This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft File: VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft (raw, json) Hash identifier: C6m4SWwO3jZl6OZMcXq1I6KLJX01z5bbkQ7G5kRxLe4= Subject key identifier: A0:85:88:34:0D:BD:4C:BE:34:36:7A:08:21:99:AB:4D:23:B3:5B:89 Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE Certificate issuer: /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE Certificate serial: 047C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft Manifest number: 0478 Signing time: Wed 31 Dec 2025 23:35:28 +0000 Manifest this update: Wed 31 Dec 2025 23:35:28 +0000 Manifest next update: Wed 07 Jan 2026 23:35:28 +0000 Files and hashes: 1: VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl (hash: YgZax9t5Mix89ftbLwiQzG7Q97qe2itrlFkGJHS0Q80=) 2: 8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (hash: +VP5NY/+4Z/8NphSit3psl/B3s8Rh2QC3KRRxPvmIp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 23:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBD2, serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE Validity Not Before: Dec 31 23:35:28 2025 GMT Not After : Jan 7 23:35:28 2026 GMT Subject: CN=6955b340-5a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:b4:24:cb:c2:1a:68:f8:59:c5:e3:d7:d2:fa: 7c:58:11:77:ae:43:5f:55:18:7c:4e:4d:3e:6b:4b: c8:7f:88:d5:ea:88:4d:38:b0:88:5f:66:38:bb:7d: 7c:34:b2:98:7d:ac:ed:3f:95:03:ac:47:cc:80:f0: d6:b4:a5:5d:d7:4f:4d:b6:9c:77:60:73:4e:4a:db: 07:31:70:a7:b7:c0:11:84:aa:77:03:ab:59:72:81: 5a:d5:83:59:c5:d9:02:13:49:7e:c7:34:78:79:3f: 68:ac:bc:ac:5c:f9:a8:95:1f:61:2d:c2:8e:ae:7b: c2:6e:2e:56:d7:45:6f:a3:aa:6d:8c:e3:89:14:e6: 5e:6e:c6:d2:ea:8e:86:9b:91:ca:42:3a:c9:16:f5: 1c:63:fc:ee:ac:74:94:a9:b6:15:49:d8:e2:ba:af: a6:f9:9e:6f:34:2f:d5:b3:b4:46:18:18:fd:77:4d: dc:1e:e9:37:db:b0:33:53:96:7e:97:55:57:f3:4e: 9d:c4:6a:b9:c0:0c:2a:2c:34:4c:30:87:55:2e:93: f4:39:35:36:65:d0:29:f7:2e:5d:f6:7d:1d:d2:20: 3d:63:89:2b:6d:d0:c8:fb:f2:e7:19:41:17:82:00: 2d:96:be:75:96:99:51:b7:2a:27:08:ad:e8:d3:6d: 04:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:85:88:34:0D:BD:4C:BE:34:36:7A:08:21:99:AB:4D:23:B3:5B:89 X509v3 Authority Key Identifier: keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2c:b8:9c:18:00:be:56:da:cc:03:10:6e:57:e4:63:0f:58: ca:ea:00:33:03:66:f9:08:02:dd:3f:78:34:77:8f:11:01:c0: 0e:93:0c:c0:75:77:5e:dd:24:e8:c6:a2:12:36:b2:c4:82:0f: 13:9f:0f:0f:8a:cf:11:04:97:a3:02:4c:75:5e:2c:87:96:fc: 5a:06:09:c1:31:61:40:c6:13:77:bf:9c:17:c1:3d:c8:b4:a2: 23:93:90:3f:c4:bd:26:97:61:88:c0:8a:0f:06:39:48:24:1f: ca:4e:76:86:e7:1f:d4:51:41:f3:93:55:eb:17:4b:7f:07:c9: 75:7e:c3:1e:0b:6e:16:77:3f:6a:d2:46:4c:72:46:4f:21:42: 67:d4:8b:cb:42:09:ba:72:0f:e1:ab:80:49:15:e4:40:f7:ad: 42:ad:7f:4b:e5:c7:b2:d4:b9:bd:87:38:63:bc:20:8c:6d:5b: 40:aa:7e:c8:33:2e:9f:fe:0b:32:c7:ee:2b:17:42:bc:85:49: a7:d6:2e:05:19:c5:3f:dd:71:eb:e8:f1:ca:af:9c:15:9d:01: b6:72:98:a4:a0:40:5b:b0:2e:a3:b9:1e:05:6a:eb:5f:f4:42: bb:d8:3e:5c:1d:54:95:c3:de:26:93:f7:25:28:51:9a:a3:33: cf:43:55:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCRDIxMTAvBgNVBAUTKDU1RTQ4NTE4OEM1QzlEMkUyNEM4MzQ1Qzk3QkMzNDYy NzIxQzk4Q0UwHhcNMjUxMjMxMjMzNTI4WhcNMjYwMTA3MjMzNTI4WjAYMRYwFAYD VQQDDA02OTU1YjM0MC01YTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/rQky8IaaPhZxePX0vp8WBF3rkNfVRh8Tk0+a0vIf4jV6ohNOLCIX2Y4u318 NLKYfaztP5UDrEfMgPDWtKVd109Ntpx3YHNOStsHMXCnt8ARhKp3A6tZcoFa1YNZ xdkCE0l+xzR4eT9orLysXPmolR9hLcKOrnvCbi5W10Vvo6ptjOOJFOZebsbS6o6G m5HKQjrJFvUcY/zurHSUqbYVSdjiuq+m+Z5vNC/Vs7RGGBj9d03cHuk327AzU5Z+ l1VX806dxGq5wAwqLDRMMIdVLpP0OTU2ZdAp9y5d9n0d0iA9Y4krbdDI+/LnGUEX ggAtlr51lplRtyonCK3o020EbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCFiDQN vUy+NDZ6CCGZq00js1uJMB8GA1UdIwQYMBaAFFXkhRiMXJ0uJMg0XJe8NGJyHJjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJEMi82RDc0OTc4QzZG NTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25TNGt5RFJjbDd3MFluSWNt TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZlU0ZHSXhjblM0a3lEUmNsN3cwWW5JY21NNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJEMi82RDc0OTc4QzZGNTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25T NGt5RFJjbDd3MFluSWNtTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaLLicGAC+VtrMAxBuV+RjD1jK6gAzA2b5CALdP3g0d48RAcAOkwzA dXde3SToxqISNrLEgg8Tnw8Pis8RBJejAkx1XiyHlvxaBgnBMWFAxhN3v5wXwT3I tKIjk5A/xL0ml2GIwIoPBjlIJB/KTnaG5x/UUUHzk1XrF0t/B8l1fsMeC24Wdz9q 0kZMckZPIUJn1IvLQgm6cg/hq4BJFeRA961CrX9L5cey1Lm9hzhjvCCMbVtAqn7I My6f/gsyx+4rF0K8hUmn1i4FGcU/3XHr6PHKr5wVnQG2cpikoEBbsC6juR4Fautf 9EK72D5cHVSVw94mk/clKFGaozPPQ1UL -----END CERTIFICATE-----Generated at Thu Jan 1 11:02:51 2026 by rpki-client