This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft File: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft (raw, json) Hash identifier: WWstnwCD0z1rstPhHrrWIjd6qSQAuEE0VqsTLc8W01U= Subject key identifier: 6D:D7:BC:4E:89:FE:BA:D2:94:54:2B:BD:E7:B3:06:F0:05:33:6E:D2 Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE Certificate issuer: /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft Manifest number: 020E Signing time: Thu 25 Dec 2025 01:23:06 +0000 Manifest this update: Thu 25 Dec 2025 01:23:06 +0000 Manifest next update: Thu 01 Jan 2026 01:23:06 +0000 Files and hashes: 1: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl (hash: ZjBKxqzJvCH3J21WHecDYUD9QG7clNfVRo6rRGqdZTA=) 2: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (hash: 4FOvuF+lrbDRETyeVF9s3HBZnjQN5y+IfUmzH88TfmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 01:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91433B3, serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE Validity Not Before: Dec 25 01:23:06 2025 GMT Not After : Jan 1 01:23:06 2026 GMT Subject: CN=694c91fa-d5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:19:6b:05:86:de:72:c2:86:d1:c5:82:a0:c0: f3:62:69:19:d5:c5:6b:b5:44:54:7b:ec:4d:a5:76: 88:bf:e8:09:af:e2:5e:00:9f:76:9b:0b:9c:d4:77: a3:72:18:89:8d:6c:ab:33:f8:e2:67:4a:5d:f7:60: ca:58:f9:52:d8:bc:d6:bb:2f:92:36:58:9d:58:b0: af:db:24:26:7d:4b:e8:18:4a:73:8a:bb:c8:b3:83: 3c:63:e7:85:dc:76:b1:11:a2:7a:ae:28:6b:78:ef: 64:01:a8:0d:6f:b1:f7:e4:d9:ff:78:aa:0d:cb:05: 31:bf:2f:a9:b4:ff:78:99:31:a4:2a:a1:6b:4c:86: 68:02:4c:3b:cf:f7:68:4d:f9:b1:2a:33:82:42:13: 32:37:01:96:e6:c7:29:02:96:a2:1b:b1:ed:7e:28: 05:9f:fd:7a:8b:8a:fd:d0:af:86:38:97:e2:9b:3a: 1b:69:52:de:e7:3c:79:be:3e:45:b4:c7:bb:01:b2: ac:7e:da:d1:eb:fd:c1:37:af:27:a7:b8:e0:da:c8: 02:78:f4:24:2e:f1:b1:53:f6:9e:f9:62:dd:51:c8: c7:67:9c:1f:d5:d3:56:a6:4b:68:38:4c:df:d4:e5: d5:aa:7b:0a:60:e8:ee:cd:6a:3b:67:8c:cf:3a:ff: db:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D7:BC:4E:89:FE:BA:D2:94:54:2B:BD:E7:B3:06:F0:05:33:6E:D2 X509v3 Authority Key Identifier: keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1a:3a:bc:0f:86:a9:bb:f2:4a:bf:b7:5f:68:28:a3:78:32: d7:d7:ee:a6:fe:f3:d1:a9:34:18:4f:5f:4e:03:6e:21:d5:2d: 50:90:1a:04:2d:dc:65:e7:f3:eb:d6:21:b9:9f:fe:7f:a8:83: 31:6c:3c:38:a5:5f:a7:f4:6d:b6:67:2f:82:b4:e4:27:ba:2a: c9:54:7a:9d:42:ee:2c:9f:57:d5:22:f4:ba:43:8c:45:5c:54: 0d:3a:cd:91:86:5f:c8:1d:2a:e3:3b:1f:2b:a2:db:4f:78:6e: 95:31:80:88:62:41:1a:0d:67:10:08:29:60:81:b9:19:15:de: 61:71:62:d5:4b:68:51:ec:7c:6b:69:83:e2:ee:3b:07:0b:18: 01:e8:ec:ad:ab:ee:7e:b3:18:1a:a5:9c:47:ce:55:8e:6a:0b: b1:f7:b0:fc:fa:df:fe:ee:a2:47:bc:9a:61:4d:bc:55:bc:89: 45:24:08:a5:35:28:8d:4d:27:ca:c0:06:a9:02:0b:00:4e:7a: eb:9b:b2:81:12:b6:79:52:98:cd:2f:52:f5:ad:f3:2b:02:6c: 73:12:d0:40:e6:8c:8f:a4:1a:7e:a3:e9:e6:90:37:b3:c4:02: e0:1b:24:28:66:ce:c5:de:62:58:ca:3f:f1:3a:95:54:bb:27: 2d:8e:5c:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzQjMxMTAvBgNVBAUTKDU2QkI2RjMxMzdEOEREOUVCOTdFMzgzQkM3RjQ2MUQ5 MEY4NURERkUwHhcNMjUxMjI1MDEyMzA2WhcNMjYwMTAxMDEyMzA2WjAYMRYwFAYD VQQDDA02OTRjOTFmYS1kNWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hlrBYbecsKG0cWCoMDzYmkZ1cVrtURUe+xNpXaIv+gJr+JeAJ92mwuc1Hej chiJjWyrM/jiZ0pd92DKWPlS2LzWuy+SNlidWLCv2yQmfUvoGEpzirvIs4M8Y+eF 3HaxEaJ6rihreO9kAagNb7H35Nn/eKoNywUxvy+ptP94mTGkKqFrTIZoAkw7z/do TfmxKjOCQhMyNwGW5scpApaiG7HtfigFn/16i4r90K+GOJfimzobaVLe5zx5vj5F tMe7AbKsftrR6/3BN68np7jg2sgCePQkLvGxU/ae+WLdUcjHZ5wf1dNWpktoOEzf 1OXVqnsKYOjuzWo7Z4zPOv/bJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3XvE6J /rrSlFQrveezBvAFM27SMB8GA1UdIwQYMBaAFFa7bzE32N2euX44O8f0YdkPhd3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzNCMy9CREZFMThDQ0I1 RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNaNjVmamc3eF9SaDJRLUYz ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZydHZNVGZZM1o2NWZqZzd4X1JoMlEtRjNmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzNCMy9CREZFMThDQ0I1RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNa NjVmamc3eF9SaDJRLUYzZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvGjq8D4apu/JKv7dfaCijeDLX1+6m/vPRqTQYT19OA24h1S1QkBoE Ldxl5/Pr1iG5n/5/qIMxbDw4pV+n9G22Zy+CtOQnuirJVHqdQu4sn1fVIvS6Q4xF XFQNOs2Rhl/IHSrjOx8rottPeG6VMYCIYkEaDWcQCClggbkZFd5hcWLVS2hR7Hxr aYPi7jsHCxgB6Oytq+5+sxgapZxHzlWOagux97D8+t/+7qJHvJphTbxVvIlFJAil NSiNTSfKwAapAgsATnrrm7KBErZ5UpjNL1L1rfMrAmxzEtBA5oyPpBp+o+nmkDez xALgGyQoZs7F3mJYyj/xOpVUuyctjlyf -----END CERTIFICATE-----Generated at Fri Dec 26 09:24:50 2025 by rpki-client