This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft File: vCXNTkiu32CLScwphHLFwG6L9vs.mft (raw, json) Hash identifier: LdtyqxhKSBu9JVa2D/CY85fBT1ul0/89W6GSLxWVDfM= Subject key identifier: 2F:A9:67:0D:C6:E7:B3:A4:54:8E:33:67:B8:6B:78:B0:07:EB:A8:AA Authority key identifier: BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB Certificate issuer: /CN=A91E4700/serialNumber=BC25CD4E48AEDF608B49CC298472C5C06E8BF6FB Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft Manifest number: 10 Signing time: Wed 03 Dec 2025 06:03:27 +0000 Manifest this update: Wed 03 Dec 2025 06:03:26 +0000 Manifest next update: Wed 10 Dec 2025 06:03:26 +0000 Files and hashes: 1: vCXNTkiu32CLScwphHLFwG6L9vs.crl (hash: 5C+KJhJ4BNOhWUcdafEP9Yxo3sLA3s+U0V23rgVv/1U=) 2: A9CD5C92BB8C11F08999FE2AC4F9AE02.roa (hash: /D964zCXO8/n9D0LIEnRf6QWumX/XFVsi0kXmNEcZNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.crl rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4700, serialNumber=BC25CD4E48AEDF608B49CC298472C5C06E8BF6FB Validity Not Before: Dec 3 06:03:26 2025 GMT Not After : Dec 10 06:03:26 2025 GMT Subject: CN=692fd2ae-ed77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:94:e5:2e:fc:96:9f:7f:2a:3b:de:6a:9c:74: 32:e5:42:5c:d3:3f:b7:4b:a6:bb:82:4e:c8:2f:82: 5b:a5:e7:f0:03:34:fe:9a:f7:34:73:a7:c6:a4:b3: 9e:2e:6a:41:18:60:07:dc:4f:41:a8:29:bd:2a:a7: c6:07:23:c5:79:eb:c0:dc:f9:82:fa:80:99:b7:5a: 11:96:bc:7b:66:f7:a1:ab:f8:b8:df:cb:99:55:66: be:f4:35:34:8a:50:ad:fa:6f:6f:c3:de:f9:a6:60: 80:19:ab:26:09:9a:2d:60:34:b7:ff:37:30:ae:b2: 08:fc:21:e6:7e:25:dc:a4:e3:8d:6e:05:51:fd:ad: 5a:40:3f:df:2f:f5:f5:35:a9:58:53:d8:60:a7:76: d6:08:c0:d5:17:b3:b3:86:9e:d5:3e:e2:6d:6b:c8: a1:f2:d9:97:18:41:25:10:cc:87:d5:94:a7:98:9f: 6b:56:cc:64:8d:24:0c:6e:b9:2e:51:67:25:15:d9: b1:f3:64:8b:c6:00:32:d5:a2:4f:6c:4a:33:c7:09: ab:10:14:f0:5f:e1:fd:15:b4:ca:0f:f8:11:3e:aa: 64:92:cd:22:69:d1:b4:f7:e0:dc:90:b1:92:17:77: 09:6c:8d:0f:55:62:00:d4:ae:e2:7a:c2:54:ab:00: 18:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A9:67:0D:C6:E7:B3:A4:54:8E:33:67:B8:6B:78:B0:07:EB:A8:AA X509v3 Authority Key Identifier: keyid:BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:05:a1:70:3c:fd:8c:5d:9e:c5:5b:62:ac:8b:7c:4a:03:6e: f2:7b:4c:1b:9b:22:aa:7e:a6:a1:c2:ee:56:f4:c9:ac:06:18: