This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: gcz3oP0tDQNIlxOA8aGIj6QfU/nv6F0PQ07kLT3jjOI= Subject key identifier: A1:5A:E3:3B:A4:81:7B:42:37:7A:34:98:51:6C:33:48:3A:0D:14:3B Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 084A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 07FF Signing time: Sat 20 Dec 2025 20:48:45 +0000 Manifest this update: Sat 20 Dec 2025 20:48:45 +0000 Manifest next update: Sat 27 Dec 2025 20:48:45 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: 1swKfwEUyPff88oRSUt8xh5qlekkAW4mDNdfN0YxkbA=) 2: 9A2EC0AA6BF011F0A7327D86C4F9AE02.roa (hash: q4XD/AQqfkjB0bWd2cAwQj0LVcqgF9IjAclvpli5BAw=) 3: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: 7LNQOsT6W5YF7PbwLpdxc+PNq2qTTKmlTXDNMzrKzkc=) 4: DF70A63C6BF111F0A9181236C4F9AE02.roa (hash: q7i3CsKTp0yL6iYZiFHlx/5hnnt+XvM120dMmxFLBaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2122 (0x84a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Dec 20 20:48:45 2025 GMT Not After : Dec 27 20:48:45 2025 GMT Subject: CN=69470bad-4fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:4c:29:8b:68:3c:ec:ad:55:48:7a:a6:4e: a1:81:ed:ee:b8:f7:fb:00:e7:29:be:65:41:27:b5: 47:91:45:03:01:7f:f1:e1:3d:2f:56:b7:ac:37:bd: b2:70:ef:88:7f:51:c5:36:1f:83:17:f7:29:76:e6: 76:b3:c2:3f:bf:72:4f:65:a1:7f:62:d0:c7:8c:0f: a9:6f:aa:c9:f0:7f:ef:5b:60:a6:f9:d6:02:2c:3e: 1d:de:c6:a0:20:cc:1c:e5:fa:20:cb:45:40:e4:d7: 92:d0:1c:05:7c:b7:89:46:b5:76:b9:e9:f5:0f:7b: a7:df:23:10:1b:5c:d0:d9:6c:f7:70:66:bd:7b:ca: b5:5f:a6:13:ab:dd:f2:c0:d8:f4:fb:aa:47:1c:88: 78:c2:6d:9d:5d:9b:5f:d3:2d:fc:90:bc:7e:9f:98: 63:ad:5e:4f:a7:9d:ad:55:ac:01:44:fa:29:d8:a3: de:61:82:ab:73:7b:f3:d0:ec:97:e1:97:05:40:40: c2:48:e0:08:5d:9c:1f:a8:80:58:20:c7:a8:02:44: a6:c4:2f:92:69:57:9e:40:0f:d5:bd:de:3b:08:93: 1d:ca:9c:95:77:9d:32:e2:ad:02:32:56:82:70:8f: d3:e4:a8:ee:35:a1:2a:8e:68:0c:7a:dd:bd:0f:28: 5d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5A:E3:3B:A4:81:7B:42:37:7A:34:98:51:6C:33:48:3A:0D:14:3B X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:c5:36:e0:76:ec:7b:98:83:f6:fb:61:57:65:8a:df:3e:70: 5c:ad:c5:d6:8b:dd:36:70:c7:e1:9a:0e:13:6d:9f:58:0e:0f: e6:30:c1:72:7f:5d:1c:e0:b7:35:9d:69:ac:30:28:63:f4:90: a1:24:27:c1:0f:85:e2:3e:72:a4:c2:79:1e:cd:10:f7:12:ca: a4:6f:f6:df:c5:1a:c8:5c:e7:c7:e5:03:db:3c:09:1e:de:42: 61:a0:5a:4a:ad:20:83:f4:8a:b9:1d:50:2f:80:7d:3f:7f:9d: 47:54:9e:f4:65:3f:97:b7:72:21:40:24:c7:08:01:14:16:66: fe:70:36:1c:8e:98:1c:53:77:62:9b:3c:d6:b7:3d:1c:b8:eb: c5:53:6d:29:d4:6a:b2:7e:a4:f6:24:f9:b8:32:d7:10:a2:ac: 1c:d5:4f:1e:d2:81:09:0c:c5:6b:ba:b5:17:5d:78:cd:84:f7: bc:fa:c5:60:ff:0d:8e:dc:b7:3a:20:88:24:db:1b:c4:27:a2: 23:72:f1:1d:63:6d:f7:53:4e:0a:22:57:0e:7c:c6:53:18:7d: 0b:dd:fe:e4:ae:32:ac:80:22:4d:e0:89:50:c5:5c:f6:9c:dd: a4:64:6b:89:c7:6a:ad:80:de:f8:56:3b:d8:2b:95:96:f5:ae: 7a:90:38:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjUxMjIwMjA0ODQ1WhcNMjUxMjI3MjA0ODQ1WjAYMRYwFAYD VQQDDA02OTQ3MGJhZC00ZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmVMKYtoPOytVUh6pk6hge3uuPf7AOcpvmVBJ7VHkUUDAX/x4T0vVresN72y cO+If1HFNh+DF/cpduZ2s8I/v3JPZaF/YtDHjA+pb6rJ8H/vW2Cm+dYCLD4d3sag IMwc5fogy0VA5NeS0BwFfLeJRrV2uen1D3un3yMQG1zQ2Wz3cGa9e8q1X6YTq93y wNj0+6pHHIh4wm2dXZtf0y38kLx+n5hjrV5Pp52tVawBRPop2KPeYYKrc3vz0OyX 4ZcFQEDCSOAIXZwfqIBYIMeoAkSmxC+SaVeeQA/Vvd47CJMdypyVd50y4q0CMlaC cI/T5KjuNaEqjmgMet29DyhdTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFa4zuk gXtCN3o0mFFsM0g6DRQ7MB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIxTbgdux7mIP2+2FXZYrfPnBcrcXWi902cMfhmg4TbZ9YDg/mMMFy f10c4Lc1nWmsMChj9JChJCfBD4XiPnKkwnkezRD3Esqkb/bfxRrIXOfH5QPbPAke 3kJhoFpKrSCD9Iq5HVAvgH0/f51HVJ70ZT+Xt3IhQCTHCAEUFmb+cDYcjpgcU3di mzzWtz0cuOvFU20p1GqyfqT2JPm4MtcQoqwc1U8e0oEJDMVrurUXXXjNhPe8+sVg /w2O3Lc6IIgk2xvEJ6IjcvEdY233U04KIlcOfMZTGH0L3f7krjKsgCJN4IlQxVz2 nN2kZGuJx2qtgN74VjvYK5WW9a56kDh2 -----END CERTIFICATE-----Generated at Sat Dec 20 22:51:12 2025 by rpki-client