This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft File: VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json) Hash identifier: 3aYXWxqwl/ev75GMWsbsHqjkgyNEJrgZgA/DmFo/FTc= Subject key identifier: 7F:B8:7A:DB:C0:4D:D3:C4:6A:C0:53:64:E1:16:BD:07:58:B9:5B:F4 Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft Manifest number: 023A Signing time: Sun 21 Dec 2025 01:47:57 +0000 Manifest this update: Sun 21 Dec 2025 01:47:56 +0000 Manifest next update: Sun 28 Dec 2025 01:47:56 +0000 Files and hashes: 1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: kW4kBIVe+/ppked4UC8cS5nUCokHrSg5H+/heh+G7rY=) 2: D13FCAEAA62E11EFBC284C42C4F9AE02.roa (hash: K8NnxbaCBJETQFsMtKq3Bzg51wGMgmnozQ6OqtNXVto=) 3: 3352C1BAECFC11EFA398671BC4F9AE02.roa (hash: Im9wfZuP6zDy1h0Hl9Jq0NXIaM8u/vuOASHLbchH8jE=) 4: 020607A2498711EFBB260663C4F9AE02.roa (hash: T6rwUDI540K7kNvAic9olkLe7ckJW9yi5Gt2J/Ejnw0=) 5: 05F505961AA311F0A475D464C4F9AE02.roa (hash: DJ6ceD+nzuCFrSpyZtlueLHrerXM29TFRnLIJO8v0Cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: Dec 21 01:47:56 2025 GMT Not After : Dec 28 01:47:56 2025 GMT Subject: CN=694751cd-a261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:16:1d:4e:5a:41:24:56:d8:c3:23:c0:f5:2f: 8d:b3:4c:4d:c4:1a:8a:d1:50:0a:25:8e:1f:3c:0f: 87:79:d3:f2:ce:65:f5:90:cb:32:39:5c:bf:9a:9e: a3:59:20:b5:79:a1:d7:41:39:cf:d0:5b:ee:6e:d1: 71:fb:03:e5:8a:2b:d7:ec:b4:67:8f:f8:79:e6:4a: db:f1:0b:9a:b0:78:03:f9:bf:32:86:e3:ae:17:7e: 4c:0f:72:50:1e:d5:30:cd:83:d0:7a:ff:5c:d3:cf: f6:43:2a:33:a0:9a:8c:64:3f:25:e8:44:e2:d7:45: f3:4d:e8:7f:19:96:ba:e5:af:45:ec:dc:a3:cc:1d: c6:ad:3d:6c:5c:49:6d:38:97:db:d4:06:da:de:7a: 81:5c:c9:94:f8:f8:6d:7c:8a:d1:2d:17:bf:f9:a7: 32:d9:f0:84:d8:83:dc:ad:58:f7:de:bf:f8:47:de: 2a:89:85:4e:c4:f1:dc:83:d8:86:e2:8d:ed:b2:7c: f1:21:ec:ee:a0:42:76:38:10:d7:81:8c:b4:df:e5: 50:ea:e3:36:5b:73:86:46:19:9f:08:bb:6f:f3:47: e5:2f:a0:cd:1f:64:c4:8e:b1:b2:59:a0:aa:53:02: a0:3d:b0:a9:10:42:8a:a4:61:3c:dd:9e:c3:0b:67: f0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B8:7A:DB:C0:4D:D3:C4:6A:C0:53:64:E1:16:BD:07:58:B9:5B:F4 X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:be:a2:6f:62:ff:65:72:73:89:7b:f4:fb:08:c0:57:ae:12: ff:2f:92:f3:3f:5e:be:1d:4b:63:5d:45:b7:a1:1c:6b:22:4b: dc:3d:56:40:00:e9:14:d1:0a:ae:03:14:09:59:cc:b7:82:9e: 95:ea:93:cc:0f:36:b4:53:b5:e8:ee:85:f8:c5:50:4d:97:b3: 60:b4:df:4c:0b:ff:0f:4c:a9:85:12:15:7d:1c:a6:1e:46:9b: be:31:c1:15:a8:a7:ac:e3:f7:94:d3:7a:81:e9:29:93:09:fe: 5b:f7:31:96:e1:17:5a:df:4d:ab:27:74:3c:19:17:af:0b:a8: e6:bc:8c:12:b7:eb:c0:ca:83:0a:7b:67:b0:6e:00:60:cf:c2: f0:f1:38:60:3f:aa:26:b1:35:94:44:36:21:ef:dc:e9:48:2e: 08:8e:db:67:7f:b0:5a:76:c6:bc:32:f6:3d:f0:a6:3b:0f:64: f8:f1:0b:3f:01:59:56:71:38:88:0d:82:e5:4a:bc:28:46:a9: 92:56:2e:61:31:4b:c5:75:6a:8a:f3:c1:58:92:30:42:b9:f4: 7e:f5:c0:10:b4:68:b4:eb:39:5c:95:64:ef:78:26:f8:86:38: 20:29:ab:d2:02:eb:5b:98:ca:cf:8a:67:9f:20:c0:3e:a4:fd: c4:0b:0d:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjUxMjIxMDE0NzU2WhcNMjUxMjI4MDE0NzU2WjAYMRYwFAYD VQQDDA02OTQ3NTFjZC1hMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkRYdTlpBJFbYwyPA9S+Ns0xNxBqK0VAKJY4fPA+HedPyzmX1kMsyOVy/mp6j WSC1eaHXQTnP0FvubtFx+wPliivX7LRnj/h55krb8QuasHgD+b8yhuOuF35MD3JQ HtUwzYPQev9c08/2QyozoJqMZD8l6ETi10XzTeh/GZa65a9F7NyjzB3GrT1sXElt OJfb1Aba3nqBXMmU+PhtfIrRLRe/+acy2fCE2IPcrVj33r/4R94qiYVOxPHcg9iG 4o3tsnzxIezuoEJ2OBDXgYy03+VQ6uM2W3OGRhmfCLtv80flL6DNH2TEjrGyWaCq UwKgPbCpEEKKpGE83Z7DC2fwUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+4etvA TdPEasBTZOEWvQdYuVv0MB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC8xNjFENEMwQUU0Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4 R1dUOUUzUVNsZEo2MTZrQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+vqJvYv9lcnOJe/T7CMBXrhL/L5LzP16+HUtjXUW3oRxrIkvcPVZA AOkU0QquAxQJWcy3gp6V6pPMDza0U7Xo7oX4xVBNl7NgtN9MC/8PTKmFEhV9HKYe Rpu+McEVqKes4/eU03qB6SmTCf5b9zGW4Rda302rJ3Q8GRevC6jmvIwSt+vAyoMK e2ewbgBgz8Lw8ThgP6omsTWURDYh79zpSC4Ijttnf7Badsa8MvY98KY7D2T48Qs/ AVlWcTiIDYLlSrwoRqmSVi5hMUvFdWqK88FYkjBCufR+9cAQtGi06zlclWTveCb4 hjggKavSAutbmMrPimefIMA+pP3ECw1I -----END CERTIFICATE-----Generated at Sun Dec 21 06:29:48 2025 by rpki-client