This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft File: vjP21UgZuYkyL1Kj7LXzP98OFZY.mft (raw, json) Hash identifier: PbIrcD7nZqduIR0Ac3wxngrQyII5jQucfzBKK5IA1ZQ= Subject key identifier: C1:83:E7:E1:71:4D:D4:3F:24:27:28:FB:77:B1:84:5D:73:A1:80:75 Authority key identifier: BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96 Certificate issuer: /CN=A9178EF3/serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596 Certificate serial: 0762 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft Manifest number: 075B Signing time: Thu 18 Dec 2025 21:07:10 +0000 Manifest this update: Thu 18 Dec 2025 21:07:10 +0000 Manifest next update: Thu 25 Dec 2025 21:07:10 +0000 Files and hashes: 1: vjP21UgZuYkyL1Kj7LXzP98OFZY.crl (hash: xUQvXARaEvRpfwing/uli9kwQkebnFdXueFVMmk2aAo=) 2: 4BC1EE9A4AAF11EBBF031959C4F9AE02.roa (hash: 9QXEZ3KUMVxM1IFtAM5AqpjiZSShCfJ9XhH0+sUzVjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1890 (0x762) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EF3, serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596 Validity Not Before: Dec 18 21:07:10 2025 GMT Not After : Dec 25 21:07:10 2025 GMT Subject: CN=69446cfe-28ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:8c:7b:01:3d:aa:4e:69:ff:23:20:06:48: 5b:9b:10:e3:f7:15:45:e5:58:52:2d:ca:2e:00:72: 9f:53:a7:bc:25:83:74:3d:ca:62:6e:c0:5d:41:4b: 79:f6:6e:48:73:fc:5d:f3:e0:7c:03:51:5e:f3:ba: ac:a7:da:70:e9:07:28:5e:08:aa:86:62:07:7f:3d: 44:c9:5e:e7:a0:27:70:4c:ff:0b:dd:60:ce:01:3e: 43:a4:3e:44:e5:62:d8:04:a7:41:f2:03:56:0b:16: 48:13:27:2e:b9:75:18:55:a9:97:64:65:08:26:77: 2a:87:2b:7a:5a:42:28:95:48:e1:09:28:bc:2b:db: 36:55:a8:db:c5:81:42:b7:61:57:20:82:ee:a8:d6: 6e:69:bd:2f:b1:ea:9f:27:af:12:da:51:2f:f6:f3: 63:12:ea:23:71:bb:37:7a:82:1d:9e:12:76:63:fb: b1:56:8c:42:a8:20:8c:95:70:c8:6d:0e:db:ef:fe: ba:96:44:21:51:eb:2f:b8:9a:a5:eb:3c:67:06:38: 3a:a3:8f:f1:f1:ac:75:f4:f1:d8:89:18:db:b6:4f: 6e:d5:14:28:ac:61:11:5e:b7:07:74:9c:c1:1f:f3: cc:f2:55:19:a6:37:24:82:e0:f5:fb:f4:52:77:15: 28:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:83:E7:E1:71:4D:D4:3F:24:27:28:FB:77:B1:84:5D:73:A1:80:75 X509v3 Authority Key Identifier: keyid:BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:a5:ae:a4:ea:07:b6:68:33:aa:88:de:7f:e4:ed:30:3b:c2: 1b:13:72:df:f1:94:e3:6e:04:9c:58:16:e7:14:11:cb:62:41: a2:ee:9f:48:fc:7a:f3:6b:6a:9b:db:40:c2:86:e3:f4:a2:e5: ee:3a:2c:77:7a:35:fe:76:02:db:08:40:7b:dd:52:96:e0:2e: 33:95:eb:09:ff:8f:c3:93:ce:c7:0f:5c:b1:2b:0b:e5:a9:d5: c2:5f:e3:53:9f:2d:14:91:96:a4:42:c2:55:1c:41:07:3f:4a: bf:66:22:ae:b4:4f:37:9b:fb:d4:2f:0a:51:ef:81:ee:7c:cc: 9b:1d:d8:1d:2d:e2:ec:3e:f2:0e:a6:22:31:37:ea:bb:03:11: ba:40:29:31:9b:d5:32:68:7d:f9:63:85:b7:91:06:69:ac:28: ae:89:6e:9a:22:4f:e7:a1:a2:c6:85:18:85:cf:4d:dc:b1:86: 55:10:57:30:77:9b:1a:7c:60:23:b7:48:15:68:3d:b5:51:f7: cc:ba:2e:9e:2e:6c:e2:e6:b6:37:3f:2d:3d:58:4d:bb:81:62: 58:f9:1c:ea:75:f1:c7:2b:d7:e6:1f:6b:17:76:fe:27:92:98: 3d:19:f8:ef:0d:15:91:e5:f4:64:5f:06:1f:4d:70:e0:20:95: 8a:33:ac:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFRjMxMTAvBgNVBAUTKEJFMzNGNkQ1NDgxOUI5ODkzMjJGNTJBM0VDQjVGMzNG REYwRTE1OTYwHhcNMjUxMjE4MjEwNzEwWhcNMjUxMjI1MjEwNzEwWjAYMRYwFAYD VQQDDA02OTQ0NmNmZS0yOGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3qMewE9qk5p/yMgBkhbmxDj9xVF5VhSLcouAHKfU6e8JYN0PcpibsBdQUt5 9m5Ic/xd8+B8A1Fe87qsp9pw6QcoXgiqhmIHfz1EyV7noCdwTP8L3WDOAT5DpD5E 5WLYBKdB8gNWCxZIEycuuXUYVamXZGUIJncqhyt6WkIolUjhCSi8K9s2VajbxYFC t2FXIILuqNZuab0vseqfJ68S2lEv9vNjEuojcbs3eoIdnhJ2Y/uxVoxCqCCMlXDI bQ7b7/66lkQhUesvuJql6zxnBjg6o4/x8ax19PHYiRjbtk9u1RQorGERXrcHdJzB H/PM8lUZpjckguD1+/RSdxUorQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGD5+Fx TdQ/JCco+3exhF1zoYB1MB8GA1UdIwQYMBaAFL4z9tVIGbmJMi9So+y18z/fDhWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVGMy85MjgxMDM0QTRB QUQxMUVCOTA2MzdFNTdDNEY5QUUwMi92alAyMVVnWnVZa3lMMUtqN0xYelA5OE9G WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqUDIxVWdadVlreUwxS2o3TFh6UDk4T0ZaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVGMy85MjgxMDM0QTRBQUQxMUVCOTA2MzdFNTdDNEY5QUUwMi92alAyMVVnWnVZ a3lMMUtqN0xYelA5OE9GWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFpa6k6ge2aDOqiN5/5O0wO8IbE3Lf8ZTjbgScWBbnFBHLYkGi7p9I /Hrza2qb20DChuP0ouXuOix3ejX+dgLbCEB73VKW4C4zlesJ/4/Dk87HD1yxKwvl qdXCX+NTny0UkZakQsJVHEEHP0q/ZiKutE83m/vULwpR74HufMybHdgdLeLsPvIO piIxN+q7AxG6QCkxm9UyaH35Y4W3kQZprCiuiW6aIk/noaLGhRiFz03csYZVEFcw d5safGAjt0gVaD21UffMui6eLmzi5rY3Py09WE27gWJY+RzqdfHHK9fmH2sXdv4n kpg9GfjvDRWR5fRkXwYfTXDgIJWKM6xB -----END CERTIFICATE-----Generated at Fri Dec 19 23:58:03 2025 by rpki-client