This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json) Hash identifier: KwqgpKS1pT95x6ZGMupCv8LtQroiDzHrTSORx7BkqTw= Subject key identifier: 59:24:03:D8:CB:D7:C2:20:CB:E2:58:AF:BA:19:59:BB:D4:84:76:DE Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Certificate serial: 3562 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft Manifest number: 3531 Signing time: Sat 20 Dec 2025 14:54:42 +0000 Manifest this update: Sat 20 Dec 2025 14:54:42 +0000 Manifest next update: Sat 27 Dec 2025 14:54:42 +0000 Files and hashes: 1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: xBwMuW/zQNi8Z3PIPC8SmDk+3T/c6JoP3byAB6UQYvo=) 2: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: UllqnXfDL+2VdUTPx8xQ2Za44+cPvkaWdFYKS+C8QQM=) 3: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: ZD0GATgarU5SJf51be/V12br/cDS5vLdtBMxX0BhbhU=) 4: 931C5524175011EB8585CA60C4F9AE02.roa (hash: zSmeOMcR4UTwUq4R32M120QhIdCnmd/G6j8Yf4YDhJ0=) 5: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: lO7bWRMdVQIujCi4o8pQPJbkrtgWtKnNWX6be5e8XsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13666 (0x3562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Validity Not Before: Dec 20 14:54:42 2025 GMT Not After : Dec 27 14:54:42 2025 GMT Subject: CN=6946b8b2-295c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:28:9e:4a:2e:20:98:a7:ed:6f:ca:e9:84:f0: 59:2a:76:08:46:4d:1d:8e:c7:76:2c:f7:e1:f5:ee: e4:26:36:1f:d5:10:05:db:e9:60:5c:07:a2:f0:e2: c1:b0:43:08:5c:a4:3e:56:15:de:ed:ea:79:83:ea: 27:4b:f7:ae:b2:ea:6c:69:ec:b4:0a:21:a0:0a:a9: 72:fc:59:d2:57:2f:c5:db:85:ae:56:9c:fc:a7:16: 6e:47:10:62:06:48:17:74:0c:f4:04:f3:a2:2b:82: 0a:ad:79:3b:d2:d2:09:80:11:a2:9e:b1:d7:e7:90: df:c6:8b:92:fe:8c:72:2c:35:3e:dc:2d:6b:67:71: 48:6d:73:23:f9:cb:d3:4f:ff:b6:26:91:7e:d6:5b: d1:d6:42:51:3f:0f:5c:61:0e:f7:35:06:f8:bd:84: 41:87:d0:5b:d3:69:04:e2:e1:94:73:94:98:cf:73: fc:7f:55:41:dd:80:2b:3b:f0:e5:b3:21:47:fc:e1: 45:39:f9:3a:0a:4e:d3:86:55:0b:9b:f0:aa:2e:91: 34:56:73:23:52:72:38:d7:9e:22:1a:d5:46:4b:f3: a5:32:22:19:eb:3c:70:a3:71:eb:cc:b8:89:1f:55: d7:1f:4a:20:7e:76:d4:04:fd:93:76:81:42:81:5e: 63:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:24:03:D8:CB:D7:C2:20:CB:E2:58:AF:BA:19:59:BB:D4:84:76:DE X509v3 Authority Key Identifier: keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:4f:fb:55:8d:f5:d7:ef:85:6f:40:f1:79:bf:69:4f:e0:f6: 58:7d:64:b1:00:fc:57:e2:86:94:30:44:e3:c0:99:25:72:41: 8c:9d:ac:13:ba:38:1d:67:a9:05:fd:40:bf:b6:e3:eb:8f:45: 98:e2:5d:ce:31:13:c7:cd:af:7c:de:72:e9:73:d0:4a:ce:05: a6:eb:33:ea:d4:72:65:a4:de:56:40:87:62:cb:23:5c:1b:4a: cc:7c:1d:2a:f5:93:42:f2:4a:47:fb:eb:f3:78:7e:c9:41:2b: e7:63:d6:84:e0:04:70:5c:5b:1f:51:34:c5:ac:f2:b2:d6:93: e9:6c:14:7f:2c:7a:f9:fe:5c:ca:7f:b2:bb:88:9b:55:95:f5: 00:05:98:68:47:21:45:8f:23:e1:7c:fa:e5:f2:09:4c:3b:7e: 3d:e3:28:6d:5d:af:54:1d:c6:3e:91:8a:14:bb:a5:98:81:aa: de:34:9a:0f:f7:e1:d9:8c:b7:2d:54:e0:0f:89:87:aa:a4:69: 56:70:40:cb:7a:6a:3b:43:b3:91:0d:45:36:10:95:fe:b5:7a: 41:ff:7f:65:7d:86:ce:6d:9f:df:8b:de:08:f6:3c:8a:ed:1a: 09:a2:ea:53:36:6c:d5:1f:d1:3f:05:d1:0b:cb:f3:e3:14:74: f0:3e:08:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZEQkExMTAvBgNVBAUTKEZFRjkxNDNCMTYxNkNEQTExNTlCNTlFQ0Q1RTM5OTNF OTgyNjU0RkUwHhcNMjUxMjIwMTQ1NDQyWhcNMjUxMjI3MTQ1NDQyWjAYMRYwFAYD VQQDDA02OTQ2YjhiMi0yOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9SieSi4gmKftb8rphPBZKnYIRk0djsd2LPfh9e7kJjYf1RAF2+lgXAei8OLB sEMIXKQ+VhXe7ep5g+onS/eusupsaey0CiGgCqly/FnSVy/F24WuVpz8pxZuRxBi BkgXdAz0BPOiK4IKrXk70tIJgBGinrHX55DfxouS/oxyLDU+3C1rZ3FIbXMj+cvT T/+2JpF+1lvR1kJRPw9cYQ73NQb4vYRBh9Bb02kE4uGUc5SYz3P8f1VB3YArO/Dl syFH/OFFOfk6Ck7ThlULm/CqLpE0VnMjUnI4154iGtVGS/OlMiIZ6zxwo3HrzLiJ H1XXH0ogfnbUBP2TdoFCgV5jKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkkA9jL 18Igy+JYr7oZWbvUhHbeMB8GA1UdIwQYMBaAFP75FDsWFs2hFZtZ7NXjmT6YJlT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkRCQS8wNzc4NTFBNDFE OUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3phRVZtMW5zMWVPWlBwZ21W UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192a1VPeFlXemFFVm0xbnMxZU9aUHBnbVZQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkRCQS8wNzc4NTFBNDFEOUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3ph RVZtMW5zMWVPWlBwZ21WUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgT/tVjfXX74VvQPF5v2lP4PZYfWSxAPxX4oaUMETjwJklckGMnawT ujgdZ6kF/UC/tuPrj0WY4l3OMRPHza983nLpc9BKzgWm6zPq1HJlpN5WQIdiyyNc G0rMfB0q9ZNC8kpH++vzeH7JQSvnY9aE4ARwXFsfUTTFrPKy1pPpbBR/LHr5/lzK f7K7iJtVlfUABZhoRyFFjyPhfPrl8glMO3494yhtXa9UHcY+kYoUu6WYgareNJoP 9+HZjLctVOAPiYeqpGlWcEDLemo7Q7ORDUU2EJX+tXpB/39lfYbObZ/fi94I9jyK 7RoJoupTNmzVH9E/BdELy/PjFHTwPgjI -----END CERTIFICATE-----Generated at Sun Dec 21 03:25:04 2025 by rpki-client