This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft File: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft (raw, json) Hash identifier: zcvGIG70CO/3w14jKXAbgzNcdrkkIGrqbFl6QRcGVcw= Subject key identifier: 56:CD:B5:B7:5C:04:15:A7:33:5C:21:93:7A:A9:EF:CD:53:F2:5F:2E Authority key identifier: BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A Certificate issuer: /CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A Certificate serial: 1ECB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft Manifest number: 1EA2 Signing time: Mon 22 Dec 2025 15:51:37 +0000 Manifest this update: Mon 22 Dec 2025 15:51:37 +0000 Manifest next update: Mon 29 Dec 2025 15:51:37 +0000 Files and hashes: 1: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl (hash: AVoTLgzdvBixsJ8Z+rpMGZnIt2ReLycJPtf9p3fmBnc=) 2: BE047E02DBA411EAAF00CC6CC4F9AE02.roa (hash: w99/DAXuJPeoejD7jO/GwyxzGwiaUuCijwIrsTGlFkY=) 3: C22F80E4D1F011EEB68A503EC4F9AE02.roa (hash: Kjjm0gZskFT6tVxY5Ur25GzEYJIZngsq5sGod6YlbMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7883 (0x1ecb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157861, serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A Validity Not Before: Dec 22 15:51:37 2025 GMT Not After : Dec 29 15:51:37 2025 GMT Subject: CN=69496909-7576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:c1:a7:dc:0e:14:16:6a:17:73:5a:be:3a: 64:c5:47:da:1a:1b:50:31:d1:92:59:95:52:57:3b: 56:55:fc:d3:aa:27:6b:a7:6d:b3:7e:75:c0:7b:fc: d1:af:0a:8e:60:ad:27:c8:d9:e6:1a:4d:fc:12:fc: ef:93:e4:0a:9c:b9:4c:2b:08:e4:28:dc:97:e2:d6: 8d:d8:8f:47:7f:d9:e4:c2:60:3c:7d:b9:b6:3c:40: 5c:84:b9:f2:43:23:51:d4:bd:f9:fa:04:a3:64:40: 5c:c5:a7:65:96:85:79:9d:9b:d9:a7:81:a3:77:39: 6d:af:37:04:58:8c:f5:c8:f8:ca:29:d2:65:36:17: 51:82:e6:16:b8:24:66:ba:a4:93:ba:b7:52:bb:e2: f5:93:81:8c:6c:e2:3b:43:6a:db:80:5c:b8:ff:c5: 2b:a0:79:d2:2c:0b:f2:20:7a:0a:51:e1:22:69:53: 71:4f:6b:38:ef:83:eb:6c:d5:51:aa:6c:78:fe:52: bc:6b:e7:a2:7b:57:02:fe:87:a0:b6:ec:09:78:1b: a1:38:be:63:81:96:03:1e:cb:56:dc:d5:7a:7a:5f: a4:4f:aa:5c:a9:6e:c6:a3:29:65:05:33:66:89:5d: f0:25:5c:3d:4d:39:6f:1e:26:ff:4d:9f:47:48:a9: fe:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CD:B5:B7:5C:04:15:A7:33:5C:21:93:7A:A9:EF:CD:53:F2:5F:2E X509v3 Authority Key Identifier: keyid:BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:80:6f:45:f0:7e:5f:47:3c:24:c0:98:a6:e2:cb:51:de:6c: