This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft File: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json) Hash identifier: nOYIobEBkpGtNorWk9araPC/6w+pCO817aGIPzmyyMw= Subject key identifier: CD:A5:C5:38:C4:98:79:4F:78:BB:CB:FD:06:2E:64:D5:BE:4E:4F:FC Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft Manifest number: A0 Signing time: Sat 29 Nov 2025 04:34:12 +0000 Manifest this update: Sat 29 Nov 2025 04:34:11 +0000 Manifest next update: Sat 06 Dec 2025 04:34:11 +0000 Files and hashes: 1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: II46P8TExVr5YhMsoZVFZ2uhwcc5aR4xjeVDEjMdf2s=) 2: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: cqpKhHQ429f1vtQzVS9iSS/6yBn8Tr7cOiYSPyhXnqM=) 3: 07E3560E707B11F08CCE202CC4F9AE02.roa (hash: hsVU/mADy2OXX1cQt4x/FdSd52E8zN5hB6L5qVYRCOM=) 4: 6E68E3C8A05811F0B1978E4CC4F9AE02.roa (hash: K72GRxN+2ab3JpFVQDE8rFQueI0JJ5aBZHWdLQsQchI=) 5: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: YKwfhn84elYu/Y8KsthWeHLfxYMDii6IqoqFACcb2JY=) 6: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: 4EsnPXpvxqy3HJn3NlZW+cFTXRzXY3NCiOsR6rWCGCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Validity Not Before: Nov 29 04:34:11 2025 GMT Not After : Dec 6 04:34:11 2025 GMT Subject: CN=692a77c4-6731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:25:bf:bd:ff:b4:0c:9e:df:31:02:a0:89:38: 5f:64:42:34:ff:33:98:2c:8d:c6:8b:cd:38:00:88: bf:ba:40:5c:1c:f5:0a:1d:25:03:51:b3:56:b3:46: 99:af:5e:d2:89:54:b6:db:b7:42:6f:91:d1:5a:be: f9:39:08:42:61:2a:e4:0c:f2:50:2d:b4:70:c0:26: 83:8f:4c:8c:38:09:d3:91:c1:2c:e8:67:29:68:92: 83:d9:7e:c6:13:dc:4c:9f:8d:d6:cb:c6:e8:b9:fb: 06:9b:3b:97:c4:01:2b:ee:07:c1:c4:f6:30:24:36: f4:6a:47:96:9e:9c:33:ce:90:c8:92:ad:c8:7c:0c: 09:cd:9f:66:55:57:41:7c:c5:b6:6d:57:e7:9d:44: 2e:8f:a8:9d:8b:bb:53:cb:68:0a:8e:c5:73:0d:c7: b3:76:36:1e:b5:e4:5d:3f:5f:89:f1:ad:9d:6b:ea: bf:9d:08:68:7e:18:a5:01:53:ad:b5:76:68:37:b6: 42:b9:e3:4c:4a:c1:db:b4:b1:45:cc:d9:12:75:58: 27:38:26:47:ef:99:d3:ee:03:2a:f7:45:07:b1:95: 25:2b:1c:df:bd:a2:ee:6e:40:4f:d7:fb:c6:03:da: ac:68:a9:ab:f1:95:a8:80:83:34:3a:79:8e:8a:ba: e1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A5:C5:38:C4:98:79:4F:78:BB:CB:FD:06:2E:64:D5:BE:4E:4F:FC X509v3 Authority Key Identifier: keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:ee:2c:df:84:d3:8e:55:d5:c4:6f:49:91:3c:5c:71:7a:8b: 1f:ff:43:d4:af:b9:4b:2b:b9:df:62:1f:7f:0a:6d:57:45:00: 96:28:62:4c:8a:b4:f3:a5:b2:87:8b:5c:57:24:ff:e6:cd:7b: 82:bd:ec:80:de:4f:60:b5:3b:90:2f:47:3d:cb:dc:a3:09:7c: ef:52:7b:c3:14:9d:9e:19:f9:50:ba:f8:76:38:47:03:56:45: a9:c3:f8:2e:11:3c:f4:27:d8:3e:78:20:fe:d2:da:67:f5:88: cb:9f:65:36:94:b1:fd:d5:21:43:c9:5a:75:36:47:e9:a5:db: d7:cb:18:2d:98:b1:1c:5e:35:8b:7e:5d:61:90:1a:f4:8b:a3: 9d:b9:70:b1:0b:7b:a6:13:5d:57:03:b0:95:c2:3e:06:19:36: a7:18:76:37:27:f2:a4:05:3b:06:5e:82:ab:c6:c2:66:4e:21: 0d:49:5b:17:73:6a:04:0a:1a:15:89:41:01:43:7c:f1:05:34: df:9c:39:a9:16:ce:26:b6:52:ce:d3:32:f5:0d:27:70:e2:c0: d6:45:1c:5d:94:ce:5f:ed:f0:38:06:38:fd:31:ec:68:11:fc: 98:16:3b:a3:cc:dc:24:d1:6d:40:a6:72:67:29:0b:ac:23:88: bf:18:2c:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwMjYxMTAvBgNVBAUTKEJENzlBQzc2NDBDOTU1QzQzNUM4Q0Y1NUMyOTFGMTIy QjcwRTJGOTkwHhcNMjUxMTI5MDQzNDExWhcNMjUxMjA2MDQzNDExWjAYMRYwFAYD VQQDEw02OTJhNzdjNC02NzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yW/vf+0DJ7fMQKgiThfZEI0/zOYLI3Gi804AIi/ukBcHPUKHSUDUbNWs0aZ r17SiVS227dCb5HRWr75OQhCYSrkDPJQLbRwwCaDj0yMOAnTkcEs6GcpaJKD2X7G E9xMn43Wy8boufsGmzuXxAEr7gfBxPYwJDb0akeWnpwzzpDIkq3IfAwJzZ9mVVdB fMW2bVfnnUQuj6idi7tTy2gKjsVzDcezdjYeteRdP1+J8a2da+q/nQhofhilAVOt tXZoN7ZCueNMSsHbtLFFzNkSdVgnOCZH75nT7gMq90UHsZUlKxzfvaLubkBP1/vG A9qsaKmr8ZWogIM0OnmOirrhHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2lxTjE mHlPeLvL/QYuZNW+Tk/8MB8GA1UdIwQYMBaAFL15rHZAyVXENcjPVcKR8SK3Di+Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjAyNi8zQkFBQUM0NEZC MjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZjUTF5TTlWd3BIeElyY09M NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYbXNka0RKVmNRMXlNOVZ3cEh4SXJjT0w1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjAyNi8zQkFBQUM0NEZCMjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZj UTF5TTlWd3BIeElyY09MNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy7izfhNOOVdXEb0mRPFxxeosf/0PUr7lLK7nfYh9/Cm1XRQCWKGJM irTzpbKHi1xXJP/mzXuCveyA3k9gtTuQL0c9y9yjCXzvUnvDFJ2eGflQuvh2OEcD VkWpw/guETz0J9g+eCD+0tpn9YjLn2U2lLH91SFDyVp1NkfppdvXyxgtmLEcXjWL fl1hkBr0i6OduXCxC3umE11XA7CVwj4GGTanGHY3J/KkBTsGXoKrxsJmTiENSVsX c2oEChoViUEBQ3zxBTTfnDmpFs4mtlLO0zL1DSdw4sDWRRxdlM5f7fA4Bjj9Mexo EfyYFjujzNwk0W1ApnJnKQusI4i/GCzT -----END CERTIFICATE-----Generated at Sat Nov 29 09:35:14 2025 by rpki-client