This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft File: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json) Hash identifier: Po/4nbGtebn6FLcsLDNeijMmLPaB8rb7DJ68lLul7jg= Subject key identifier: 7C:B2:65:D2:16:99:B7:45:37:E6:E9:2F:4E:8B:F9:0C:5F:29:99:D1 Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 Certificate issuer: /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Certificate serial: 3509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft Manifest number: 34F9 Signing time: Mon 22 Dec 2025 14:55:47 +0000 Manifest this update: Mon 22 Dec 2025 14:55:46 +0000 Manifest next update: Mon 29 Dec 2025 14:55:46 +0000 Files and hashes: 1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: bA1XHBEO1rdxg870LAfe76Rn/IktJMsjtzENix2L+8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13577 (0x3509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Validity Not Before: Dec 22 14:55:46 2025 GMT Not After : Dec 29 14:55:46 2025 GMT Subject: CN=69495bf3-17f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:14:20:86:ca:4d:64:31:61:90:e6:98:5f:53: 59:da:89:51:27:f3:21:6f:e5:6e:b0:cb:5b:43:67: 14:47:94:cb:91:4b:33:22:d5:73:92:8f:4f:9f:a5: bf:23:12:b5:04:03:ee:9d:03:3e:66:5f:57:43:8f: 87:8f:ff:ae:fa:be:c2:d9:11:91:c0:36:d1:18:24: c2:b2:89:79:75:3b:13:74:05:12:09:a4:2d:b8:38: 1d:3c:b2:5e:21:33:7a:c8:7f:3d:2e:5b:e1:39:5b: 05:9f:10:46:f0:e3:b3:15:69:8b:87:6b:d9:20:1e: bf:fd:d2:b4:dd:bf:78:2a:a1:85:eb:61:62:5e:8a: d1:60:18:81:b8:38:10:8a:68:ff:48:7c:e3:c1:8a: 81:68:a0:bf:67:4e:03:20:a2:01:5f:13:fc:72:d8: 1f:98:48:ce:8d:7a:70:e9:dd:b2:f6:b6:17:d3:da: 81:c3:da:de:01:6c:33:eb:77:cd:b9:5d:40:d8:db: e9:ef:03:76:41:69:d1:9d:3e:0a:94:e9:1a:c7:31: 93:e8:d1:b3:eb:45:0e:ff:b1:30:c2:10:da:00:1c: b7:bb:2f:4e:ac:09:0c:b5:77:4f:80:f6:69:ea:07: 63:65:6a:05:a3:0c:df:c8:7d:3b:93:cf:99:1f:02: 82:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B2:65:D2:16:99:B7:45:37:E6:E9:2F:4E:8B:F9:0C:5F:29:99:D1 X509v3 Authority Key Identifier: keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:fa:25:dd:e2:a2:75:57:00:bb:b0:9c:c5:47:31:42:d8:16: 0e:2d:34:7f:d8:8c:d6:84:c4:30:0c:54:d9:88:96:87:ac:f1: ff:d9:ff:89:e1:57:dc:29:62:1b:01:2b:d0:33:68:6d:77:5d: 0f:ca:71:4c:3f:a4:47:c0:ec:ef:cd:33:f9:4f:a9:dc:e9:a0: ad:a1:f1:f2:67:e0:3b:8d:08:96:7e:53:ed:d8:7b:16:81:4f: 11:1e:8a:61:3a:f1:8a:44:dd:b0:26:1b:44:09:45:af:cf:91: a9:70:a0:ab:2d:ec:63:6f:92:62:47:cb:65:54:b0:42:92:60: 2c:8f:d7:27:7e:03:ea:47:74:a6:5e:ff:e5:03:d5:d2:ef:1f: 73:62:6a:8f:4a:54:88:6f:29:7d:d2:39:99:74:a5:ee:3e:19: 4e:21:3d:3d:92:b8:e9:76:50:bf:2f:ce:ee:b5:e2:d6:e1:2d: cd:a7:fc:83:9f:9f:fd:7c:d9:24:bd:cb:dd:29:c1:a9:06:94: 32:bd:fd:ca:f8:15:b4:88:20:cc:73:27:b2:ac:91:79:6f:cb: b5:e2:42:fe:f1:30:5f:ed:44:9b:84:39:0e:96:e7:0e:bf:b7: f2:f4:6e:70:87:ea:16:f3:50:ed:58:cc:ad:cc:2a:ae:3b:60: 58:11:cb:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIwQTMxMTAvBgNVBAUTKEQxNUE1QUY5QUY4RDk5REZFNUU0NEQzNUVFNTUwMTA1 RkVEOTQ1MTEwHhcNMjUxMjIyMTQ1NTQ2WhcNMjUxMjI5MTQ1NTQ2WjAYMRYwFAYD VQQDDA02OTQ5NWJmMy0xN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BQghspNZDFhkOaYX1NZ2olRJ/Mhb+VusMtbQ2cUR5TLkUszItVzko9Pn6W/ IxK1BAPunQM+Zl9XQ4+Hj/+u+r7C2RGRwDbRGCTCsol5dTsTdAUSCaQtuDgdPLJe ITN6yH89LlvhOVsFnxBG8OOzFWmLh2vZIB6//dK03b94KqGF62FiXorRYBiBuDgQ imj/SHzjwYqBaKC/Z04DIKIBXxP8ctgfmEjOjXpw6d2y9rYX09qBw9reAWwz63fN uV1A2Nvp7wN2QWnRnT4KlOkaxzGT6NGz60UO/7EwwhDaABy3uy9OrAkMtXdPgPZp 6gdjZWoFowzfyH07k8+ZHwKCmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyyZdIW mbdFN+bpL06L+QxfKZnRMB8GA1UdIwQYMBaAFNFaWvmvjZnf5eRNNe5VAQX+2UUR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjBBMy9BRjRCOEE2MjFE OUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1kX2w1RTAxN2xVQkJmN1pS UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWcGEtYS1ObWRfbDVFMDE3bFVCQmY3WlJSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjBBMy9BRjRCOEE2MjFEOUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1k X2w1RTAxN2xVQkJmN1pSUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN+iXd4qJ1VwC7sJzFRzFC2BYOLTR/2IzWhMQwDFTZiJaHrPH/2f+J 4VfcKWIbASvQM2htd10PynFMP6RHwOzvzTP5T6nc6aCtofHyZ+A7jQiWflPt2HsW gU8RHophOvGKRN2wJhtECUWvz5GpcKCrLexjb5JiR8tlVLBCkmAsj9cnfgPqR3Sm Xv/lA9XS7x9zYmqPSlSIbyl90jmZdKXuPhlOIT09krjpdlC/L87uteLW4S3Np/yD n5/9fNkkvcvdKcGpBpQyvf3K+BW0iCDMcyeyrJF5b8u14kL+8TBf7USbhDkOlucO v7fy9G5wh+oW81DtWMytzCquO2BYEcvr -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:38 2025 by rpki-client