This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft File: VngmFidUtGDLWGbawxSIDHA1Rh0.mft (raw, json) Hash identifier: vYRIT/jo7ocXOYF09SoGjrh93DewolySifgLyVfa4J8= Subject key identifier: 54:10:83:B3:B3:26:69:47:2F:B1:D8:0E:4A:F3:C3:53:47:69:91:2E Authority key identifier: 56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D Certificate issuer: /CN=A917D9B8/serialNumber=567826162754B460CB5866DAC314880C7035461D Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft Manifest number: 0134 Signing time: Sun 21 Dec 2025 03:43:12 +0000 Manifest this update: Sun 21 Dec 2025 03:43:11 +0000 Manifest next update: Sun 28 Dec 2025 03:43:11 +0000 Files and hashes: 1: VngmFidUtGDLWGbawxSIDHA1Rh0.crl (hash: i0hgV9p5ZB5WKL49qwUqws3HIoJXFGy3lfS+Mn3P40k=) 2: DFDEC4D007A411EFAB20A473C4F9AE02.roa (hash: hQsClVPo6k6KSQkrPXRux2ZE6YMvDs1XKFlnN0n+rhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9B8, serialNumber=567826162754B460CB5866DAC314880C7035461D Validity Not Before: Dec 21 03:43:11 2025 GMT Not After : Dec 28 03:43:11 2025 GMT Subject: CN=69476cd0-d0cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:37:87:dc:3a:33:75:fd:72:80:b3:d5:7d: 5e:25:73:9c:d4:c7:14:47:51:44:fc:8a:c0:d8:0d: 54:ad:4d:77:68:58:07:90:a4:65:d0:03:64:22:c3: 5c:8f:bd:78:2b:18:06:b1:6b:f9:d1:e3:2f:5d:76: 5f:00:b6:6b:c4:eb:c6:d7:98:3e:2d:45:22:8a:69: e4:3d:a5:6b:ed:93:97:21:b4:4d:1a:b3:45:02:f6: 3d:14:51:cd:09:4d:ac:d7:4b:3f:bd:69:80:9d:cb: 95:ea:48:20:79:9e:5c:c8:7c:1b:90:8c:c2:92:b0: 6a:84:48:e0:e6:60:49:a4:0d:ad:30:87:ef:39:55: 0f:23:3b:f9:76:7e:5c:c9:59:44:4e:40:53:29:70: 32:88:df:cc:ce:ff:a2:d4:71:1f:9f:d1:1f:c0:89: 4b:84:d9:2d:0c:13:58:bc:13:66:6b:8b:84:ba:af: 48:85:c0:ac:72:0e:e7:11:94:71:2c:7e:ba:01:37: 5d:f4:8c:2e:23:ff:ab:4c:f2:e2:fb:49:f9:44:0b: 3d:f3:70:26:60:b4:61:fd:68:20:35:ab:fb:4e:19: 11:84:8f:7c:cd:b0:48:16:44:8e:90:5d:b7:3e:79: fb:46:d1:33:ed:2b:1f:da:2e:48:83:25:40:4c:09: fd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:10:83:B3:B3:26:69:47:2F:B1:D8:0E:4A:F3:C3:53:47:69:91:2E X509v3 Authority Key Identifier: keyid:56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:d2:48:6c:39:a3:46:0e:ee:9b:a2:9c:07:08:48:7c:a1:b7: 2c:c9:c0:77:76:3c:6d:a1:46:f1:20:72:5f:8f:48:5f:be:a4: 7f:ed:18:fb:54:da:4a:4a:18:4a:0f:a1:24:7b:79:91:b1:36: 2a:f9:3d:a7:24:62:81:3e:7b:79:6f:bf:99:c5:43:e4:63:85: aa:a5:49:5d:f4:ba:d8:6d:4f:cd:57:80:28:29:bb:20:e3:66: dd:6c:49:66:77:86:e3:12:88:14:a5:88:5b:3c:fe:11:a3:bb: bb:c0:d9:e5:d5:ef:6e:ea:38:73:51:a6:a8:6f:69:f6:56:88: 89:0d:86:33:45:7c:09:f3:25:8f:1b:3f:79:2a:fd:6d:12:8c: 45:c3:b4:e8:5c:0e:2a:3c:f6:17:61:dc:59:4e:32:fb:64:56: 0c:00:7e:f3:eb:0e:57:6c:6a:fc:3b:fa:05:8d:4a:65:37:77: de:d7:93:db:eb:cd:19:cb:8c:41:af:a3:45:9a:9e:4b:28:46: 4c:eb:29:04:68:ae:48:fa:01:11:e3:16:87:93:3d:7f:12:a8: 63:84:64:64:3c:c5:64:17:49:30:06:47:c1:b8:ac:ad:48:4a: 24:8c:0b:bd:51:bc:11:8c:eb:69:03:76:c5:05:5a:4f:c5:34: 85:0f:a6:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5QjgxMTAvBgNVBAUTKDU2NzgyNjE2Mjc1NEI0NjBDQjU4NjZEQUMzMTQ4ODBD NzAzNTQ2MUQwHhcNMjUxMjIxMDM0MzExWhcNMjUxMjI4MDM0MzExWjAYMRYwFAYD VQQDDA02OTQ3NmNkMC1kMGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqt43h9w6M3X9coCz1X1eJXOc1McUR1FE/IrA2A1UrU13aFgHkKRl0ANkIsNc j714KxgGsWv50eMvXXZfALZrxOvG15g+LUUiimnkPaVr7ZOXIbRNGrNFAvY9FFHN CU2s10s/vWmAncuV6kggeZ5cyHwbkIzCkrBqhEjg5mBJpA2tMIfvOVUPIzv5dn5c yVlETkBTKXAyiN/Mzv+i1HEfn9EfwIlLhNktDBNYvBNma4uEuq9IhcCscg7nEZRx LH66ATdd9IwuI/+rTPLi+0n5RAs983AmYLRh/WggNav7ThkRhI98zbBIFkSOkF23 Pnn7RtEz7Ssf2i5IgyVATAn9jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQQg7Oz JmlHL7HYDkrzw1NHaZEuMB8GA1UdIwQYMBaAFFZ4JhYnVLRgy1hm2sMUiAxwNUYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlCOC9DOEIxRDQ0RTA3 QTExMUVGODRGM0QyNkFDNEY5QUUwMi9WbmdtRmlkVXRHRExXR2Jhd3hTSURIQTFS aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZuZ21GaWRVdEdETFdHYmF3eFNJREhBMVJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlCOC9DOEIxRDQ0RTA3QTExMUVGODRGM0QyNkFDNEY5QUUwMi9WbmdtRmlkVXRH RExXR2Jhd3hTSURIQTFSaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV0khsOaNGDu6bopwHCEh8obcsycB3djxtoUbxIHJfj0hfvqR/7Rj7 VNpKShhKD6Eke3mRsTYq+T2nJGKBPnt5b7+ZxUPkY4WqpUld9LrYbU/NV4AoKbsg 42bdbElmd4bjEogUpYhbPP4Ro7u7wNnl1e9u6jhzUaaob2n2VoiJDYYzRXwJ8yWP Gz95Kv1tEoxFw7ToXA4qPPYXYdxZTjL7ZFYMAH7z6w5XbGr8O/oFjUplN3fe15Pb 680Zy4xBr6NFmp5LKEZM6ykEaK5I+gER4xaHkz1/EqhjhGRkPMVkF0kwBkfBuKyt SEokjAu9UbwRjOtpA3bFBVpPxTSFD6YL -----END CERTIFICATE-----Generated at Sun Dec 21 06:30:14 2025 by rpki-client