This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json) Hash identifier: ++MW4t/scUbi2A5ppt7PaB3XqEl8o2b2rnd11cIy51o= Subject key identifier: 22:33:27:3D:A0:D5:20:6D:88:AD:79:64:AF:01:77:F1:8D:75:82:84 Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Certificate serial: 07D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft Manifest number: 07BD Signing time: Mon 22 Dec 2025 20:47:28 +0000 Manifest this update: Mon 22 Dec 2025 20:47:27 +0000 Manifest next update: Mon 29 Dec 2025 20:47:27 +0000 Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: JOLhyF0yEZtZFJVZBCYbd4+04EcPMZ0bqCLnmSESQKc=) 2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: TcpChTsBYQR53TAci1Cu49H66zJAUKzrxZhCpAIeCNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2002 (0x7d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Validity Not Before: Dec 22 20:47:27 2025 GMT Not After : Dec 29 20:47:27 2025 GMT Subject: CN=6949ae60-7068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:f5:38:65:f6:5f:95:b5:6e:11:8a:6a:b2: 20:55:ec:b6:fd:9f:ce:e2:82:bb:ce:f3:4f:b8:76: e9:47:5b:1d:92:f3:60:53:ec:00:a0:ac:74:fc:7a: 04:57:df:cb:26:a7:20:18:d7:93:99:09:3c:c3:ef: 69:e6:89:e6:9f:b2:64:d4:b8:1c:9a:b1:7c:ca:db: ef:bc:bb:f8:1b:4c:c7:d9:50:9b:19:d5:61:10:95: b3:9e:d7:50:e4:d4:54:b5:3b:15:fa:27:bb:43:34: 7d:69:59:1e:50:b1:c3:83:81:69:f7:2e:61:d4:db: bb:35:9e:47:db:e5:4d:1c:06:10:25:25:29:b1:18: d9:19:34:6a:18:f0:49:1d:91:f7:73:77:9d:b0:81: ce:c3:e0:9d:63:0b:89:c6:23:84:ee:84:d7:ba:0d: 18:a5:6c:b7:2b:1d:1d:fd:de:ab:69:f6:8e:37:dd: 1e:28:05:03:ad:66:3d:fc:06:17:2e:af:fc:b8:d2: f9:ce:9f:a0:f4:91:44:d5:c1:61:98:91:4d:ec:83: 9d:63:3f:ac:04:c9:c0:ed:72:f6:d6:be:28:52:be: ba:2a:7a:17:cd:be:ca:20:da:da:d4:c0:46:fc:13: 3f:66:9e:9b:58:61:b3:b3:ee:5b:db:2f:f5:1d:ff: c4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:33:27:3D:A0:D5:20:6D:88:AD:79:64:AF:01:77:F1:8D:75:82:84 X509v3 Authority Key Identifier: keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:85:92:9a:28:a6:68:70:43:0b:f5:ca:62:f3:a2:2c:9a:9c: b1:8c:49:83:f6:5d:5e:1d:63:1e:01:be:5e:3e:9a:9a:c1:e9: 02:7b:ba:e5:fe:ff:62:92:60:42:b1:e1:62:05:c5:04:b8:f8: 35:b4:29:79:c3:bc:80:cf:18:ae:72:d6:1b:05:ac:61:1d:f9: a6:f0:ea:0d:20:d1:a6:65:3d:5b:f9:cf:d0:1e:86:32:a5:19: bf:ac:cf:d1:c5:6a:32:f2:3f:98:b4:d6:d6:60:fa:26:f5:d8: 03:68:03:72:ec:9e:8c:92:11:cd:4c:3f:2c:20:9c:c0:d8:da: 76:07:da:38:70:e0:09:42:fc:6c:1c:91:c4:0b:2e:0e:09:c9: 1c:09:93:ae:d5:4f:97:b5:b8:17:8e:5b:29:85:2c:15:bb:d7: 6d:dd:79:6e:f0:9a:27:65:0c:16:ef:94:7c:cd:7a:a3:e0:3d: cd:bc:ba:10:74:83:92:d4:25:8e:13:82:60:a6:03:0f:66:1f: 03:4b:c3:79:a1:19:c6:8d:a7:0c:8d:e9:4d:f1:f3:84:3c:35: 60:fa:d7:0f:be:1b:1f:f3:d8:fc:3e:e2:77:41:b7:4e:03:bd: ed:1e:c2:40:22:47:c6:32:01:de:e0:5a:b3:da:e1:30:ae:39: c0:d1:8a:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDU0MEREQUM2NjhEOEI1MEM5NjYwNTcxMjE5NUE5ODhB MUNBRDlFM0YwHhcNMjUxMjIyMjA0NzI3WhcNMjUxMjI5MjA0NzI3WjAYMRYwFAYD VQQDDA02OTQ5YWU2MC03MDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZn1OGX2X5W1bhGKarIgVey2/Z/O4oK7zvNPuHbpR1sdkvNgU+wAoKx0/HoE V9/LJqcgGNeTmQk8w+9p5onmn7Jk1LgcmrF8ytvvvLv4G0zH2VCbGdVhEJWzntdQ 5NRUtTsV+ie7QzR9aVkeULHDg4Fp9y5h1Nu7NZ5H2+VNHAYQJSUpsRjZGTRqGPBJ HZH3c3edsIHOw+CdYwuJxiOE7oTXug0YpWy3Kx0d/d6rafaON90eKAUDrWY9/AYX Lq/8uNL5zp+g9JFE1cFhmJFN7IOdYz+sBMnA7XL21r4oUr66KnoXzb7KINra1MBG /BM/Zp6bWGGzs+5b2y/1Hf/E5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIzJz2g 1SBtiK15ZK8Bd/GNdYKEMB8GA1UdIwQYMBaAFFQN2sZo2LUMlmBXEhlamIocrZ4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi8wOTQ0ODlGRTMy Q0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRReVdZRmNTR1ZxWWloeXRu ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBM2F4bWpZdFF5V1lGY1NHVnFZaWh5dG5qOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi8wOTQ0ODlGRTMyQ0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRR eVdZRmNTR1ZxWWloeXRuajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2hZKaKKZocEML9cpi86IsmpyxjEmD9l1eHWMeAb5ePpqawekCe7rl /v9ikmBCseFiBcUEuPg1tCl5w7yAzxiuctYbBaxhHfmm8OoNINGmZT1b+c/QHoYy pRm/rM/RxWoy8j+YtNbWYPom9dgDaANy7J6MkhHNTD8sIJzA2Np2B9o4cOAJQvxs HJHECy4OCckcCZOu1U+XtbgXjlsphSwVu9dt3Xlu8JonZQwW75R8zXqj4D3NvLoQ dIOS1CWOE4JgpgMPZh8DS8N5oRnGjacMjelN8fOEPDVg+tcPvhsf89j8PuJ3QbdO A73tHsJAIkfGMgHe4Fqz2uEwrjnA0YoU -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:17 2025 by rpki-client