This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json) Hash identifier: KLpIk9ZM7UtVrRhSApcL5eEBhc8XO/TP9sZidP8nFNU= Subject key identifier: 9E:AC:0B:1F:48:2D:CE:59:89:69:41:F4:2D:31:94:CE:DE:C7:49:A7 Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0C58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft Manifest number: 0C4E Signing time: Thu 18 Dec 2025 18:21:32 +0000 Manifest this update: Thu 18 Dec 2025 18:21:31 +0000 Manifest next update: Thu 25 Dec 2025 18:21:31 +0000 Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: pKjP5VMrPsNEpHUgw9PMbWqVKvMx+2hfvl41njWq3fQ=) 2: 5EA04634181911EA9CA3C619C4F9AE02.roa (hash: 29yqRgflWjw/V78Nb1MTmLxw9ept1pEu77NRsVFXw6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: Dec 18 18:21:31 2025 GMT Not After : Dec 25 18:21:31 2025 GMT Subject: CN=6944462b-c188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:43:2e:2a:6d:14:42:dd:2d:c6:c3:25:e6:1b: 0e:a3:97:ea:e7:2c:ed:ea:46:61:bd:1d:44:bd:bb: 28:42:8f:0b:8a:75:5d:e4:3d:83:e9:8e:f8:a9:53: e3:32:6d:db:d3:1a:4f:c2:b1:b8:fa:78:c1:aa:6d: df:d6:49:57:ee:17:68:96:46:6f:f7:eb:8f:80:8c: 04:f6:9f:c3:46:95:cf:ac:25:c3:16:fc:75:e1:9f: 5c:5b:ea:f3:87:44:ca:a2:77:70:c4:bf:3f:7e:8d: 23:95:9f:bd:2b:f0:b1:ed:54:8e:1c:5e:27:73:05: 8e:ff:56:33:38:5e:c2:c1:dd:93:8f:1b:3b:2a:50: 07:7a:ff:50:90:f4:ce:ee:72:91:f2:b3:ec:27:65: 79:c7:a9:48:83:c8:04:f6:d7:76:fa:07:7a:7e:06: a6:9d:9d:c6:7b:2e:84:c8:8b:b8:46:dd:68:16:79: b3:60:59:ed:45:0b:e9:f4:46:3a:98:bf:79:97:a2: 9a:5e:c5:a6:09:79:ea:0d:4b:34:22:6e:33:72:d2: c8:6b:90:3f:10:36:10:5d:b5:07:e1:b7:68:ac:e4: f7:d5:86:61:eb:46:c4:ad:c7:fc:21:39:6c:b8:44: 45:6b:d6:c9:29:23:4e:ad:5b:9e:cf:0d:36:9f:2a: c2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AC:0B:1F:48:2D:CE:59:89:69:41:F4:2D:31:94:CE:DE:C7:49:A7 X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:81:7b:f5:37:25:7f:7b:d2:49:6d:12:0f:89:e2:a0:7a:2d: a8:97:a3:4a:59:af:d3:17:5b:8f:10:9a:20:ec:06:e5:4d:51: 47:5f:75:6e:92:77:48:3e:de:73:a6:bc:07:4d:30:38:a6:ee: ea:b4:21:c4:53:b1:e3:8e:d6:34:0f:6d:b9:22:24:27:68:e8: 1f:90:a7:1b:84:35:35:8b:b8:17:92:2f:3c:a1:05:b1:24:04: d7:ed:60:47:d2:f8:a5:a2:d1:5f:8c:c3:d9:16:f0:da:64:77: a1:f8:72:c2:d5:6d:c5:6a:32:48:2c:f2:d2:54:65:e1:b0:6f: 4b:af:d2:79:e8:e3:cd:9e:ef:17:da:90:00:15:5f:d4:52:74: 24:dc:3a:47:ef:24:19:d0:3f:7b:20:f6:2f:78:f5:c0:d6:0f: 92:37:72:d8:86:fb:f5:a2:d7:e7:f2:d3:22:a2:ee:96:d8:e2: e4:c7:39:4c:fe:b3:f2:81:5b:88:68:0c:7d:a7:ff:e5:08:f3: d5:80:ad:9a:c9:e2:f0:6b:c2:3d:16:3d:e9:2a:6c:67:a3:f1: 98:98:cd:51:7b:0f:3a:7e:ef:d1:0e:d3:4c:66:8d:76:e1:48: 28:7d:e9:b1:9f:8d:fc:18:7f:eb:6f:a1:c1:64:c5:99:b2:d8: 56:fc:77:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjUxMjE4MTgyMTMxWhcNMjUxMjI1MTgyMTMxWjAYMRYwFAYD VQQDDA02OTQ0NDYyYi1jMTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUMuKm0UQt0txsMl5hsOo5fq5yzt6kZhvR1EvbsoQo8LinVd5D2D6Y74qVPj Mm3b0xpPwrG4+njBqm3f1klX7hdolkZv9+uPgIwE9p/DRpXPrCXDFvx14Z9cW+rz h0TKondwxL8/fo0jlZ+9K/Cx7VSOHF4ncwWO/1YzOF7Cwd2Tjxs7KlAHev9QkPTO 7nKR8rPsJ2V5x6lIg8gE9td2+gd6fgamnZ3Gey6EyIu4Rt1oFnmzYFntRQvp9EY6 mL95l6KaXsWmCXnqDUs0Im4zctLIa5A/EDYQXbUH4bdorOT31YZh60bErcf8ITls uERFa9bJKSNOrVuezw02nyrCfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6sCx9I Lc5ZiWlB9C0xlM7ex0mnMB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZFQi8zRUMwMkVDQTE3NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFR bzVaU3k2cUtEbUdyQ3A4SEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4gXv1NyV/e9JJbRIPieKgei2ol6NKWa/TF1uPEJog7AblTVFHX3Vu kndIPt5zprwHTTA4pu7qtCHEU7HjjtY0D225IiQnaOgfkKcbhDU1i7gXki88oQWx JATX7WBH0vilotFfjMPZFvDaZHeh+HLC1W3FajJILPLSVGXhsG9Lr9J56OPNnu8X 2pAAFV/UUnQk3DpH7yQZ0D97IPYvePXA1g+SN3LYhvv1otfn8tMiou6W2OLkxzlM /rPygVuIaAx9p//lCPPVgK2ayeLwa8I9Fj3pKmxno/GYmM1Rew86fu/RDtNMZo12 4Ugofemxn438GH/rb6HBZMWZsthW/HcZ -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:48 2025 by rpki-client