:f1:f0:9b:eb:68:8b:61: c2:a1:19:44:a4:ba:60:2d:18:1f:0f:d6:1a:e0:90: d9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:39:AE:CF:F9:AF:A9:AF:4B:5E:60:19:03:F3:98:FF:34:86:BC:EF X509v3 Authority Key Identifier: keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3e:a3:da:3c:b4:23:4a:a0:0f:40:33:20:74:b9:2e:b0:2e: 83:75:0b:ef:38:1a:c1:1f:eb:1a:8b:0d:60:6e:c3:96:08:96: ad:68:ff:3b:21:ac:bd:f4:b7:7e:a6:5a:46:8f:c7:47:28:9d: 4f:c5:89:d6:a5:79:47:25:88:73:fc:52:f4:1d:97:2d:b4:a0: e4:01:54:f5:f9:69:52:5d:69:b0:3f:1c:a1:20:8a:56:c9:bc: ca:d1:50:7e:18:9c:1c:a9:27:4d:dc:14:77:8e:46:e0:f7:d2: 2e:45:2d:13:95:7e:30:31:f9:d5:cc:e1:16:db:a8:05:ad:12: a4:b8:6c:a9:46:92:27:39:cf:1c:0b:40:a8:27:f2:51:70:9e: 56:f9:61:ad:3e:99:9a:f7:a7:d7:7e:d1:74:99:10:23:d2:aa: 56:5f:57:71:dc:ba:3f:5d:e7:28:d4:51:d4:b8:4c:1b:08:1a: ff:35:2c:6d:67:db:f5:0e:96:ef:b5:c4:b7:04:3c:6d:52:80: c1:e4:5c:85:24:c0:8d:4f:f4:52:c3:51:9c:bd:79:0e:b5:bf: e9:21:0e:87:5a:95:a7:b4:0b:80:0b:07:bb:a5:be:57:2b:e0: d1:04:64:f4:03:7a:14:97:33:a3:01:58:e8:f8:86:8d:59:65: 95:ee:61:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIyNDgxMTAvBgNVBAUTKDU1MTFERUMyOURDQUVEQTE3QkYzNkJCRjMzOTUzMjcx NTlGMTRBODEwHhcNMjUxMjIyMTc0NjQxWhcNMjUxMjI5MTc0NjQxWjAYMRYwFAYD VQQDDA02OTQ5ODQwMS01M2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryfFtnPE95xHwis0lwPwUW0VPy9Att3dfyLEyNdtoeE1Y6kf7Mpn55eIg9yr lMvxgUF9xAzXADRQjFfC1c96sDL4SBkFNAduwLwci8ZBFugnpjKTOeGHksCGbokq 2M4keQpIj3AAQwbXOmB/tRHCX7+Kw0r5/I1axDWfSog/NPZZI9SM+c3WB6YYzfy9 UH+n9ACxTPKGpWg3UiGBFPEtzhg9UoQTpz4pVsEFogUUGS0pCES4weAqyHyubjqW 1B06GLyjAGAah4Fm2jXsmOcjKn+zdp7AAzmHZ2/u7GEoyQit/k49XyGEXPHwm+to i2HCoRlEpLpgLRgfD9Ya4JDZwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOg5rs/5 r6mvS15gGQPzmP80hrzvMB8GA1UdIwQYMBaAFFUR3sKdyu2he/NrvzOVMnFZ8UqB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjI0OC9DNzk4QTBGQUZG MDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdhRjc4MnVfTTVVeWNWbnhT b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSSGV3cDNLN2FGNzgydV9NNVV5Y1ZueFNvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjI0OC9DNzk4QTBGQUZGMDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdh Rjc4MnVfTTVVeWNWbnhTb0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPPqPaPLQjSqAPQDMgdLkusC6DdQvvOBrBH+saiw1gbsOWCJataP87 Iay99Ld+plpGj8dHKJ1PxYnWpXlHJYhz/FL0HZcttKDkAVT1+WlSXWmwPxyhIIpW ybzK0VB+GJwcqSdN3BR3jkbg99IuRS0TlX4wMfnVzOEW26gFrRKkuGypRpInOc8c C0CoJ/JRcJ5W+WGtPpma96fXftF0mRAj0qpWX1dx3Lo/Xeco1FHUuEwbCBr/NSxt Z9v1DpbvtcS3BDxtUoDB5FyFJMCNT/RSw1GcvXkOtb/pIQ6HWpWntAuACwe7pb5X K+DRBGT0A3oUlzOjAVjo+IaNWWWV7mFe -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:32 2025 by rpki-client