This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft File: vpHyHHoLwGQ389tbIUIIyHdO680.mft (raw, json) Hash identifier: NgjDBSaTWQ6r3mPOFF80LsOfKTAWBIjZjldL9vdyYKs= Subject key identifier: 62:3C:B7:8A:1B:A4:40:4E:84:2E:1D:CF:6F:51:44:B0:BF:9B:C3:0B Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD Certificate issuer: /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft Manifest number: 017C Signing time: Sun 21 Dec 2025 02:59:29 +0000 Manifest this update: Sun 21 Dec 2025 02:59:28 +0000 Manifest next update: Sun 28 Dec 2025 02:59:28 +0000 Files and hashes: 1: vpHyHHoLwGQ389tbIUIIyHdO680.crl (hash: acEWbmKbMsWlG9YmyfbNGaeqzSH6sDT8oTMDJCioWZg=) 2: F2AB0C4A68C011EFB9196160C4F9AE02.roa (hash: DaPiCEmlAJvbaPsIVw3SLkMWbmEd02jwt+sb94Y5y+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CEBD, serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Validity Not Before: Dec 21 02:59:28 2025 GMT Not After : Dec 28 02:59:28 2025 GMT Subject: CN=69476291-844a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:37:63:ed:7a:d0:0a:2d:17:1b:94:a0:57:75: 2f:f0:28:ce:27:c2:74:98:72:aa:46:0a:87:35:0d: 7d:72:47:c3:98:00:c8:16:d1:b3:98:da:5e:77:f1: 9d:11:20:1d:ce:4e:80:24:f9:e1:00:78:78:9c:9f: ea:c8:dd:26:43:10:2d:54:e9:9a:80:3b:09:7a:55: e1:50:c3:4f:85:d1:b1:bb:45:11:dd:a4:d7:c9:73: 14:92:ac:06:66:cb:e4:29:89:c9:80:b9:d8:39:93: 80:b0:92:db:8e:6e:4b:c5:1d:91:7b:b3:0f:81:18: 62:f8:1d:20:68:df:86:c9:ae:c5:79:ff:a4:63:ef: ae:57:a3:71:7c:a5:0c:80:19:77:03:b7:fa:2b:41: 15:1c:36:de:0d:8e:c8:5b:bc:30:57:39:fd:6b:c4: 1e:6e:d3:05:1d:93:29:fa:1a:46:4e:ed:18:b6:ed: 0b:02:6f:d1:ec:b8:99:cb:49:8b:c9:fd:30:0b:cc: 28:85:65:fc:38:ad:2f:f3:57:e7:5c:e3:ad:d5:32: ce:76:ae:64:c2:81:9b:c3:b0:69:dd:3c:f2:a7:b7: 9e:86:eb:ca:6c:83:ae:a1:f8:6e:bf:cb:f6:6d:85: bb:4e:91:30:8b:0f:cf:ba:86:7e:24:2a:38:80:72: 40:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3C:B7:8A:1B:A4:40:4E:84:2E:1D:CF:6F:51:44:B0:BF:9B:C3:0B X509v3 Authority Key Identifier: keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:9b:c9:50:e7:b5:cc:fa:03:56:cc:68:d8:f8:8b:62:95:3e: c1:0e:c2:a4:e8:37:94:7a:e2:e6:32:52:64:bf:4b:88:dc:84: aa:3b:c9:84:3f:85:cf:87:8f:9d:d5:10:67:f0:75:67:6d:ba: ce:cc:3b:b0:5f:62:b3:e9:85:a2:e3:2a:03:2c:b6:43:80:2f: f6:22:92:95:d5:40:e5:01:cc:74:58:eb:37:e1:b4:c9:ef:cc: 96:b3:ab:f1:65:01:e9:95:91:ad:6b:89:e5:9c:02:aa:4f:09: 9c:94:dd:2f:94:78:20:d9:93:93:99:1d:70:bc:0e:12:bd:5c: 83:dd:2f:2e:c6:30:5d:2d:fd:44:8b:54:8a:dd:1f:03:43:67: 92:80:bc:79:c2:b2:6c:8f:b2:a9:37:63:a0:b2:f8:d6:3d:64: be:fc:90:95:4c:99:e5:61:62:bd:14:1f:77:19:78:e1:27:80: f8:b0:e5:f5:c0:9a:a5:40:10:79:9f:05:7f:c8:d7:cf:45:7b: b8:08:36:47:b9:25:3d:8b:23:53:93:c2:df:d3:b4:85:1d:23: 18:a2:d1:3d:cb:a2:d6:ec:4f:14:43:b5:e0:48:e1:84:a9:cf: a0:1f:42:82:72:df:bf:38:00:13:ce:20:c6:bf:d6:87:c5:92: f1:64:ac:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFQkQxMTAvBgNVBAUTKEJFOTFGMjFDN0EwQkMwNjQzN0YzREI1QjIxNDIwOEM4 Nzc0RUVCQ0QwHhcNMjUxMjIxMDI1OTI4WhcNMjUxMjI4MDI1OTI4WjAYMRYwFAYD VQQDDA02OTQ3NjI5MS04NDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzdj7XrQCi0XG5SgV3Uv8CjOJ8J0mHKqRgqHNQ19ckfDmADIFtGzmNped/Gd ESAdzk6AJPnhAHh4nJ/qyN0mQxAtVOmagDsJelXhUMNPhdGxu0UR3aTXyXMUkqwG ZsvkKYnJgLnYOZOAsJLbjm5LxR2Re7MPgRhi+B0gaN+Gya7Fef+kY++uV6NxfKUM gBl3A7f6K0EVHDbeDY7IW7wwVzn9a8QebtMFHZMp+hpGTu0Ytu0LAm/R7LiZy0mL yf0wC8wohWX8OK0v81fnXOOt1TLOdq5kwoGbw7Bp3Tzyp7eehuvKbIOuofhuv8v2 bYW7TpEwiw/PuoZ+JCo4gHJA+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGI8t4ob pEBOhC4dz29RRLC/m8MLMB8GA1UdIwQYMBaAFL6R8hx6C8BkN/PbWyFCCMh3TuvN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VCRC9DQ0Q4MTQyODk5 QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdHUTM4OXRiSVVJSXlIZE82 ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwSHlISG9Md0dRMzg5dGJJVUlJeUhkTzY4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VCRC9DQ0Q4MTQyODk5QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdH UTM4OXRiSVVJSXlIZE82ODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1m8lQ57XM+gNWzGjY+ItilT7BDsKk6DeUeuLmMlJkv0uI3ISqO8mE P4XPh4+d1RBn8HVnbbrOzDuwX2Kz6YWi4yoDLLZDgC/2IpKV1UDlAcx0WOs34bTJ 78yWs6vxZQHplZGta4nlnAKqTwmclN0vlHgg2ZOTmR1wvA4SvVyD3S8uxjBdLf1E i1SK3R8DQ2eSgLx5wrJsj7KpN2OgsvjWPWS+/JCVTJnlYWK9FB93GXjhJ4D4sOX1 wJqlQBB5nwV/yNfPRXu4CDZHuSU9iyNTk8Lf07SFHSMYotE9y6LW7E8UQ7XgSOGE qc+gH0KCct+/OAATziDGv9aHxZLxZKym -----END CERTIFICATE-----Generated at Sun Dec 21 16:01:23 2025 by rpki-client