This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json) Hash identifier: W4otA1DMEGo2o/KhIOtHEIxboaT1TdquHPGCJsglOio= Subject key identifier: 9B:61:0A:90:D6:11:CC:EA:97:B9:32:30:7B:09:49:8B:3F:5B:B0:3E Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft Manifest number: 8C Signing time: Wed 03 Dec 2025 04:49:57 +0000 Manifest this update: Wed 03 Dec 2025 04:49:56 +0000 Manifest next update: Wed 10 Dec 2025 04:49:56 +0000 Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: C+WPrSfERmmoBi0cHEMxWrWr0ULjYrJKjlwZv+WmxOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 04:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Validity Not Before: Dec 3 04:49:56 2025 GMT Not After : Dec 10 04:49:56 2025 GMT Subject: CN=692fc175-98d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:31:8a:18:cc:70:23:87:76:e6:0c:28:45: e5:2f:37:ee:83:e6:24:f6:3a:0a:01:be:bb:b7:a9: 50:eb:fd:cc:dc:71:fa:6b:9e:95:51:d8:0a:14:e5: 33:02:8d:84:b8:d7:a5:84:7b:41:8c:a7:77:11:06: 7c:d1:e4:48:0d:2a:a7:ee:33:70:d2:47:d8:f0:a5: 7e:64:e5:66:45:a8:8d:97:a5:66:d3:ca:6e:29:f0: ed:a9:4e:ed:6c:58:d9:03:1e:a4:5e:87:66:35:d5: 67:91:d9:b5:fe:7c:63:64:9b:73:23:5b:50:d1:4c: 41:12:3e:bd:f5:8a:18:4e:02:51:31:3c:f0:52:8c: b6:ce:0f:87:cc:71:0f:7c:cc:f4:5f:a5:1d:90:c0: 1d:15:8a:c3:8e:08:b7:e5:d8:3c:b1:84:75:29:ad: 74:f5:9b:73:bf:e6:6b:42:27:04:12:0e:7d:69:d6: b5:dd:ef:7b:d0:57:d5:aa:3e:bd:88:f2:5d:e1:1f: 71:ce:05:45:d6:21:2a:ac:f8:b5:4d:eb:0a:11:09: 22:9b:1a:04:9d:e0:dd:6b:fb:c6:10:b1:ac:f2:2f: fc:23:a8:dd:9c:70:85:b8:6e:d0:c3:76:60:36:3e: 99:57:ee:e2:4e:a8:e3:96:9b:ef:5f:3d:83:6b:56: 0b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:61:0A:90:D6:11:CC:EA:97:B9:32:30:7B:09:49:8B:3F:5B:B0:3E X509v3 Authority Key Identifier: keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9e:61:14:09:e3:31:b3:c2:83:6b:74:16:58:5c:4f:b3:c8: 59:36:0f:33:d4:6d:be:d4:7b:d8:e8:04:cd:11:5e:0e:ce:d3: 92:fd:04:66:cb:75:ac:43:26:a9:3c:a1:2d:92:3d:25:7c:cc: 6f:a3:dd:ec:24:8e:a1:57:6a:dc:fc:ba:92:f7:f6:1a:ca:90: 9f:2f:45:7d:3b:b0:b7:73:ad:85:ab:53:3c:cd:17:8d:4d:e3: 46:8e:ea:86:f0:29:67:36:0f:cc:08:e8:16:06:d6:45:ea:5b: 67:2b:a3:c0:fa:b1:9c:35:4f:85:87:ab:66:a6:3e:51:67:7a: 58:9c:2c:26:5c:1d:15:b1:8f:f4:53:30:21:5c:8b:5b:18:1a: 2c:7a:85:09:5b:44:3e:49:94:6f:6e:9d:05:81:a5:3f:ea:93: 56:6e:38:e5:4f:3b:92:1c:90:28:2e:88:e8:15:3f:7e:c0:51: e4:e8:23:a5:b6:13:56:35:44:78:56:33:58:c8:e2:8f:8b:f8: 89:28:01:e1:35:86:d4:76:31:2d:6f:de:86:1a:c6:fe:95:de: 1f:84:1c:57:f0:f5:fb:54:7e:a2:0d:9e:62:72:18:98:2c:48: d7:9a:a9:2e:89:19:33:d7:da:72:95:38:9e:6d:24:a7:1b:f2: 3a:ac:9f:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4RDcxMTAvBgNVBAUTKEJEQTNFOEE4MjMxQzc4N0Y2QjdGMThCQzE0NkI5NUZC NUMwMzhFRDkwHhcNMjUxMjAzMDQ0OTU2WhcNMjUxMjEwMDQ0OTU2WjAYMRYwFAYD VQQDEw02OTJmYzE3NS05OGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtosxihjMcCOHduYMKEXlLzfug+Yk9joKAb67t6lQ6/3M3HH6a56VUdgKFOUz Ao2EuNelhHtBjKd3EQZ80eRIDSqn7jNw0kfY8KV+ZOVmRaiNl6Vm08puKfDtqU7t bFjZAx6kXodmNdVnkdm1/nxjZJtzI1tQ0UxBEj699YoYTgJRMTzwUoy2zg+HzHEP fMz0X6UdkMAdFYrDjgi35dg8sYR1Ka109Ztzv+ZrQicEEg59ada13e970FfVqj69 iPJd4R9xzgVF1iEqrPi1TesKEQkimxoEneDda/vGELGs8i/8I6jdnHCFuG7Qw3Zg Nj6ZV+7iTqjjlpvvXz2Da1YLUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJthCpDW Eczql7kyMHsJSYs/W7A+MB8GA1UdIwQYMBaAFL2j6KgjHHh/a38YvBRrlftcA47Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRThENy80QjAxQzRBNkY5 M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi92YVBvcUNNY2VIOXJmeGk4Rkd1Vi0xd0Rq dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZhUG9xQ01jZUg5cmZ4aThGR3VWLTF3RGp0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RThENy80QjAxQzRBNkY5M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi92YVBvcUNNY2VI OXJmeGk4Rkd1Vi0xd0RqdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbnmEUCeMxs8KDa3QWWFxPs8hZNg8z1G2+1HvY6ATNEV4OztOS/QRm y3WsQyapPKEtkj0lfMxvo93sJI6hV2rc/LqS9/YaypCfL0V9O7C3c62Fq1M8zReN TeNGjuqG8ClnNg/MCOgWBtZF6ltnK6PA+rGcNU+Fh6tmpj5RZ3pYnCwmXB0VsY/0 UzAhXItbGBoseoUJW0Q+SZRvbp0FgaU/6pNWbjjlTzuSHJAoLojoFT9+wFHk6COl thNWNUR4VjNYyOKPi/iJKAHhNYbUdjEtb96GGsb+ld4fhBxX8PX7VH6iDZ5ichiY LEjXmqkuiRkz19pylTiebSSnG/I6rJ+F -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:05 2025 by rpki-client