This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft File: vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json) Hash identifier: TFJ3NxFuBe37l7AfxVB+f7ew7AUdsg0gUmD/wR8piKU= Subject key identifier: 4B:32:53:E0:A3:D0:88:EF:89:64:48:B1:47:4C:24:54:2C:AB:C8:27 Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Certificate serial: 0CDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft Manifest number: 0CD3 Signing time: Wed 31 Dec 2025 17:54:33 +0000 Manifest this update: Wed 31 Dec 2025 17:54:33 +0000 Manifest next update: Wed 07 Jan 2026 17:54:33 +0000 Files and hashes: 1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: JW52ycgXUr3esCYhEvo1YQT0AxT9yjrbosdiXp7ej9M=) 2: 8325B5147FE911F09A568E85C4F9AE02.roa (hash: v3/g5fOu1I3Xt9XyiRKqp60C0Htsc/EEKv6CYurACO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 17:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3292 (0xcdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Validity Not Before: Dec 31 17:54:33 2025 GMT Not After : Jan 7 17:54:33 2026 GMT Subject: CN=69556359-7dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f8:a9:bf:5b:8d:a9:93:3b:b2:56:35:6f:c2: e9:9b:01:05:70:ce:99:59:a8:02:27:c0:c5:61:cd: b2:0e:68:65:7a:1c:66:75:89:98:4d:7c:c6:24:9e: b0:bf:98:f9:cc:aa:df:d5:02:ef:d3:6d:b3:fb:6a: 3f:42:ec:fa:f6:62:97:19:b8:62:14:b2:b6:c6:25: 3f:dd:2a:71:63:14:b1:5c:21:26:58:66:11:de:5c: 13:ed:ce:46:6c:ac:42:74:86:f1:f2:24:b8:b4:e6: 69:71:e6:b2:74:e6:d9:5a:c8:31:54:ed:c4:89:4a: 75:89:3e:eb:17:5e:78:37:18:22:f6:72:40:f9:59: b6:d6:d6:18:9d:87:67:4f:d7:fa:57:93:06:c6:12: 94:73:10:b8:e9:a9:e8:d5:27:b1:6c:c3:df:6e:ee: a4:49:81:57:21:38:3f:02:d1:00:30:f9:20:cc:e2: 5c:ae:a6:78:b7:7b:45:17:5b:6a:ed:45:b7:55:8a: f8:ac:69:f7:2c:6d:48:4d:ce:23:9b:a9:0d:0a:2d: 31:72:3e:8c:cb:db:db:9b:87:42:6e:72:a2:6f:f2: b9:d9:1c:53:e4:e3:8f:3b:0f:f4:8c:8f:b5:b9:15: 50:c1:f2:ab:2a:c0:c7:67:8a:1d:a7:48:01:ab:0e: 7a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:32:53:E0:A3:D0:88:EF:89:64:48:B1:47:4C:24:54:2C:AB:C8:27 X509v3 Authority Key Identifier: keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:8b:8a:fd:2e:4e:22:b2:dc:e3:3c:f4:10:ff:cc:7a:63:12: 35:bc:05:98:a8:b4:e5:b4:f1:be:8a:d2:6d:e8:56:27:86:d6: bd:ce:8b:0c:b8:b5:af:2d:7c:ad:dc:97:78:aa:1d:c7:fa:2a: 97:cf:b9:10:60:3d:6d:f7:57:a5:b6:89:f8:4e:13:1c:32:23: 36:27:1e:50:83:41:98:0e:30:af:73:72:60:68:b5:86:cd:7d: b8:08:e6:5d:96:d9:98:21:0e:70:8b:e8:3c:fb:bd:ad:d5:c3: 07:3d:aa:58:7c:60:d7:eb:d8:74:58:50:8f:f1:b5:a8:20:ca: 5c:7d:14:ae:76:b3:1d:b1:68:d2:63:86:11:62:56:c1:bd:3a: be:7c:33:d3:c1:2f:13:22:5f:2e:72:8e:22:38:e7:37:03:b4: 55:e5:9c:76:93:13:67:06:48:f4:db:e8:ab:31:c7:ea:76:a0: 4c:b7:06:7b:eb:e8:2c:79:a5:27:31:7e:58:9e:c7:86:fa:d5: ce:de:a8:c3:d0:d1:cb:29:00:0b:44:3d:dd:0e:dc:71:a1:03: 51:48:1f:da:19:90:33:3b:7e:e8:31:d3:f5:66:d9:cf:11:85: 2b:ca:e4:f6:f4:e0:6a:32:d0:ea:1d:b9:8b:a9:12:0c:af:35: f3:3f:f9:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0ODkxMTAvBgNVBAUTKEJDODYwN0JDQ0U3RDVCRDRFREI5MThDREUxQjczNDVC ODFFNkFEMUQwHhcNMjUxMjMxMTc1NDMzWhcNMjYwMTA3MTc1NDMzWjAYMRYwFAYD VQQDDA02OTU1NjM1OS03ZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPipv1uNqZM7slY1b8LpmwEFcM6ZWagCJ8DFYc2yDmhlehxmdYmYTXzGJJ6w v5j5zKrf1QLv022z+2o/Quz69mKXGbhiFLK2xiU/3SpxYxSxXCEmWGYR3lwT7c5G bKxCdIbx8iS4tOZpceaydObZWsgxVO3EiUp1iT7rF154Nxgi9nJA+Vm21tYYnYdn T9f6V5MGxhKUcxC46ano1SexbMPfbu6kSYFXITg/AtEAMPkgzOJcrqZ4t3tFF1tq 7UW3VYr4rGn3LG1ITc4jm6kNCi0xcj6My9vbm4dCbnKib/K52RxT5OOPOw/0jI+1 uRVQwfKrKsDHZ4odp0gBqw56fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsyU+Cj 0IjviWRIsUdMJFQsq8gnMB8GA1UdIwQYMBaAFLyGB7zOfVvU7bkYzeG3NFuB5q0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjQ4OS8wQjM4NzlDQUZG OUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5VHR1UmpONGJjMFc0SG1y UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWUh2TTU5VzlUdHVSak40YmMwVzRIbXJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjQ4OS8wQjM4NzlDQUZGOUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5 VHR1UmpONGJjMFc0SG1yUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5i4r9Lk4istzjPPQQ/8x6YxI1vAWYqLTltPG+itJt6FYnhta9zosM uLWvLXyt3Jd4qh3H+iqXz7kQYD1t91elton4ThMcMiM2Jx5Qg0GYDjCvc3JgaLWG zX24COZdltmYIQ5wi+g8+72t1cMHPapYfGDX69h0WFCP8bWoIMpcfRSudrMdsWjS Y4YRYlbBvTq+fDPTwS8TIl8uco4iOOc3A7RV5Zx2kxNnBkj02+irMcfqdqBMtwZ7 6+gseaUnMX5YnseG+tXO3qjD0NHLKQALRD3dDtxxoQNRSB/aGZAzO37oMdP1ZtnP EYUryuT29OBqMtDqHbmLqRIMrzXzP/k8 -----END CERTIFICATE-----Generated at Fri Jan 2 14:50:21 2026 by rpki-client