This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft File: VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft (raw, json) Hash identifier: wVOHxU7wMUOwF8pcuCWWZpj3Gph8aGF5bdf7H/jRPkw= Subject key identifier: FB:7D:33:31:E7:E0:C2:2D:3A:5D:22:D6:62:FA:79:B5:57:F5:23:1D Authority key identifier: 55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61 Certificate issuer: /CN=A913E614/serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft Manifest number: 19 Signing time: Fri 19 Dec 2025 06:49:27 +0000 Manifest this update: Fri 19 Dec 2025 06:49:27 +0000 Manifest next update: Fri 26 Dec 2025 06:49:27 +0000 Files and hashes: 1: VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl (hash: T/sVFmd3GltbeBO3CM6hhmm/X0uB+dXWuZPNq6kZccM=) 2: 390B7BFAC62311F092B8183CC4F9AE02.roa (hash: IttW8lnhM9U/w4yhzUeGX0DYIjEGvnTp18lKA3bXa/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E614, serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661 Validity Not Before: Dec 19 06:49:27 2025 GMT Not After : Dec 26 06:49:27 2025 GMT Subject: CN=6944f577-a4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:97:7c:1d:61:8b:5d:67:3d:83:77:88:a4: 1c:66:98:63:e5:89:21:a0:46:9b:79:7b:46:41:e7: 56:da:98:20:26:43:fd:1d:f8:c1:ef:45:69:b0:05: 80:01:51:a3:7d:a2:e2:ec:73:84:7d:e0:75:94:ba: 1d:80:7c:0d:6e:20:71:8c:11:32:56:37:a9:71:8f: f4:44:0d:9b:8a:bb:f9:cc:fa:2c:6b:fc:a2:56:8c: 63:9e:ee:c8:b1:0a:d6:e6:a4:c7:83:78:29:5e:16: 03:d1:9a:2b:85:51:cd:92:62:bd:c8:26:fd:39:fe: 3a:d5:ec:33:d7:35:a5:cd:e8:16:4d:02:52:20:57: 42:8b:ae:65:81:05:91:91:7d:85:bd:08:25:1f:f0: da:91:dd:97:02:22:07:ef:d0:12:5c:4e:d6:fd:b8: e4:c3:9c:bf:28:2c:8f:94:3b:10:45:ef:ca:79:34: 71:f1:6c:86:22:09:2b:e8:78:29:2f:16:89:5a:1a: f5:53:00:9c:49:02:d1:35:4b:bc:98:fe:56:6b:58: 24:be:92:90:07:19:c7:40:11:cc:00:3c:e0:08:2a: e1:92:9c:31:db:37:00:80:00:57:3d:1a:ce:91:d7: 07:99:f7:14:4a:b3:23:cd:01:a7:f9:a3:91:56:b7: a7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7D:33:31:E7:E0:C2:2D:3A:5D:22:D6:62:FA:79:B5:57:F5:23:1D X509v3 Authority Key Identifier: keyid:55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7e:f1:55:ad:aa:a5:98:83:69:aa:97:d8:62:1f:45:73:9d: 86:3c:60:3e:7c:5c:b1:4d:b6:99:a2:13:00:f2:4b:26:0c:a5: 9f:af:d5:3e:2b:ea:f3:10:89:9a:c4:61:da:e7:0c:91:5b:50: d5:9e:b8:8a:3e:eb:02:39:ca:4d:3b:61:46:7b:51:71:00:74: 6b:3b:97:df:c2:71:3c:d0:e7:c8:f0:a6:4e:b7:88:cc:d3:62: 9e:fe:0b:f1:39:be:e2:1c:0a:a6:ad:a4:25:4d:dc:92:92:be: db:b3:a4:d8:9e:b1:89:0b:f4:b2:ca:d7:23:e8:0f:85:9c:07: c3:7c:99:04:7f:0a:3a:b8:df:9b:82:ef:b5:55:f6:81:d4:95: 6c:df:7d:b2:3c:0d:e6:35:3d:d4:cd:0a:4f:1b:99:fd:78:2d: ea:16:fb:63:7b:0a:a0:df:36:09:60:35:9d:b0:72:9f:0b:4a: cb:b2:81:f2:23:7d:b8:8e:5a:0d:b4:7f:c0:aa:4c:eb:6e:62: ef:e0:58:2d:33:53:2a:5d:9c:ef:1c:69:99:20:34:b4:4b:50: 87:15:30:02:3e:dd:c7:6c:8e:af:23:83:96:df:f1:9b:36:44: cc:03:79:93:a5:f7:f9:38:ed:8b:a5:c8:16:28:67:f8:cc:e0: 2b:b5:31:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYxNDExMC8GA1UEBRMoNTU3M0M1NjhBRTAxNDgxNEQxQjRERUFGNjhGQTQ2NEY0 OTUyMzY2MTAeFw0yNTEyMTkwNjQ5MjdaFw0yNTEyMjYwNjQ5MjdaMBgxFjAUBgNV BAMMDTY5NDRmNTc3LWE0ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2wJd8HWGLXWc9g3eIpBxmmGPliSGgRpt5e0ZB51bamCAmQ/0d+MHvRWmwBYAB UaN9ouLsc4R94HWUuh2AfA1uIHGMETJWN6lxj/REDZuKu/nM+ixr/KJWjGOe7six CtbmpMeDeCleFgPRmiuFUc2SYr3IJv05/jrV7DPXNaXN6BZNAlIgV0KLrmWBBZGR fYW9CCUf8NqR3ZcCIgfv0BJcTtb9uOTDnL8oLI+UOxBF78p5NHHxbIYiCSvoeCkv FolaGvVTAJxJAtE1S7yY/lZrWCS+kpAHGcdAEcwAPOAIKuGSnDHbNwCAAFc9Gs6R 1weZ9xRKsyPNAaf5o5FWt6fxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+30zMefg wi06XSLWYvp5tVf1Ix0wHwYDVR0jBBgwFoAUVXPFaK4BSBTRtN6vaPpGT0lSNmEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjE0LzJGRDkwMEUwQzNB MTExRjA5QjFCQzMzOUM0RjlBRTAyL1ZYUEZhSzRCU0JUUnRONnZhUHBHVDBsU05t RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVlhQRmFLNEJTQlRSdE42dmFQcEdUMGxTTm1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NjE0LzJGRDkwMEUwQzNBMTExRjA5QjFCQzMzOUM0RjlBRTAyL1ZYUEZhSzRCU0JU UnRONnZhUHBHVDBsU05tRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG1+8VWtqqWYg2mql9hiH0VznYY8YD58XLFNtpmiEwDySyYMpZ+v1T4r 6vMQiZrEYdrnDJFbUNWeuIo+6wI5yk07YUZ7UXEAdGs7l9/CcTzQ58jwpk63iMzT Yp7+C/E5vuIcCqatpCVN3JKSvtuzpNiesYkL9LLK1yPoD4WcB8N8mQR/Cjq435uC 77VV9oHUlWzffbI8DeY1PdTNCk8bmf14LeoW+2N7CqDfNglgNZ2wcp8LSsuygfIj fbiOWg20f8CqTOtuYu/gWC0zUypdnO8caZkgNLRLUIcVMAI+3cdsjq8jg5bf8Zs2 RMwDeZOl9/k47YulyBYoZ/jM4Cu1MRE= -----END CERTIFICATE-----Generated at Sat Dec 20 00:28:53 2025 by rpki-client