This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: rswmDdfs46K0ks90ZHkpZYGGpjsoTIo/XVFkL2+mFR4= Subject key identifier: 53:34:67:D5:93:A5:6D:85:65:08:3B:D8:7F:06:15:BD:1D:A4:55:50 Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 3548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 351B Signing time: Sat 06 Dec 2025 14:34:04 +0000 Manifest this update: Sat 06 Dec 2025 14:34:03 +0000 Manifest next update: Sat 13 Dec 2025 14:34:03 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: so82W92P8MhuVZm/5HHlmXnzmxCJf5vaT8UOU6xxsdY=) 2: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: tRzHmoCM5bp0eiCAe2WTWAhqYkb98p9OjQpa6ZuzTto=) 3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: YTAhLYofQ5bGqpN1MRJJdGJjIa93aOaav1SZOkx9D70=) 4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: 2sM6dqjwFaWvanKsFaRgJilTOFHKXatSdEC+MoptC6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13640 (0x3548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Dec 6 14:34:03 2025 GMT Not After : Dec 13 14:34:03 2025 GMT Subject: CN=69343edb-1e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9a:6e:3c:b0:e2:b7:ad:d0:c9:4d:4f:aa:bc: 3c:f9:66:c0:ca:07:b9:f3:5f:83:f9:32:db:73:a7: 03:68:bb:be:96:96:1d:7d:57:fe:71:75:52:06:ba: 9e:06:7a:a8:1e:25:88:7e:27:39:7d:19:06:a6:2f: f9:81:d8:eb:d9:17:89:99:9f:25:aa:61:1d:7e:75: 7a:58:0a:90:f0:4f:8a:53:14:22:2c:be:08:a3:a7: ab:dd:2b:9a:b5:50:f3:b5:a6:17:05:b3:2f:27:c3: 68:ff:e1:5f:e1:0d:b3:6e:b7:8b:10:45:aa:b3:91: ba:6d:08:89:78:1f:94:87:dd:a6:31:7f:61:8f:b9: 71:87:42:d7:2b:f6:17:ad:20:5d:92:53:85:6e:9e: 46:83:43:35:d8:be:f0:76:c4:0e:2b:10:00:ac:0d: 95:c4:26:d2:2d:08:d4:5e:06:05:c7:1a:79:34:ea: 55:62:c8:31:73:95:e5:fc:19:06:bf:a3:71:0f:4c: 5b:09:e6:16:96:cb:19:a9:3b:4e:9c:8c:91:84:13: 6c:e7:17:80:8e:17:00:59:70:34:e0:02:f8:0b:f4: 45:7a:62:74:30:b6:3a:76:bd:7c:a7:af:c0:47:55: 67:b2:99:92:34:94:06:f6:8c:39:d5:74:f6:39:a0: 5b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:34:67:D5:93:A5:6D:85:65:08:3B:D8:7F:06:15:BD:1D:A4:55:50 X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:f4:a3:e2:ec:b1:f1:c7:9f:ea:4a:b4:43:7d:56:e0:eb:46: cf:97:f5:79:bd:0c:ea:a7:b9:57:d0:fd:ae:26:63:3c:b6:21: 0e:98:22:d2:0d:0e:1d:da:70:0b:cc:87:67:1f:f5:c2:dd:10: 2b:bb:c4:42:a8:c3:6e:06:04:97:9a:e4:f0:dd:12:67:d9:83: a9:76:ed:70:27:53:12:5e:84:28:df:36:c0:25:01:e6:82:dc: 85:6c:d5:71:87:b2:b6:84:64:36:98:12:3a:f1:1d:f9:56:03: 9b:c4:d6:a8:fb:40:3d:2a:c5:ae:bc:2b:76:94:a3:6d:74:53: 24:34:2b:b8:ed:ad:37:ef:84:93:3a:57:09:b1:6e:60:ac:cb: 29:03:be:e5:18:3c:0a:c6:51:6f:bb:d3:70:cb:2e:66:a1:2f: a3:19:f9:e6:83:5a:b3:76:53:36:8c:f3:09:23:c9:a4:d0:7d: 52:5e:23:c2:4a:9c:b6:a6:14:67:22:74:08:e9:13:13:c7:69: e3:e2:c5:a2:21:a1:ec:dc:c5:ad:89:6e:6f:74:00:36:d3:ab: 84:eb:5e:5b:8c:00:8b:d2:5f:2d:07:59:75:12:9e:ae:af:d8: 1f:56:a4:ef:98:59:64:8c:1c:d2:d1:c6:f0:1a:15:d2:1b:12: ef:16:f8:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjUxMjA2MTQzNDAzWhcNMjUxMjEzMTQzNDAzWjAYMRYwFAYD VQQDEw02OTM0M2VkYi0xZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZpuPLDit63QyU1Pqrw8+WbAyge581+D+TLbc6cDaLu+lpYdfVf+cXVSBrqe BnqoHiWIfic5fRkGpi/5gdjr2ReJmZ8lqmEdfnV6WAqQ8E+KUxQiLL4Io6er3Sua tVDztaYXBbMvJ8No/+Ff4Q2zbreLEEWqs5G6bQiJeB+Uh92mMX9hj7lxh0LXK/YX rSBdklOFbp5Gg0M12L7wdsQOKxAArA2VxCbSLQjUXgYFxxp5NOpVYsgxc5Xl/BkG v6NxD0xbCeYWlssZqTtOnIyRhBNs5xeAjhcAWXA04AL4C/RFemJ0MLY6dr18p6/A R1VnspmSNJQG9ow51XT2OaBbOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFM0Z9WT pW2FZQg72H8GFb0dpFVQMB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA9KPi7LHxx5/qSrRDfVbg60bPl/V5vQzqp7lX0P2uJmM8tiEOmCLS DQ4d2nALzIdnH/XC3RAru8RCqMNuBgSXmuTw3RJn2YOpdu1wJ1MSXoQo3zbAJQHm gtyFbNVxh7K2hGQ2mBI68R35VgObxNao+0A9KsWuvCt2lKNtdFMkNCu47a0374ST OlcJsW5grMspA77lGDwKxlFvu9Nwyy5moS+jGfnmg1qzdlM2jPMJI8mk0H1SXiPC Spy2phRnInQI6RMTx2nj4sWiIaHs3MWtiW5vdAA206uE615bjACL0l8tB1l1Ep6u r9gfVqTvmFlkjBzS0cbwGhXSGxLvFvhK -----END CERTIFICATE-----Generated at Sun Dec 7 06:52:51 2025 by rpki-client