This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft File: vkY_wZGbQUKyOCgTgn-3FtbukoM.mft (raw, json) Hash identifier: 8DOK02mo5sPfNs0Fu2FZpiOBNR6/QdveTnzyMOE3GLs= Subject key identifier: 41:07:0A:F7:1F:D0:02:53:41:4C:EE:02:63:64:4E:42:09:98:7E:09 Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83 Certificate issuer: /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283 Certificate serial: 07C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft Manifest number: 07B3 Signing time: Wed 10 Dec 2025 20:13:24 +0000 Manifest this update: Wed 10 Dec 2025 20:13:23 +0000 Manifest next update: Wed 17 Dec 2025 20:13:23 +0000 Files and hashes: 1: vkY_wZGbQUKyOCgTgn-3FtbukoM.crl (hash: QtfLRM+13dDCuofmI1wuMXlqEtDjv1e3kdlnSW8jltI=) 2: 28543AA0BABA11EB8A51C234C4F9AE02.roa (hash: tLbuywK1hQsCi3a1AqRQB3esx6wP54LrqFgdAXcaBdM=) 3: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (hash: XOt7bB+UgZTY8Thh+DvUt1JxAIDEDKn5j8X2t+ws97c=) 4: 2798B9A6BABA11EB8A51C234C4F9AE02.roa (hash: +zcjX2imATb1GbMG2fycsIcaiWvdU6/+K/wkiamqX6U=) 5: 58E4A6E8B60811F0AF40B71EC4F9AE02.roa (hash: 726+J+96Tj+HjEIghhxWecanICxHywnH4M9SjhljsVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 20:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1987 (0x7c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40BF, serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283 Validity Not Before: Dec 10 20:13:23 2025 GMT Not After : Dec 17 20:13:23 2025 GMT Subject: CN=6939d464-5b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:5f:0b:30:5e:ac:d9:a5:95:fb:cb:72:19: 9f:0d:41:99:ae:4f:11:c0:cd:62:db:99:aa:d2:10: 86:cc:f6:5b:f3:ea:d7:23:d4:f5:cf:03:4d:8c:42: 33:2c:e1:d1:20:15:d9:18:22:1e:62:78:57:dd:8e: 41:47:81:4c:04:9e:98:dc:93:de:be:74:53:a8:3a: 34:3e:02:71:b7:40:9e:d4:62:52:ae:ac:74:59:13: c4:86:78:f2:06:9b:c5:ef:b0:51:ac:8e:d5:20:38: a5:66:18:8e:ea:1c:c0:a9:03:dd:7f:e3:40:86:1e: 1e:4f:72:fc:77:f7:af:ce:a8:86:07:7f:11:5d:c7: 36:c3:47:8d:6f:2b:ae:c6:04:d6:82:b0:44:a6:ad: 51:5e:03:e7:05:c3:4f:b5:80:8e:3e:89:ad:df:9d: 6a:bb:46:e6:47:77:17:de:84:c2:2b:0c:6b:d7:15: cc:79:58:14:f0:bd:0e:05:21:15:83:0d:27:d9:e5: 07:3b:34:ab:34:7c:a5:b9:c3:01:e7:e4:18:a8:4d: c3:45:ff:0a:f0:d4:fc:b7:b1:c4:c5:ab:67:af:b1: 14:5b:2a:86:44:32:c0:75:0b:26:5a:d3:aa:13:6c: 77:7b:1e:0d:7b:3e:67:74:0d:53:b4:c5:ff:eb:ac: a0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:07:0A:F7:1F:D0:02:53:41:4C:EE:02:63:64:4E:42:09:98:7E:09 X509v3 