This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft File: vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft (raw, json) Hash identifier: KiTlW66DvMJYDdy965sQpV/eez3mvZfjtY8/MSkpctM= Subject key identifier: 0F:F0:06:61:A4:B2:65:6E:C1:1B:8E:77:BE:68:1F:E4:1E:D5:B5:D4 Authority key identifier: BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4 Certificate issuer: /CN=A91E4EEF/serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft Manifest number: 03 Signing time: Tue 23 Dec 2025 06:59:30 +0000 Manifest this update: Tue 23 Dec 2025 06:59:29 +0000 Manifest next update: Tue 30 Dec 2025 06:59:29 +0000 Files and hashes: 1: vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl (hash: E5BHDFr0WCBcxxWCAZqwdkPROp0TMl7jw6TTrXKRlEo=) 2: 8C5382D6DEF511F0A9861D4A586F56BC.roa (hash: vjfsamXqkXFmxfFh/f0yvWlnKb+B5x6VvVnf5hM9bVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EEF, serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4 Validity Not Before: Dec 23 06:59:29 2025 GMT Not After : Dec 30 06:59:29 2025 GMT Subject: CN=694a3dd1-48c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6a:d7:34:07:c7:01:64:7c:42:0d:d8:e8:dd: 2d:d1:96:16:51:df:62:33:2d:48:43:fc:15:a0:7e: bb:b2:ab:0b:cf:80:71:39:be:f4:2f:36:81:85:a0: 94:93:66:f1:39:1b:04:93:06:f5:ad:3d:71:18:67: 69:dc:7e:24:3c:58:1f:72:49:c6:8c:7d:f6:b0:b8: 0a:c4:9a:66:02:2c:7e:4c:03:33:e9:6e:b8:6b:f0: 84:cc:ac:4a:1b:db:e4:46:01:83:3b:fe:20:92:51: 2a:b1:75:66:7e:74:cd:06:6d:ee:9d:2f:f7:be:c3: a7:9e:bc:31:63:7f:22:cb:e3:f9:67:7d:5a:a1:69: 5d:d9:1f:14:b7:a1:06:0e:bd:df:c4:6d:5f:d8:b6: 11:42:15:33:83:18:81:e8:0d:fc:68:66:2a:f6:bb: 63:0c:85:ec:45:5c:0b:1f:9f:16:0c:b2:0c:fd:8c: e5:f2:38:15:80:4e:dd:8b:b9:58:6b:2d:cd:1c:70: 2c:26:b9:9d:f9:b6:1b:55:20:9e:53:1b:23:dc:c0: 11:5b:0e:d1:73:95:df:79:37:4b:be:49:cf:a5:84: f9:89:47:63:3d:0a:72:17:21:f4:b0:9f:b2:e6:3b: 2e:dc:ac:ee:81:6f:21:4d:ce:9c:0d:82:e8:34:71: cb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F0:06:61:A4:B2:65:6E:C1:1B:8E:77:BE:68:1F:E4:1E:D5:B5:D4 X509v3 Authority Key Identifier: keyid:BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:58:b7:d7:f0:90:89:11:a5:7d:94:0b:5d:05:ff:65:da:bf: 22:73:ed:28:29:ec:0d:12:d2:6d:75:54:eb:b5:fc:81:c9:35: 29:04:6f:47:9a:c0:a5:db:aa:8c:e2:3c:c6:d1:43:d2:77:a7: 39:33:f9:6f:a1:7a:78:51:5d:37:9b:70:27:f1:65:8a:cf:d5: 70:d0:bd:98:ae:25:c9:a5:2d:ea:23:33:f6:d5:88:4c:d5:d7: 76:d6:d7:d1:dc:d8:31:2e:eb:c1:b7:b7:b9:d2:27:5e:fe:ee: 83:0c:70:0d:44:5f:84:87:e7:ca:ab:b5:a3:09:55:61:b6:fb: 35:1b:29:54:4a:e3:54:81:b3:40:86:56:5e:79:fb:d9:7c:65: 34:03:73:92:06:20:c7:83:3d:23:f8:d4:d2:c6:f3:c0:c4:ca: 13:33:c7:67:08:32:90:38:94:53:50:0c:a8:bc:79:4f:0d:19: 12:ac:95:e4:08:af:05:2a:de:60:7e:48:ca:72:78:53:e3:d4: 01:1d:a9:89:6f:d3:80:7f:24:04:84:66:a3:e7:04:33:e8:99: b3:66:b1:58:94:22:a3:32:98:0d:d6:50:3a:99:ec:fa:38:f6: cf:58:92:bb:48:65:d3:6e:be:a6:cc:f5:cb:2c:5a:83:15:fc: 69:eb:fd:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFF NEVFRjExMC8GA1UEBRMoQkNFQTkxMTRERjkzNkNERTg5NEZDMDg0RjgwOENGRDA5 RTE0RjRCNDAeFw0yNTEyMjMwNjU5MjlaFw0yNTEyMzAwNjU5MjlaMBgxFjAUBgNV BAMMDTY5NGEzZGQxLTQ4YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLatc0B8cBZHxCDdjo3S3RlhZR32IzLUhD/BWgfruyqwvPgHE5vvQvNoGFoJST ZvE5GwSTBvWtPXEYZ2ncfiQ8WB9yScaMffawuArEmmYCLH5MAzPpbrhr8ITMrEob 2+RGAYM7/iCSUSqxdWZ+dM0Gbe6dL/e+w6eevDFjfyLL4/lnfVqhaV3ZHxS3oQYO vd/EbV/YthFCFTODGIHoDfxoZir2u2MMhexFXAsfnxYMsgz9jOXyOBWATt2LuVhr Lc0ccCwmuZ35thtVIJ5TGyPcwBFbDtFzld95N0u+Sc+lhPmJR2M9CnIXIfSwn7Lm Oy7crO6BbyFNzpwNgug0cctVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD/AGYaSy ZW7BG453vmgf5B7VtdQwHwYDVR0jBBgwFoAUvOqRFN+TbN6JT8CE+AjP0J4U9LQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0RUVGL0Q3MTA1QkI2REVG MzExRjA5RUQ0MTI5NjU3NkY1NkJDL3ZPcVJGTi1UYk42SlQ4Q0UtQWpQMEo0VTlM US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdk9xUkZOLVRiTjZKVDhDRS1BalAwSjRVOUxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 RUVGL0Q3MTA1QkI2REVGMzExRjA5RUQ0MTI5NjU3NkY1NkJDL3ZPcVJGTi1UYk42 SlQ4Q0UtQWpQMEo0VTlMUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGZYt9fwkIkRpX2UC10F/2XavyJz7Sgp7A0S0m11VOu1/IHJNSkEb0ea wKXbqoziPMbRQ9J3pzkz+W+henhRXTebcCfxZYrP1XDQvZiuJcmlLeojM/bViEzV 13bW19Hc2DEu68G3t7nSJ17+7oMMcA1EX4SH58qrtaMJVWG2+zUbKVRK41SBs0CG Vl55+9l8ZTQDc5IGIMeDPSP41NLG88DEyhMzx2cIMpA4lFNQDKi8eU8NGRKsleQI rwUq3mB+SMpyeFPj1AEdqYlv04B/JASEZqPnBDPombNmsViUIqMymA3WUDqZ7Po4 9s9YkrtIZdNuvqbM9cssWoMV/Gnr/Z0= -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:07 2025 by rpki-client