This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft File: vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json) Hash identifier: liYRbKX/ERcy7oCjm3F2SVfyRQs3oePASVS4GY/Zjls= Subject key identifier: 8E:DF:CF:75:98:06:1C:D4:9B:70:D4:4D:F0:16:C3:57:A7:12:E0:9A Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 Certificate issuer: /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Certificate serial: 0808 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft Manifest number: 0802 Signing time: Mon 22 Dec 2025 20:21:16 +0000 Manifest this update: Mon 22 Dec 2025 20:21:16 +0000 Manifest next update: Mon 29 Dec 2025 20:21:16 +0000 Files and hashes: 1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: /1bPxf/+oWiQ34z/XjXviKAfHJI9qDnWvYJ0Kp/AowQ=) 2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: gudUHLzJpmvIi7qROWYt11jIMMWxAxmreMkdOGwLNhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2056 (0x808) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Validity Not Before: Dec 22 20:21:16 2025 GMT Not After : Dec 29 20:21:16 2025 GMT Subject: CN=6949a83c-8ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ff:12:d8:f3:0b:57:94:25:0d:8d:8c:e7:3a: fc:78:e6:c4:a5:e2:64:c8:2a:90:8a:52:df:f2:4f: 04:25:b6:90:3b:bf:73:9c:06:65:85:c5:7c:72:7d: ba:c1:c2:3d:5d:4a:41:2f:0e:c0:d3:25:a1:b1:af: 84:fd:29:a2:a9:39:cd:eb:67:7a:d7:93:0b:5b:1f: 4b:04:4d:27:b8:79:75:87:52:d7:bb:3d:53:7a:45: 56:23:0a:44:9c:0f:b4:07:d4:4c:50:2b:e5:45:e2: 6e:98:67:46:1b:5e:1f:c5:a9:6b:90:61:e5:ee:61: 5f:da:23:eb:75:21:2a:f3:d0:fa:92:d0:1c:d5:f4: 95:ef:33:e0:63:cb:41:cb:09:9f:85:d2:72:7d:34: c3:f7:a6:cf:14:32:9f:1d:93:7e:03:ab:6e:37:01: ff:54:65:17:55:c8:cf:96:4b:e5:c4:fe:86:a5:f7: 70:2d:94:4a:b6:78:92:db:15:ff:67:c5:3d:73:1e: e8:95:b1:91:fd:7f:35:63:26:62:d4:fc:04:3c:6e: f7:5a:b4:bc:f0:40:00:58:31:4d:48:30:b0:7e:f8: 07:93:95:59:9f:c7:8c:90:17:ce:b5:ef:62:72:af: d8:70:90:13:5a:ff:4e:c8:e1:48:6e:4d:fc:76:dd: a4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DF:CF:75:98:06:1C:D4:9B:70:D4:4D:F0:16:C3:57:A7:12:E0:9A X509v3 Authority Key Identifier: keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:9b:78:65:f4:ad:0b:a5:1e:05:41:6d:a4:d5:5d:f7:62:b4: ad:a2:64:09:eb:8a:c2:0b:de:8f:75:ff:13:6d:d1:ba:f3:dd: 35:74:e5:72:41:5d:ed:85:6b:34:f4:23:48:10:11:c8:8d:fb: 4c:63:86:98:e3:c2:b1:d5:c5:de:e1:9b:01:c7:a6:5d:4c:5f: 1f:a0:a4:74:59:32:d5:80:9c:13:72:8f:ee:7b:bc:95:4c:ad: 4e:7b:ff:49:d0:83:27:45:e8:a0:f5:52:b9:e3:6d:88:86:d9: f0:74:67:a2:48:60:05:5d:57:60:8e:27:36:b6:34:8b:cf:74: f2:54:3c:87:f8:b5:e5:3a:c0:b5:f6:fb:25:9c:81:5e:be:be: 28:3e:2e:76:f4:17:1b:0b:bf:37:09:6c:00:27:52:55:85:58: ca:62:90:02:b2:01:bc:c0:b9:c2:b6:f2:ce:6d:c6:ca:8c:33: 57:f0:18:1c:14:c1:2d:13:69:53:b8:e2:0b:b5:a6:d9:78:11: 8c:f5:d5:88:68:8d:dd:50:e6:25:ab:24:44:02:28:0a:53:fb: 69:1d:11:97:9d:eb:c1:fa:5f:5a:ce:23:6a:db:e1:8e:5d:5f: da:da:d4:f5:af:24:1d:c1:4b:ca:4a:2f:b5:f4:ab:e3:ed:cc: 46:e0:0f:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyM0IxMTAvBgNVBAUTKEJGMUExQkM4QzAyQzIwMzYyRDBGRDlGOTJCQzAwNkEy ODk1RThDODAwHhcNMjUxMjIyMjAyMTE2WhcNMjUxMjI5MjAyMTE2WjAYMRYwFAYD VQQDDA02OTQ5YTgzYy04YWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0P8S2PMLV5QlDY2M5zr8eObEpeJkyCqQilLf8k8EJbaQO79znAZlhcV8cn26 wcI9XUpBLw7A0yWhsa+E/SmiqTnN62d615MLWx9LBE0nuHl1h1LXuz1TekVWIwpE nA+0B9RMUCvlReJumGdGG14fxalrkGHl7mFf2iPrdSEq89D6ktAc1fSV7zPgY8tB ywmfhdJyfTTD96bPFDKfHZN+A6tuNwH/VGUXVcjPlkvlxP6GpfdwLZRKtniS2xX/ Z8U9cx7olbGR/X81YyZi1PwEPG73WrS88EAAWDFNSDCwfvgHk5VZn8eMkBfOte9i cq/YcJATWv9OyOFIbk38dt2k5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7fz3WY BhzUm3DUTfAWw1enEuCaMB8GA1UdIwQYMBaAFL8aG8jALCA2LQ/Z+SvABqKJXoyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzQi9BRjc1NkI5NDA3 OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lEWXREOW41SzhBR29vbGVq SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4b2J5TUFzSURZdEQ5bjVLOEFHb29sZWpJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDIzQi9BRjc1NkI5NDA3OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lE WXREOW41SzhBR29vbGVqSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBym3hl9K0LpR4FQW2k1V33YrStomQJ64rCC96Pdf8TbdG68901dOVy QV3thWs09CNIEBHIjftMY4aY48Kx1cXe4ZsBx6ZdTF8foKR0WTLVgJwTco/ue7yV TK1Oe/9J0IMnReig9VK5422IhtnwdGeiSGAFXVdgjic2tjSLz3TyVDyH+LXlOsC1 9vslnIFevr4oPi529BcbC783CWwAJ1JVhVjKYpACsgG8wLnCtvLObcbKjDNX8Bgc FMEtE2lTuOILtabZeBGM9dWIaI3dUOYlqyREAigKU/tpHRGXnevB+l9aziNq2+GO XV/a2tT1ryQdwUvKSi+19Kvj7cxG4A8k -----END CERTIFICATE-----Generated at Tue Dec 23 04:08:14 2025 by rpki-client