This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: GlAoEwZ4mz/M6bZacahkSxz3c5D2mJGoM2hE2D9wtVY= Subject key identifier: BA:C5:8A:CC:4B:B8:70:5E:7C:1E:A6:F0:C7:F9:AD:13:4C:FA:69:20 Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 3575 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 353E Signing time: Sat 20 Dec 2025 14:21:43 +0000 Manifest this update: Sat 20 Dec 2025 14:21:43 +0000 Manifest next update: Sat 27 Dec 2025 14:21:43 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: 7Pll/kVKVJdXKbnYz8rEakaCmlSSZVl+75f/nRE1brI=) 2: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: SUsUIXE/tKa73O2xJJTZ5W41hRd+PFlpRhUTlZjlrnU=) 3: 9E3540C2C41311F0ADD84872C4F9AE02.roa (hash: HO2uIzfxAfoPWxfU892wMpOqa/oj9WPQVlDPIvb5NMQ=) 4: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: z0+u6Iw9nBsWkBxEBsOze7XPIpbGqUrpaAbGEfXztn0=) 5: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: yQ9Zz2wr8tjKdfaxVczUpLIfv3iNt/pg9a1JKFuCtos=) 6: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: 3w7qO3vRXc8eTnPd+5qLXghMh2FqcCG7VeR4W+VW+ps=) 7: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: C0b11kHxUkGRgJNkSLgXVrGvFc4MAtKBux3nfA6wsg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13685 (0x3575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Dec 20 14:21:43 2025 GMT Not After : Dec 27 14:21:43 2025 GMT Subject: CN=6946b0f7-2450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:40:3b:f6:97:59:62:4e:08:f3:81:bf:b0: 5a:23:af:ff:ca:32:b4:c8:55:cd:2c:8a:f7:74:b2: d1:b0:28:aa:44:4a:23:75:c7:8d:7d:c8:e4:3a:89: 8a:b7:95:17:65:9b:bc:4d:df:ea:5b:8c:d0:6f:b4: fa:d7:24:f0:1f:24:75:7c:fb:d0:c1:63:bd:b8:40: c1:c9:c5:52:7c:b6:c6:56:ce:84:cf:36:99:8d:08: d3:9c:3e:dc:c6:33:21:f4:d2:ea:da:b0:25:cc:7f: 91:34:8d:81:cd:fa:f8:22:fe:4a:d9:38:91:8d:f7: 24:55:40:2f:04:96:44:c3:2f:cd:88:e6:41:be:b0: 7b:a3:e4:60:f6:87:23:5d:44:11:1d:e5:79:d1:88: 03:b1:0d:b6:78:e9:4d:bb:23:65:fe:5a:4c:7d:7e: 83:81:ed:d0:39:e3:65:15:8a:a9:ce:6d:ed:a0:b6: b7:95:d1:52:b4:c1:4b:68:cc:cd:86:ae:ff:b2:96: f2:5c:b0:59:da:2a:ef:d7:51:2a:69:d1:79:2e:6f: ef:8f:e3:b3:0d:aa:2d:12:23:f2:b9:de:1a:2c:12: 35:0b:82:f5:6c:7a:f6:b2:65:77:fe:3c:bc:d0:cd: de:70:14:c2:57:40:60:3d:07:61:dc:99:1b:4c:e2: 6c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C5:8A:CC:4B:B8:70:5E:7C:1E:A6:F0:C7:F9:AD:13:4C:FA:69:20 X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c6:81:5e:79:17:28:41:1a:7b:ba:8b:a8:61:45:8a:a5:d0: 97:a2:98:91:2d:43:67:f0:d2:41:20:af:9e:d1:56:6e:84:9c: 0f:42:b3:32:93:db:17:f3:6f:41:a7:62:30:3d:ed:56:b6:6b: 9d:45:5d:1b:20:22:86:f9:d6:7a:81:14:2a:22:b3:d5:6f:19: 36:1b:1d:45:02:26:5b:bd:68:a3:c9:fd:20:df:92:c7:53:d0: 81:35:16:ce:95:3f:b8:0c:86:3f:e1:76:81:fd:46:c4:aa:40: 42:a5:d8:78:0f:8a:d4:23:fd:5f:40:46:4e:14:77:2d:31:29: a1:4c:3c:f7:96:fd:62:9c:f9:3a:4c:66:88:b7:74:5d:10:62: ba:ab:cc:00:a2:0f:af:ef:a4:31:18:da:14:2a:40:2a:df:c5: 4a:d8:28:a8:4a:90:e4:3a:b1:7c:75:fc:93:0f:9b:e2:fa:06: 10:8f:30:85:0a:84:38:85:9f:74:34:d7:f1:71:a1:13:f5:7b: f5:6c:4f:9b:5d:64:d7:32:f4:18:a8:fe:8a:c9:61:15:a6:37: c2:a0:27:8f:58:6d:92:4b:4f:14:75:5c:e5:59:f7:58:ff:e4: 62:fd:25:34:bb:67:64:3d:6f:9b:94:d6:6a:c7:29:96:b1:26: 58:b3:b4:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjUxMjIwMTQyMTQzWhcNMjUxMjI3MTQyMTQzWjAYMRYwFAYD VQQDDA02OTQ2YjBmNy0yNDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4VAO/aXWWJOCPOBv7BaI6//yjK0yFXNLIr3dLLRsCiqREojdceNfcjkOomK t5UXZZu8Td/qW4zQb7T61yTwHyR1fPvQwWO9uEDBycVSfLbGVs6EzzaZjQjTnD7c xjMh9NLq2rAlzH+RNI2Bzfr4Iv5K2TiRjfckVUAvBJZEwy/NiOZBvrB7o+Rg9ocj XUQRHeV50YgDsQ22eOlNuyNl/lpMfX6Dge3QOeNlFYqpzm3toLa3ldFStMFLaMzN hq7/spbyXLBZ2irv11EqadF5Lm/vj+OzDaotEiPyud4aLBI1C4L1bHr2smV3/jy8 0M3ecBTCV0BgPQdh3JkbTOJsfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrFisxL uHBefB6m8Mf5rRNM+mkgMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7xoFeeRcoQRp7uouoYUWKpdCXopiRLUNn8NJBIK+e0VZuhJwPQrMy k9sX829Bp2IwPe1WtmudRV0bICKG+dZ6gRQqIrPVbxk2Gx1FAiZbvWijyf0g35LH U9CBNRbOlT+4DIY/4XaB/UbEqkBCpdh4D4rUI/1fQEZOFHctMSmhTDz3lv1inPk6 TGaIt3RdEGK6q8wAog+v76QxGNoUKkAq38VK2CioSpDkOrF8dfyTD5vi+gYQjzCF CoQ4hZ90NNfxcaET9Xv1bE+bXWTXMvQYqP6KyWEVpjfCoCePWG2SS08UdVzlWfdY /+Ri/SU0u2dkPW+blNZqxymWsSZYs7Tz -----END CERTIFICATE-----Generated at Sat Dec 20 20:55:09 2025 by rpki-client