This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft File: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json) Hash identifier: ecUZT2n4yiPQv0WUhziOieLd7A35ZZaCzVirdvWt/mQ= Subject key identifier: 7C:D8:C1:A5:4F:90:4D:69:17:61:75:F7:9E:B2:A1:CA:39:1E:B4:DF Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Certificate serial: 05B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft Manifest number: 05A5 Signing time: Thu 18 Dec 2025 22:29:45 +0000 Manifest this update: Thu 18 Dec 2025 22:29:45 +0000 Manifest next update: Thu 25 Dec 2025 22:29:45 +0000 Files and hashes: 1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: GhLbAwaoguJRLOv6W2DUKMkMDTTLOfLhxYLdCCbMA+Q=) 2: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: amAbeNg9WhoR9LiBcCPddN+usabEY60TrC7LxRq3i34=) 3: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: edmH+zoE3tcqcciZuFe0JER5V1TWvNXJvKg0Me+DQ90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1457 (0x5b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Validity Not Before: Dec 18 22:29:45 2025 GMT Not After : Dec 25 22:29:45 2025 GMT Subject: CN=69448059-9965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b2:b2:b7:97:63:5e:f8:21:dc:d7:0e:93:86: 96:15:47:f9:55:30:5b:be:02:e8:1f:fd:ce:e5:4e: 2e:5d:89:ee:6a:0a:47:25:0d:4a:01:92:27:7c:b8: ca:3c:1a:56:6a:b0:0e:31:09:50:e7:0b:b3:ef:09: b8:d9:d5:60:c6:9b:03:da:f4:eb:f6:2d:04:88:47: 08:81:5e:ce:f6:69:07:6e:b9:98:3a:ea:9f:54:38: f4:ee:d9:e3:a6:eb:0a:e1:e3:e6:bc:32:1b:01:b9: a0:27:d8:b3:cf:21:00:bd:cc:e2:4d:e5:59:04:12: 54:5d:4f:67:da:3f:a4:7a:a2:77:5a:90:79:f8:c5: 61:1e:84:c8:18:7e:4d:e6:f7:07:28:22:40:e5:1d: 36:22:14:14:42:94:18:4c:6d:c4:75:dc:34:be:29: 61:4c:fd:c3:97:8e:38:6a:ce:33:cb:24:4b:ba:fe: 48:97:ab:34:f2:36:f6:c5:b0:b1:39:0a:00:7f:09: e3:d8:7d:05:d3:2b:0e:5f:e8:ea:da:6b:54:7a:34: ec:a8:74:42:d7:3f:c4:12:c9:e1:13:4b:04:7a:3c: 09:99:7d:a3:f4:e3:40:b1:70:42:7a:77:c0:83:92: 5c:67:1f:e1:b7:64:8b:f6:18:cb:1b:01:0e:03:67: 29:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D8:C1:A5:4F:90:4D:69:17:61:75:F7:9E:B2:A1:CA:39:1E:B4:DF X509v3 Authority Key Identifier: keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5e:6e:88:67:56:1b:e9:a2:75:46:14:a8:cf:36:da:fd:67: 35:c6:3e:02:99:f4:6a:40:57:0f:5e:ca:f0:10:a1:1c:1e:a8: 9a:e5:39:61:a0:dd:d7:1c:11:bd:d2:d0:47:71:31:d9:71:86: b8:4e:82:f5:f2:d3:c0:71:64:0a:6f:ca:c8:dd:a7:11:b9:1a: 3c:51:f4:d2:84:cd:28:42:65:f5:f7:55:5f:93:33:d1:8f:e8: 00:58:ba:a7:b4:16:16:f7:bf:48:14:1b:2e:89:01:12:ad:68: 66:cb:70:a9:b6:3f:f4:8a:d5:f1:97:c3:80:6f:fd:71:cc:46: 4a:1b:b3:22:81:72:e3:98:cf:62:fd:cf:4a:9b:97:45:8e:a8: 46:28:15:0d:aa:e0:70:9d:08:1c:1b:34:3b:4a:a9:ff:20:87: b4:d8:8b:ca:25:28:31:f5:ee:28:1f:71:c1:f2:7c:d6:2c:d8: fa:30:82:a6:a6:7d:12:57:b8:bf:ef:53:b1:ae:51:61:38:97: 1c:2e:0e:ed:a8:fd:9c:91:68:0b:85:55:24:14:30:ab:e9:ec: b1:a7:e7:87:3d:9a:2a:08:2d:1c:ec:cf:70:49:1e:67:34:a0: ba:9a:40:10:f6:8a:ad:43:16:93:2f:11:66:79:0d:18:a7:9c: e3:7a:43:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdDMjExMTAvBgNVBAUTKEJDMkRBMzVDQjU2NTEzQTk0QTY4QjU5MUREMkM3NkM1 MUQ4MTExMzQwHhcNMjUxMjE4MjIyOTQ1WhcNMjUxMjI1MjIyOTQ1WjAYMRYwFAYD VQQDDA02OTQ0ODA1OS05OTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnLKyt5djXvgh3NcOk4aWFUf5VTBbvgLoH/3O5U4uXYnuagpHJQ1KAZInfLjK PBpWarAOMQlQ5wuz7wm42dVgxpsD2vTr9i0EiEcIgV7O9mkHbrmYOuqfVDj07tnj pusK4ePmvDIbAbmgJ9izzyEAvcziTeVZBBJUXU9n2j+keqJ3WpB5+MVhHoTIGH5N 5vcHKCJA5R02IhQUQpQYTG3Eddw0vilhTP3Dl444as4zyyRLuv5Il6s08jb2xbCx OQoAfwnj2H0F0ysOX+jq2mtUejTsqHRC1z/EEsnhE0sEejwJmX2j9ONAsXBCenfA g5JcZx/ht2SL9hjLGwEOA2cpGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzYwaVP kE1pF2F1956yoco5HrTfMB8GA1UdIwQYMBaAFLwto1y1ZROpSmi1kd0sdsUdgRE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0MyMS8zQkNEMDA3NEY1 QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2bEthTFdSM1N4MnhSMkJF VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZDMmpYTFZsRTZsS2FMV1IzU3gyeFIyQkVUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0MyMS8zQkNEMDA3NEY1QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2 bEthTFdSM1N4MnhSMkJFVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPXm6IZ1Yb6aJ1RhSozzba/Wc1xj4CmfRqQFcPXsrwEKEcHqia5Tlh oN3XHBG90tBHcTHZcYa4ToL18tPAcWQKb8rI3acRuRo8UfTShM0oQmX191VfkzPR j+gAWLqntBYW979IFBsuiQESrWhmy3Cptj/0itXxl8OAb/1xzEZKG7MigXLjmM9i /c9Km5dFjqhGKBUNquBwnQgcGzQ7Sqn/IIe02IvKJSgx9e4oH3HB8nzWLNj6MIKm pn0SV7i/71OxrlFhOJccLg7tqP2ckWgLhVUkFDCr6eyxp+eHPZoqCC0c7M9wSR5n NKC6mkAQ9oqtQxaTLxFmeQ0Yp5zjekNP -----END CERTIFICATE-----Generated at Fri Dec 19 21:29:27 2025 by rpki-client