This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json) Hash identifier: 6yBsYKKfwwU7peU7BqNoa5ZaKzc9h2BmBGFxZfdwgbc= Subject key identifier: 5A:FC:ED:D2:E0:3E:2C:1B:7D:D1:A8:BA:62:71:28:C0:AF:72:7E:04 Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft Manifest number: 047B Signing time: Thu 04 Dec 2025 22:40:38 +0000 Manifest this update: Thu 04 Dec 2025 22:40:38 +0000 Manifest next update: Thu 11 Dec 2025 22:40:38 +0000 Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: FPlz9Jz5/BgtGojjB22py9W4A48CNyZ/5ao3pa3s6HU=) 2: 616435103F3E11EE81024074C4F9AE02.roa (hash: BV7IOs58jkocun9KOxJEZWid0CjNqRr4h3oLm+oM9XA=) 3: B25FEE6E85EB11F088AFC15EC4F9AE02.roa (hash: FmTdhb6JOatjzFGpUujz0yqqemXgtcfk0JQ/+/a77U0=) 4: 168BE8747EEE11ECAB036C59C4F9AE02.roa (hash: wF1Z2aa2PTEiRRPCp23vYrxyf7/d64gIm78PkkwoFEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Validity Not Before: Dec 4 22:40:38 2025 GMT Not After : Dec 11 22:40:38 2025 GMT Subject: CN=69320de6-8b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9f:c3:ed:df:9b:58:6d:3d:e6:83:5e:66:de: b0:db:0f:56:9c:03:7f:16:a9:1e:29:d2:73:23:67: 73:a8:fe:81:2b:d1:af:ca:5a:a9:f1:4d:81:9a:da: 54:7d:7c:69:53:e5:15:a6:bd:fb:d4:e4:3b:bc:22: 8e:f9:b6:ca:11:a7:7f:d3:15:f3:c4:f5:b7:96:73: 9a:38:d0:6f:29:16:53:75:79:4a:5c:c4:24:6f:c9: b4:9d:4f:11:74:86:01:bd:cf:97:b9:5a:94:62:01: 88:41:fa:c1:88:38:f6:3a:ea:19:5b:81:e9:ab:a5: 2f:39:9b:da:ed:e1:85:50:e3:d7:f4:75:7f:5d:34: ea:13:11:03:ef:a3:bf:3b:8c:18:44:36:11:ce:4c: c8:fb:27:96:b4:92:f2:26:3a:55:7a:70:da:7a:62: d8:eb:74:32:10:18:a5:6e:72:48:26:79:02:68:56: a4:1e:9f:e9:b1:e8:27:f2:de:ce:11:a7:bb:e0:87: df:0c:84:6c:54:64:b3:59:22:95:00:9d:83:2a:d6: cd:df:79:3c:e2:28:d1:a2:fb:ea:3f:7a:ca:24:44: 69:9f:3f:24:71:bb:82:9f:08:3c:80:b9:cb:82:a2: 25:d5:a8:b7:ce:f8:b8:d4:d3:48:bc:7d:03:bf:72: d0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FC:ED:D2:E0:3E:2C:1B:7D:D1:A8:BA:62:71:28:C0:AF:72:7E:04 X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:03:26:83:79:b8:8d:c7:84:dc:72:e7:eb:b6:70:f0:f4:8f: f3:a1:ec:7f:d6:fe:f6:f2:9c:81:83:ca:91:7a:7c:e1:d5:dc: 79:19:ed:8e:9d:b8:31:05:be:73:d4:0a:14:0d:1f:c2:8e:a0: b5:8c:33:85:5a:4b:86:fb:ee:ae:c5:92:e9:da:2f:3b:a9:9a: 1b:75:08:8e:d7:94:b5:92:2d:2f:11:df:f0:0b:89:05:94:4c: 64:42:84:8d:fc:c2:06:ba:ca:a7:e2:59:ba:47:a4:58:42:d9: 28:25:6b:c6:65:19:74:93:3f:cc:fb:a1:eb:9e:d0:2f:b7:f0: ba:59:c1:80:bd:67:3d:23:ff:11:c3:a1:97:ab:62:e4:21:af: 3a:f4:f6:c1:a3:9c:c9:94:d3:b6:6e:43:ef:3f:c3:ca:90:79: c2:00:b0:df:3d:b5:58:05:44:4e:86:94:c5:4f:3f:57:b0:40: 79:36:01:52:be:5e:e7:3b:c4:e9:52:45:c2:8b:99:b3:69:53: b8:eb:4d:cf:4a:ee:89:af:53:8d:fc:86:b2:36:41:27:8d:ad: 8a:93:45:9d:4b:3e:de:88:bf:96:78:00:8b:79:8c:ea:bd:0c: 4f:02:23:2b:fe:0b:11:d6:5f:82:aa:da:e2:db:3c:e1:35:6b: dc:73:b4:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjUxMjA0MjI0MDM4WhcNMjUxMjExMjI0MDM4WjAYMRYwFAYD VQQDEw02OTMyMGRlNi04YjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZ/D7d+bWG095oNeZt6w2w9WnAN/FqkeKdJzI2dzqP6BK9Gvylqp8U2BmtpU fXxpU+UVpr371OQ7vCKO+bbKEad/0xXzxPW3lnOaONBvKRZTdXlKXMQkb8m0nU8R dIYBvc+XuVqUYgGIQfrBiDj2OuoZW4Hpq6UvOZva7eGFUOPX9HV/XTTqExED76O/ O4wYRDYRzkzI+yeWtJLyJjpVenDaemLY63QyEBilbnJIJnkCaFakHp/psegn8t7O Eae74IffDIRsVGSzWSKVAJ2DKtbN33k84ijRovvqP3rKJERpnz8kcbuCnwg8gLnL gqIl1ai3zvi41NNIvH0Dv3LQMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFr87dLg PiwbfdGoumJxKMCvcn4EMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu TWR3dFpLY01ZWnhtazBhZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZAyaDebiNx4TccufrtnDw9I/zoex/1v728pyBg8qRenzh1dx5Ge2O nbgxBb5z1AoUDR/CjqC1jDOFWkuG++6uxZLp2i87qZobdQiO15S1ki0vEd/wC4kF lExkQoSN/MIGusqn4lm6R6RYQtkoJWvGZRl0kz/M+6HrntAvt/C6WcGAvWc9I/8R w6GXq2LkIa869PbBo5zJlNO2bkPvP8PKkHnCALDfPbVYBUROhpTFTz9XsEB5NgFS vl7nO8TpUkXCi5mzaVO4603PSu6Jr1ON/IayNkEnja2Kk0WdSz7eiL+WeACLeYzq vQxPAiMr/gsR1l+Cqtri2zzhNWvcc7Te -----END CERTIFICATE-----Generated at Sat Dec 6 22:43:08 2025 by rpki-client