This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json) Hash identifier: X6qaK7gDIVJELPGZfjq3qlaBH1NLtoWCN5imlPAb7uA= Subject key identifier: C2:F5:AB:7C:57:E8:B7:74:CA:05:03:85:9B:D3:46:2B:72:7A:82:5E Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0E37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft Manifest number: 0E2E Signing time: Thu 18 Dec 2025 17:37:11 +0000 Manifest this update: Thu 18 Dec 2025 17:37:10 +0000 Manifest next update: Thu 25 Dec 2025 17:37:10 +0000 Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: 41EPr+c8lkLkiXgR1h8a4JOwDPwii31OYaeunlglT6o=) 2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: J3asPRjW2OTxFxfAPN+SaGNCDyYHApcc4gcIkuEE9lM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3639 (0xe37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: Dec 18 17:37:10 2025 GMT Not After : Dec 25 17:37:10 2025 GMT Subject: CN=69443bc6-b7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4b:f1:3b:9b:b5:46:fb:c9:2f:06:34:86:55: 29:8f:83:9c:f9:f2:e0:0e:8b:f1:7c:0f:c4:b9:53: 6d:24:7b:45:d4:b6:d7:67:80:e1:bd:38:d0:59:0c: a5:69:10:76:f1:f3:b5:86:22:a7:bf:a4:50:b7:a8: c1:7a:97:c2:54:c3:5d:ce:49:63:3f:f7:91:6d:1c: b0:fc:f6:9e:a4:96:fb:12:54:8f:77:95:7d:f2:43: 88:70:4c:14:7c:d7:1f:7c:4b:48:47:1f:7a:22:ca: 8a:02:03:bc:50:0c:9c:10:36:39:22:4f:8e:df:95: 0b:e2:fb:d4:04:3a:1d:a3:6a:64:4c:09:16:c9:ef: 71:6f:91:15:43:48:37:81:b9:78:c3:a3:4c:7c:7c: ea:02:fc:4e:78:40:2d:28:74:b2:5d:35:e2:e0:f9: 58:9a:2b:a7:9a:12:c8:04:d0:68:8e:e7:9c:2a:09: ee:ff:d5:72:e3:53:67:35:97:48:89:da:38:75:ca: b2:d5:60:3f:f8:f2:78:a0:71:b6:c7:79:1d:5a:08: 74:81:46:a8:6f:48:f2:72:57:26:e7:57:e7:9c:2f: 00:8f:5f:c1:3a:2b:3a:be:94:78:dd:d7:f6:d3:fe: 0f:f1:23:e6:5e:6f:f8:dc:2d:18:4b:f4:f4:4a:b9: fc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F5:AB:7C:57:E8:B7:74:CA:05:03:85:9B:D3:46:2B:72:7A:82:5E X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:97:76:d2:1b:7b:2f:04:f8:a7:68:15:8a:c3:f2:f4:ee:77: 41:2a:3d:33:d2:b5:ee:78:ea:b9:0f:6f:6b:f4:01:ab:9b:80: 92:8b:8c:48:fb:46:47:9b:49:63:0f:a4:b8:bd:dc:5f:5e:b6: ec:6b:e5:8f:d6:0f:f3:6c:00:c1:09:17:9b:58:45:c7:24:e0: d9:73:1e:5c:6d:ea:63:e3:8c:99:f3:b7:c8:1f:7d:ec:4f:3f: ec:42:09:4a:86:ae:8f:70:a6:f0:7e:6b:76:67:80:9f:93:e9: 9d:91:eb:da:a1:c5:78:61:78:8d:d3:20:c6:85:df:26:ad:06: 2b:e7:e4:42:4e:e3:68:f2:9a:a5:8c:d8:eb:c2:74:b1:83:f0: 7f:a1:78:f4:6c:45:bc:79:c7:fe:b3:f6:de:1e:de:88:22:f2: 45:9c:b7:b6:db:6a:6b:95:6c:f8:67:d7:df:0f:82:85:e9:95: 67:07:67:e8:4c:d9:9a:4e:8d:e5:c3:50:6f:55:6d:31:07:64: 34:d0:74:07:6e:1a:fa:92:a7:5d:21:d5:23:d0:39:5d:83:51: 5c:23:e3:84:43:87:f4:d8:07:b1:45:c5:af:d8:0d:32:87:23: 2b:cd:18:97:fc:c4:15:d3:0c:c0:c6:77:dc:93:19:4c:cf:cf: a6:8d:87:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjUxMjE4MTczNzEwWhcNMjUxMjI1MTczNzEwWjAYMRYwFAYD VQQDDA02OTQ0M2JjNi1iN2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUvxO5u1RvvJLwY0hlUpj4Oc+fLgDovxfA/EuVNtJHtF1LbXZ4DhvTjQWQyl aRB28fO1hiKnv6RQt6jBepfCVMNdzkljP/eRbRyw/PaepJb7ElSPd5V98kOIcEwU fNcffEtIRx96IsqKAgO8UAycEDY5Ik+O35UL4vvUBDodo2pkTAkWye9xb5EVQ0g3 gbl4w6NMfHzqAvxOeEAtKHSyXTXi4PlYmiunmhLIBNBojuecKgnu/9Vy41NnNZdI ido4dcqy1WA/+PJ4oHG2x3kdWgh0gUaob0jyclcm51fnnC8Aj1/BOis6vpR43df2 0/4P8SPmXm/43C0YS/T0Srn85QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFML1q3xX 6Ld0ygUDhZvTRityeoJeMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6l3bSG3svBPinaBWKw/L07ndBKj0z0rXueOq5D29r9AGrm4CSi4xI +0ZHm0ljD6S4vdxfXrbsa+WP1g/zbADBCRebWEXHJODZcx5cbepj44yZ87fIH33s Tz/sQglKhq6PcKbwfmt2Z4Cfk+mdkevaocV4YXiN0yDGhd8mrQYr5+RCTuNo8pql jNjrwnSxg/B/oXj0bEW8ecf+s/beHt6IIvJFnLe222prlWz4Z9ffD4KF6ZVnB2fo TNmaTo3lw1BvVW0xB2Q00HQHbhr6kqddIdUj0Dldg1FcI+OEQ4f02AexRcWv2A0y hyMrzRiX/MQV0wzAxnfckxlMz8+mjYfk -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:59 2025 by rpki-client