a6:0b:e8:8f:11:1e:d4:e6:3d:92:21:21:ad:4e:40:84:cf:7d: b1:a9:63:7b:92:f1:ec:36:07:da:86:1c:98:82:2d:a2:69:40: bc:63:2f:3d:4d:95:d4:41:ab:04:30:13:18:41:45:0a:0a:49: 93:11:51:d5:d2:6d:de:6a:26:d7:8b:e1:b6:64:9c:ab:9b:b6: 17:79:41:fa:a3:ca:55:5d:35:06:5c:ef:ac:30:7a:fb:f9:d6: 16:1f:1c:2d:c5:5c:c7:a2:25:a5:09:ee:a7:17:11:60:ba:6c: 29:00:94:d8:54:8c:97:3e:fd:7d:e4:97:d0:d2:64:3e:7d:b9: 70:1b:e8:9f:40:bd:5c:d4:df:c5:95:63:67:40:18:81:42:f1: 45:fe:bb:c0:ad:f4:49:c1:35:e4:cb:e2:83:57:94:af:be:dd: 96:7c:b3:a5:ad:71:f4:8d:62:de:70:c3:6c:ef:07:81:4c:1d: bf:54:1c:8d:08:99:d2:23:fc:e2:e3:26:c3:ae:bb:f8:ac:83: 6f:6f:46:14:dd:22:4a:50:08:28:e7:db:7c:c6:25:32:8d:3d: 29:48:1d:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDcwMDExMC8GA1UEBRMoQkMyNUNENEU0OEFFREY2MDhCNDlDQzI5ODQ3MkM1QzA2 RThCRjZGQjAeFw0yNTEyMDMwNjAzMjZaFw0yNTEyMTAwNjAzMjZaMBgxFjAUBgNV BAMTDTY5MmZkMmFlLWVkNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHlOUu/Jaffyo73mqcdDLlQlzTP7dLpruCTsgvglul5/ADNP6a9zRzp8aks54u akEYYAfcT0GoKb0qp8YHI8V568Dc+YL6gJm3WhGWvHtm96Gr+Ljfy5lVZr70NTSK UK36b2/D3vmmYIAZqyYJmi1gNLf/NzCusgj8IeZ+Jdyk441uBVH9rVpAP98v9fU1 qVhT2GCndtYIwNUXs7OGntU+4m1ryKHy2ZcYQSUQzIfVlKeYn2tWzGSNJAxuuS5R ZyUV2bHzZIvGADLVok9sSjPHCasQFPBf4f0VtMoP+BE+qmSSzSJp0bT34NyQsZIX dwlsjQ9VYgDUruJ6wlSrABjtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL6lnDcbn s6RUjjNnuGt4sAfrqKowHwYDVR0jBBgwFoAUvCXNTkiu32CLScwphHLFwG6L9vsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0NzAwLzE4NkYyQzJBQkI4 MzExRjA4ODk2OTc2NUM0RjlBRTAyL3ZDWE5Ua2l1MzJDTFNjd3BoSExGd0c2TDl2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdkNYTlRraXUzMkNMU2N3cGhITEZ3RzZMOXZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 NzAwLzE4NkYyQzJBQkI4MzExRjA4ODk2OTc2NUM0RjlBRTAyL3ZDWE5Ua2l1MzJD TFNjd3BoSExGd0c2TDl2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKwFoXA8/YxdnsVbYqyLfEoDbvJ7TBubIqp+pqHC7lb0yawGGKYL6I8R HtTmPZIhIa1OQITPfbGpY3uS8ew2B9qGHJiCLaJpQLxjLz1NldRBqwQwExhBRQoK SZMRUdXSbd5qJteL4bZknKubthd5QfqjylVdNQZc76wwevv51hYfHC3FXMeiJaUJ 7qcXEWC6bCkAlNhUjJc+/X3kl9DSZD59uXAb6J9AvVzU38WVY2dAGIFC8UX+u8Ct 9EnBNeTL4oNXlK++3ZZ8s6WtcfSNYt5ww2zvB4FMHb9UHI0ImdIj/OLjJsOuu/is g29vRhTdIkpQCCjn23zGJTKNPSlIHVI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:10 2025 by rpki-client