This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft File: vHENBWM8XhGwdEtxrruIriskRuM.mft (raw, json) Hash identifier: FKroCtf0ohos5JigTd2Progdm0pNny21bPSa4uX/V8U= Subject key identifier: DA:2E:B3:8E:36:A9:6F:B0:3C:65:92:95:73:DE:83:91:51:4B:F5:85 Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Certificate serial: 13AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft Manifest number: 13A6 Signing time: Mon 22 Dec 2025 16:41:14 +0000 Manifest this update: Mon 22 Dec 2025 16:41:14 +0000 Manifest next update: Mon 29 Dec 2025 16:41:14 +0000 Files and hashes: 1: vHENBWM8XhGwdEtxrruIriskRuM.crl (hash: 4wzWY0FmyYLgzYM57r7oaK38IIo+G9JXTMkw7SaKJMY=) 2: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (hash: c/V3Stz0hBoC77cDsx2sOFkExhPVs+UBbA7TaA5YseQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5038 (0x13ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Validity Not Before: Dec 22 16:41:14 2025 GMT Not After : Dec 29 16:41:14 2025 GMT Subject: CN=694974aa-0a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0f:8f:f7:fe:d6:e4:b7:f3:c0:2b:9f:a7:da: 67:e8:4a:df:c8:fc:26:84:1d:fa:cc:38:1a:96:33: 3e:78:3d:22:64:c0:88:7c:21:81:73:52:50:86:1a: e3:79:a5:56:d9:47:29:a3:b6:8d:10:5e:13:5f:dc: 43:06:14:4c:08:6b:e7:b9:51:b3:74:8e:c3:97:5b: b9:8f:19:09:6f:c3:b1:cc:9b:4b:f7:b7:b9:1e:a1: 56:b3:64:1f:90:fd:bf:ac:6e:48:40:91:c9:22:6a: b0:96:02:f0:b8:67:2e:6c:e2:82:68:83:b4:46:5e: 8c:17:38:0c:e5:5b:01:1a:d9:04:a2:ee:a5:74:7e: ee:4b:1b:20:9c:72:62:14:5c:40:6a:6f:66:84:28: 65:8a:fb:23:91:1c:db:79:d3:f7:8b:a6:72:00:7e: 0c:21:31:af:b8:c4:fb:e6:f1:31:a7:1d:85:06:3e: 61:26:65:81:12:62:be:c9:c4:e9:dc:75:b0:37:04: d9:46:67:c1:77:3f:b5:83:8f:84:a9:a8:36:f9:e2: 2d:70:e7:58:a1:8d:ec:b4:b0:db:a6:f0:8a:19:55: 10:63:e8:46:53:89:20:d2:8b:57:a1:eb:9d:ec:da: e8:9d:96:26:32:e1:21:20:1f:86:a4:91:cf:07:3f: 79:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2E:B3:8E:36:A9:6F:B0:3C:65:92:95:73:DE:83:91:51:4B:F5:85 X509v3 Authority Key Identifier: keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:61:d1:04:80:d3:cf:13:b3:73:c2:21:53:13:b2:f5:8d:1e: bc:e4:14:d7:65:c1:38:d8:79:5e:0a:50:10:aa:3f:65:96:78: 86:52:7b:38:73:07:35:6c:b4:d3:56:4e:1a:5d:42:b2:b9:67: 08:2e:7d:13:eb:14:7e:db:60:6e:49:3b:7b:a6:24:da:bd:bf: 93:37:e5:b7:84:e0:d5:3e:79:8e:57:d2:e8:71:a5:98:24:3f: ef:57:61:72:0f:7c:32:0b:17:bf:a7:1a:15:01:5d:c7:0e:75: 29:94:57:37:32:64:cf:f8:6e:be:2c:c5:23:3d:2c:b8:f1:80: 25:e5:14:5d:79:51:43:1e:ba:c3:1d:ed:5a:7d:6d:1d:da:3f: c7:6c:fa:b5:89:c1:56:6e:a6:dd:5a:3d:57:2b:b1:d0:b7:66: 67:59:fc:31:c8:3f:40:93:8c:bc:5c:2f:5a:49:33:12:f7:5a: bc:b9:6d:1d:9d:9d:ea:34:f1:8a:8e:15:64:02:5d:02:06:d2: 38:ee:82:f6:ff:b6:cb:59:a0:e9:ee:b6:b8:1d:38:2f:f6:b9: b7:1b:bd:89:a6:4c:f4:1e:0c:c9:4d:eb:b9:14:89:04:b7:e1: f6:63:76:1e:af:37:da:08:48:d0:f5:37:c1:3d:c9:04:57:c8: 24:35:61:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDYxMTAvBgNVBAUTKEJDNzEwRDA1NjMzQzVFMTFCMDc0NEI3MUFFQkI4OEFF MkIyNDQ2RTMwHhcNMjUxMjIyMTY0MTE0WhcNMjUxMjI5MTY0MTE0WjAYMRYwFAYD VQQDDA02OTQ5NzRhYS0wYTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqg+P9/7W5LfzwCufp9pn6ErfyPwmhB36zDgaljM+eD0iZMCIfCGBc1JQhhrj eaVW2Ucpo7aNEF4TX9xDBhRMCGvnuVGzdI7Dl1u5jxkJb8OxzJtL97e5HqFWs2Qf kP2/rG5IQJHJImqwlgLwuGcubOKCaIO0Rl6MFzgM5VsBGtkEou6ldH7uSxsgnHJi FFxAam9mhChlivsjkRzbedP3i6ZyAH4MITGvuMT75vExpx2FBj5hJmWBEmK+ycTp 3HWwNwTZRmfBdz+1g4+Eqag2+eItcOdYoY3stLDbpvCKGVUQY+hGU4kg0otXoeud 7NronZYmMuEhIB+GpJHPBz95oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNous442 qW+wPGWSlXPeg5FRS/WFMB8GA1UdIwQYMBaAFLxxDQVjPF4RsHRLca67iK4rJEbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNi8zRjY3MEMwQ0E1 RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFhoR3dkRXR4cnJ1SXJpc2tS dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZIRU5CV004WGhHd2RFdHhycnVJcmlza1J1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNi8zRjY3MEMwQ0E1RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFho R3dkRXR4cnJ1SXJpc2tSdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKYdEEgNPPE7NzwiFTE7L1jR685BTXZcE42HleClAQqj9llniGUns4 cwc1bLTTVk4aXUKyuWcILn0T6xR+22BuSTt7piTavb+TN+W3hODVPnmOV9LocaWY JD/vV2FyD3wyCxe/pxoVAV3HDnUplFc3MmTP+G6+LMUjPSy48YAl5RRdeVFDHrrD He1afW0d2j/HbPq1icFWbqbdWj1XK7HQt2ZnWfwxyD9Ak4y8XC9aSTMS91q8uW0d nZ3qNPGKjhVkAl0CBtI47oL2/7bLWaDp7ra4HTgv9rm3G72Jpkz0HgzJTeu5FIkE t+H2Y3YerzfaCEjQ9TfBPckEV8gkNWE0 -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:28 2025 by rpki-client