Authority Key Identifier: keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d7:d8:8f:00:71:cc:ef:66:ee:5f:e6:60:d6:b6:95:cb:be: 2c:2c:87:32:d7:a8:19:7c:93:a5:6c:7b:45:c4:d9:8a:38:27: 63:7d:56:04:0c:1e:ba:06:84:bc:06:8a:f6:1c:8b:e0:20:25: fc:f0:96:d9:5a:e1:bf:89:db:60:2e:32:a5:b0:c6:e2:ee:b3: 1c:e6:47:a9:16:69:fe:85:bb:ac:ca:03:4c:ae:a6:1e:50:36: 7b:c4:47:1a:b7:bd:0f:04:8b:66:21:bd:14:c5:78:88:b7:e9: 96:8c:de:e4:cf:37:5f:ea:4e:45:5b:d0:cc:59:a5:25:24:60: 5a:00:c5:6e:38:1e:82:fd:92:6c:94:64:1d:bf:24:71:d0:a2: b5:3c:5c:7a:31:d7:61:f1:6d:37:50:40:3d:da:29:01:7b:a7: 98:1d:61:de:c5:bd:0c:39:de:92:44:ec:f1:1e:65:f9:c1:e2: da:9a:d8:20:ef:06:8b:a1:33:79:aa:42:97:2b:f0:b4:e8:cf: 09:ef:7e:f6:ca:72:b4:9f:d5:f5:e5:70:09:3b:a8:32:ea:c9: 10:60:60:93:83:4e:b9:dd:f6:ce:f5:a3:30:4c:15:2f:73:19: 3a:07:e3:52:5b:5c:35:d7:b5:a2:f5:45:17:43:54:b0:35:4f: bc:1d:41:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQkYxMTAvBgNVBAUTKEJFNDYzRkMxOTE5QjQxNDJCMjM4MjgxMzgyN0ZCNzE2 RDZFRTkyODMwHhcNMjUxMjEwMjAxMzIzWhcNMjUxMjE3MjAxMzIzWjAYMRYwFAYD VQQDEw02OTM5ZDQ2NC01YjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9xfCzBerNmllfvLchmfDUGZrk8RwM1i25mq0hCGzPZb8+rXI9T1zwNNjEIz LOHRIBXZGCIeYnhX3Y5BR4FMBJ6Y3JPevnRTqDo0PgJxt0Ce1GJSrqx0WRPEhnjy BpvF77BRrI7VIDilZhiO6hzAqQPdf+NAhh4eT3L8d/evzqiGB38RXcc2w0eNbyuu xgTWgrBEpq1RXgPnBcNPtYCOPomt351qu0bmR3cX3oTCKwxr1xXMeVgU8L0OBSEV gw0n2eUHOzSrNHylucMB5+QYqE3DRf8K8NT8t7HExatnr7EUWyqGRDLAdQsmWtOq E2x3ex4Nez5ndA1TtMX/66ygtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEHCvcf 0AJTQUzuAmNkTkIJmH4JMB8GA1UdIwQYMBaAFL5GP8GRm0FCsjgoE4J/txbW7pKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBCRi8yN0I3QTI4NDI0 QzAxMUVCQjYyQjQzODdDNEY5QUUwMi92a1lfd1pHYlFVS3lPQ2dUZ24tM0Z0YnVr b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZrWV93WkdiUVVLeU9DZ1Rnbi0zRnRidWtvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBCRi8yN0I3QTI4NDI0QzAxMUVCQjYyQjQzODdDNEY5QUUwMi92a1lfd1pHYlFV S3lPQ2dUZ24tM0Z0YnVrb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP19iPAHHM72buX+Zg1raVy74sLIcy16gZfJOlbHtFxNmKOCdjfVYE DB66BoS8Bor2HIvgICX88JbZWuG/idtgLjKlsMbi7rMc5kepFmn+hbusygNMrqYe UDZ7xEcat70PBItmIb0UxXiIt+mWjN7kzzdf6k5FW9DMWaUlJGBaAMVuOB6C/ZJs lGQdvyRx0KK1PFx6Mddh8W03UEA92ikBe6eYHWHexb0MOd6SROzxHmX5weLamtgg 7waLoTN5qkKXK/C06M8J7372ynK0n9X15XAJO6gy6skQYGCTg0653fbO9aMwTBUv cxk6B+NSW1w117Wi9UUXQ1SwNU+8HUGJ -----END CERTIFICATE-----Generated at Fri Dec 12 08:44:26 2025 by rpki-client