This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft File: VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json) Hash identifier: RFXJflw44jBhb5gwELiLOh2wS7jP6QXsHOx+Rc31MNA= Subject key identifier: 8D:96:53:F4:A9:DD:8D:A7:67:8A:44:FB:94:E5:1F:04:2A:09:B6:EB Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC Certificate issuer: /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Certificate serial: 1CC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft Manifest number: 51AC Signing time: Mon 22 Dec 2025 15:07:55 +0000 Manifest this update: Mon 22 Dec 2025 15:07:54 +0000 Manifest next update: Mon 29 Dec 2025 15:07:54 +0000 Files and hashes: 1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: piBJ/eH/r0nA7RQsUQrU44V0j1kqgfFMKk592iQYDak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7363 (0x1cc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Validity Not Before: Dec 22 15:07:54 2025 GMT Not After : Dec 29 15:07:54 2025 GMT Subject: CN=69495ecb-170e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6d:96:96:48:7d:88:77:d6:9f:bb:72:f1:7c: ba:b6:d6:40:39:00:cf:0f:03:95:95:2c:20:4c:03: a9:40:92:6a:ab:a3:b8:40:9c:21:c4:f1:9e:3e:b5: e9:08:ce:f4:2a:f7:6f:3c:eb:78:d7:0f:ab:c2:8f: c4:b2:5a:6c:6d:88:0a:71:39:9b:29:f3:cf:45:f8: 36:65:9e:58:76:03:ae:1b:61:d9:4d:b8:1e:0a:9e: e3:9e:56:55:41:7b:84:fa:e9:5a:cf:74:d7:c8:2f: 4e:f7:c4:e4:84:c7:00:33:f3:0a:8a:b9:e8:1c:51: 20:b7:a4:48:72:ee:bd:bf:b0:fb:ed:87:6c:7b:b6: 3d:86:09:2c:c4:30:8d:0f:19:ca:ea:b7:79:c5:e4: 84:f5:66:58:13:97:b3:90:b1:8f:74:52:b1:e1:a0: 0a:a2:74:94:1b:9e:29:f1:de:e1:fe:93:90:d6:b9: ee:f0:fb:18:ba:30:78:fa:58:cd:b4:6a:85:e2:c2: 7a:87:1d:72:76:0f:c9:5c:a3:08:58:48:2c:e1:5b: 0f:1d:b2:4a:25:1e:31:cd:ac:6c:7e:09:1c:8f:8d: 89:24:f6:16:fd:da:be:d7:e3:48:43:3b:2a:37:7e: 74:20:f5:5b:30:76:ef:26:13:62:73:4b:cd:01:fd: 69:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:96:53:F4:A9:DD:8D:A7:67:8A:44:FB:94:E5:1F:04:2A:09:B6:EB X509v3 Authority Key Identifier: keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:08:20:64:29:74:06:7c:f2:15:7b:34:2d:4f:27:b9:cf:69: cf:e0:d8:b6:bb:48:0f:22:56:cc:f1:89:16:ce:1c:78:ab:c9: e8:27:ad:cb:24:38:41:85:95:7b:27:fa:9c:db:d8:91:54:a8: 14:9f:65:1c:16:16:b0:c4:98:f9:82:d5:a0:e0:81:c1:1a:e2: 06:9f:b7:78:4d:26:04:ef:ba:53:21:78:58:d0:71:6d:61:f7: f1:e5:98:38:2c:79:46:fc:d4:73:8a:9a:8d:b8:a9:c4:5e:6e: 2f:72:4b:b8:1d:ef:e3:93:fe:ae:b5:3a:cb:73:3b:b3:7f:81: 4b:2b:b7:ac:e5:7e:cb:27:d3:01:fe:88:32:2c:e9:bc:5a:79: 77:ad:52:8c:3f:51:66:0c:df:97:82:54:0b:66:ca:8a:c9:d7: b3:97:44:6b:78:66:7d:fb:1e:b2:df:24:b0:a5:01:bf:bf:6d: 31:56:e0:38:b0:5a:cb:9b:be:2e:9f:cb:88:d2:ef:f1:a6:78: 4d:13:7d:95:48:3d:fd:5f:04:9f:0a:5f:a8:dd:b4:81:8f:5f: 74:02:5f:94:4b:ee:d9:ba:63:2c:a3:6c:38:5a:c3:ea:a1:9d: 59:18:43:10:19:70:2c:1d:a7:89:d4:60:4f:a1:a4:cc:b1:b4: c5:7d:ac:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDU0NDJERENBRDg5ODUxRDk0QkFBQzBBQjczOTJDRTQx OUEyMThBQ0MwHhcNMjUxMjIyMTUwNzU0WhcNMjUxMjI5MTUwNzU0WjAYMRYwFAYD VQQDDA02OTQ5NWVjYi0xNzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvG2Wlkh9iHfWn7ty8Xy6ttZAOQDPDwOVlSwgTAOpQJJqq6O4QJwhxPGePrXp CM70KvdvPOt41w+rwo/EslpsbYgKcTmbKfPPRfg2ZZ5YdgOuG2HZTbgeCp7jnlZV QXuE+ulaz3TXyC9O98TkhMcAM/MKirnoHFEgt6RIcu69v7D77Ydse7Y9hgksxDCN DxnK6rd5xeSE9WZYE5ezkLGPdFKx4aAKonSUG54p8d7h/pOQ1rnu8PsYujB4+ljN tGqF4sJ6hx1ydg/JXKMIWEgs4VsPHbJKJR4xzaxsfgkcj42JJPYW/dq+1+NIQzsq N350IPVbMHbvJhNic0vNAf1pwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2WU/Sp 3Y2nZ4pE+5TlHwQqCbbrMB8GA1UdIwQYMBaAFFRC3crYmFHZS6rAq3OSzkGaIYrM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVkbExxc0NyYzVMT1Fab2hp c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFTGR5dGlZVWRsTHFzQ3JjNUxPUVpvaGlzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVk bExxc0NyYzVMT1Fab2hpc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBCCBkKXQGfPIVezQtTye5z2nP4Ni2u0gPIlbM8YkWzhx4q8noJ63L JDhBhZV7J/qc29iRVKgUn2UcFhawxJj5gtWg4IHBGuIGn7d4TSYE77pTIXhY0HFt Yffx5Zg4LHlG/NRzipqNuKnEXm4vcku4He/jk/6utTrLczuzf4FLK7es5X7LJ9MB /ogyLOm8Wnl3rVKMP1FmDN+XglQLZsqKydezl0RreGZ9+x6y3ySwpQG/v20xVuA4 sFrLm74un8uI0u/xpnhNE32VSD39XwSfCl+o3bSBj190Al+US+7ZumMso2w4WsPq oZ1ZGEMQGXAsHaeJ1GBPoaTMsbTFfawQ -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:30 2025 by rpki-client