bf:74:13:a2:b9:b5:cb:92:51:7f:d8:5f:7f:c3:32:f9:a5:5e: 7f:38:4a:2b:fc:e8:70:35:76:91:ef:45:5f:ff:e2:29:ee:68: dd:aa:77:4a:74:c9:65:9f:01:4d:10:a0:a6:04:84:9c:db:86: 3d:9f:7a:1f:cb:cd:9b:f6:9a:69:4d:ca:99:33:0f:f8:75:04: d6:49:74:45:e5:10:7d:36:a6:bb:2b:d5:42:7c:8c:ce:7c:72: 3a:55:ff:8b:0f:74:f6:35:67:0b:2a:c0:81:89:e3:b8:dc:e6: 42:f2:a2:a1:87:f2:30:56:71:4e:da:bb:2a:e6:4f:94:40:79: 75:6d:a7:5c:03:3b:7f:48:a2:8f:9a:53:b7:9c:4c:ca:48:7b: 33:c6:a0:12:84:bd:f2:2a:09:20:35:1e:ef:46:3e:dc:c4:fa: 24:7b:fa:d6:42:e8:9f:97:04:91:db:16:c2:a2:46:a4:fe:8b: 93:41:7a:5b:5e:e2:9e:b1:e6:81:e0:1b:57:6b:f5:74:5d:cf: 0c:41:80:fb:bd:72:61:d9:b2:72:e1:d7:4e:c8:5c:01:d5:31: 67:c1:03:3f:13:cb:ca:ff:75:dd:8e:dd:2b:9e:68:10:59:6c: 3d:61:31:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc4NjExMTAvBgNVBAUTKEJENUYwODg4OTREOURBNzU2NUQ0NDM2MTQzRUUwMjZD MzIwRTRBMkEwHhcNMjUxMjIyMTU1MTM3WhcNMjUxMjI5MTU1MTM3WjAYMRYwFAYD VQQDDA02OTQ5NjkwOS03NTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+rBp9wOFBZqF3NavjpkxUfaGhtQMdGSWZVSVztWVfzTqidrp22zfnXAe/zR rwqOYK0nyNnmGk38Evzvk+QKnLlMKwjkKNyX4taN2I9Hf9nkwmA8fbm2PEBchLny QyNR1L35+gSjZEBcxadlloV5nZvZp4GjdzltrzcEWIz1yPjKKdJlNhdRguYWuCRm uqSTurdSu+L1k4GMbOI7Q2rbgFy4/8UroHnSLAvyIHoKUeEiaVNxT2s474PrbNVR qmx4/lK8a+eie1cC/oegtuwJeBuhOL5jgZYDHstW3NV6el+kT6pcqW7GoyllBTNm iV3wJVw9TTlvHib/TZ9HSKn+hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbNtbdc BBWnM1whk3qp781T8l8uMB8GA1UdIwQYMBaAFL1fCIiU2dp1ZdRDYUPuAmwyDkoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2MS8zNEQyNkM4ODg0 NkYxMUU2QTMxM0MwMjJDNEY5QUUwMi92VjhJaUpUWjJuVmwxRU5oUS00Q2JESU9T aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZWOElpSlRaMm5WbDFFTmhRLTRDYkRJT1Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Nzg2MS8zNEQyNkM4ODg0NkYxMUU2QTMxM0MwMjJDNEY5QUUwMi92VjhJaUpUWjJu VmwxRU5oUS00Q2JESU9TaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJgG9F8H5fRzwkwJim4stR3my/dBOiubXLklF/2F9/wzL5pV5/OEor /OhwNXaR70Vf/+Ip7mjdqndKdMllnwFNEKCmBISc24Y9n3ofy82b9pppTcqZMw/4 dQTWSXRF5RB9Nqa7K9VCfIzOfHI6Vf+LD3T2NWcLKsCBieO43OZC8qKhh/IwVnFO 2rsq5k+UQHl1badcAzt/SKKPmlO3nEzKSHszxqAShL3yKgkgNR7vRj7cxPoke/rW QuiflwSR2xbCokak/ouTQXpbXuKeseaB4BtXa/V0Xc8MQYD7vXJh2bJy4ddOyFwB 1TFnwQM/E8vK/3Xdjt0rnmgQWWw9YTHW -----END CERTIFICATE-----Generated at Tue Dec 23 06:07:42 2025 by rpki-client