This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft File: Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json) Hash identifier: F4iTaNWW9BFTN6+zOFrIfE2vS9bxdZJj4uFO5JFAyzc= Subject key identifier: A7:35:42:6E:1E:BC:BE:74:64:27:A5:31:7C:12:B3:60:0A:23:B6:A1 Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2 Certificate issuer: /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2 Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft Manifest number: 033B Signing time: Wed 31 Dec 2025 00:06:34 +0000 Manifest this update: Wed 31 Dec 2025 00:06:34 +0000 Manifest next update: Wed 07 Jan 2026 00:06:34 +0000 Files and hashes: 1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: WS8Y8V5PYp+xdUSMJ1HA7ecNC1NpDSDN4uYl4Wpz8zQ=) 2: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: 6Otg6zDUC3T6chkRppH8+51GAfFhb4rhNrj+nGsoi3I=) 3: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: dSIhsF2Xt53EsY5Qnrga5XSOK9oGKkuxZKuBhxw3Vak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2 Validity Not Before: Dec 31 00:06:34 2025 GMT Not After : Jan 7 00:06:34 2026 GMT Subject: CN=6954690a-f239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:79:29:26:fb:d3:01:a4:df:b3:c0:eb:7f:9f: 29:6f:b2:f2:24:a5:db:92:af:2a:9d:ac:a6:28:85: c4:6e:48:5e:41:04:27:e7:68:35:cc:2d:44:8f:8a: 16:9d:6c:3e:5f:e9:e0:36:39:ba:06:a6:11:d2:b6: 51:05:a2:4b:23:08:e6:c7:90:d4:29:a3:dd:0f:fc: 5b:81:28:d1:57:cb:18:fa:b8:db:82:27:d4:e0:4b: 81:43:47:2e:a4:83:ec:75:32:f1:64:58:72:8e:3d: ae:1b:11:92:4f:21:08:a2:4b:ca:6b:eb:f8:0a:6f: 6b:1b:bc:45:01:b6:93:86:aa:fd:ee:74:fa:ae:c5: c2:c1:82:9e:34:2a:11:c4:43:8b:7b:e1:2e:7e:1e: 40:56:96:42:73:5b:2f:15:53:40:fc:79:6d:73:c4: ca:fe:84:90:36:c8:96:41:ef:fd:27:04:a4:62:cc: ce:54:ed:6e:1e:37:bd:f3:fb:24:15:42:46:40:44: 81:62:3f:c2:66:b8:03:98:7e:a2:84:bb:e3:79:3d: dd:d7:0b:4f:a9:47:16:de:9b:d6:e6:f7:08:6b:fe: b5:6c:7e:8d:ea:11:b0:6c:43:29:fa:6a:9a:72:76: fd:a0:a5:99:74:0b:7e:85:59:9e:a9:be:a6:66:76: 23:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:35:42:6E:1E:BC:BE:74:64:27:A5:31:7C:12:B3:60:0A:23:B6:A1 X509v3 Authority Key Identifier: keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:3a:a9:2b:60:b8:97:d3:bb:a1:e3:39:af:70:2c:ae:19:97: 13:86:d2:4f:d8:d4:ab:15:a6:ce:7b:97:51:fa:28:87:54:97: 48:09:6e:bd:2d:7d:2c:74:79:be:a7:3a:b7:58:f0:66:a8:6b: 8a:2d:d5:58:b1:f0:90:1e:8f:6b:d7:86:b1:61:7d:3f:7c:da: 51:d3:cb:ff:b5:43:5c:1e:d4:c9:3e:88:ba:b4:cb:03:86:49: f3:06:46:c7:ea:43:00:2d:40:59:b9:c1:55:0d:09:03:76:8c: 27:e1:53:f2:fd:32:2d:60:d7:ea:68:e7:3f:12:3d:b5:e9:25: 6c:c0:45:27:f8:0e:bd:be:69:41:71:e2:d2:21:d6:bb:69:8e: f6:15:9a:11:b1:aa:e0:19:ca:11:aa:fa:ab:a5:42:0c:46:60: 25:9c:04:36:b6:35:66:c7:da:67:a1:cf:7a:86:82:f4:ca:06: 1b:6b:88:7c:e0:a4:35:14:4a:28:66:b5:5f:dc:4b:4d:fb:a4: 3f:1b:9f:d4:8c:1c:3d:28:89:69:47:bb:52:4b:4a:be:51:4f: c5:fd:ff:73:88:05:9b:d4:df:5f:a6:bb:45:15:83:9c:23:22: d0:fc:57:8b:99:a2:fc:3a:2a:ff:b2:cd:64:5b:fc:cb:7c:75: dc:29:31:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDOEMxMTAvBgNVBAUTKDU2M0YzMjk0OEVCQzFCMzkwRjMyQTBBQTNGMzYxNDc4 NUFGQ0U3QzIwHhcNMjUxMjMxMDAwNjM0WhcNMjYwMTA3MDAwNjM0WjAYMRYwFAYD VQQDDA02OTU0NjkwYS1mMjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXkpJvvTAaTfs8Drf58pb7LyJKXbkq8qnaymKIXEbkheQQQn52g1zC1Ej4oW nWw+X+ngNjm6BqYR0rZRBaJLIwjmx5DUKaPdD/xbgSjRV8sY+rjbgifU4EuBQ0cu pIPsdTLxZFhyjj2uGxGSTyEIokvKa+v4Cm9rG7xFAbaThqr97nT6rsXCwYKeNCoR xEOLe+Eufh5AVpZCc1svFVNA/Hltc8TK/oSQNsiWQe/9JwSkYszOVO1uHje98/sk FUJGQESBYj/CZrgDmH6ihLvjeT3d1wtPqUcW3pvW5vcIa/61bH6N6hGwbEMp+mqa cnb9oKWZdAt+hVmeqb6mZnYjXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKc1Qm4e vL50ZCelMXwSs2AKI7ahMB8GA1UdIwQYMBaAFFY/MpSOvBs5DzKgqj82FHha/OfC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUM4Qy84OTk2NkRDQUVC QjkxMUVDOTlFNTYxMEVDNEY5QUUwMi9Wajh5bEk2OEd6a1BNcUNxUHpZVWVGcjg1 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZqOHlsSTY4R3prUE1xQ3FQellVZUZyODU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUM4Qy84OTk2NkRDQUVCQjkxMUVDOTlFNTYxMEVDNEY5QUUwMi9Wajh5bEk2OEd6 a1BNcUNxUHpZVWVGcjg1OEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAROqkrYLiX07uh4zmvcCyuGZcThtJP2NSrFabOe5dR+iiHVJdICW69 LX0sdHm+pzq3WPBmqGuKLdVYsfCQHo9r14axYX0/fNpR08v/tUNcHtTJPoi6tMsD hknzBkbH6kMALUBZucFVDQkDdown4VPy/TItYNfqaOc/Ej216SVswEUn+A69vmlB ceLSIda7aY72FZoRsargGcoRqvqrpUIMRmAlnAQ2tjVmx9pnoc96hoL0ygYba4h8 4KQ1FEooZrVf3EtN+6Q/G5/UjBw9KIlpR7tSS0q+UU/F/f9ziAWb1N9fprtFFYOc IyLQ/FeLmaL8Oir/ss1kW/zLfHXcKTFh -----END CERTIFICATE-----Generated at Wed Dec 31 03:43:45 2025 by rpki-client