This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft File: vLfPRDC7mOoEhRw0BybliBUOE50.mft (raw, json) Hash identifier: NtS1w7rvwWWs6Mxfv6vlZ5Y3dVU+ImQPXFifNEbr9Iw= Subject key identifier: A7:63:EF:2B:C8:D8:CC:A7:1D:D9:CF:41:70:49:E5:4B:1C:E9:94:9A Authority key identifier: BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D Certificate issuer: /CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft Manifest number: 0146 Signing time: Wed 31 Dec 2025 03:35:45 +0000 Manifest this update: Wed 31 Dec 2025 03:35:45 +0000 Manifest next update: Wed 07 Jan 2026 03:35:45 +0000 Files and hashes: 1: vLfPRDC7mOoEhRw0BybliBUOE50.crl (hash: ddCDQfm85qQ4n6Mw5Mi56rpvei4W/gAdg61rcLhoIIY=) 2: F9393E440C4811EF97CBBC31C4F9AE02.roa (hash: MLTTfCwREUsGVfNKsAVzpfz2Sc45FONq7T/5iif0e5s=) 3: BD5B75800C4E11EF85EEFC1FC4F9AE02.roa (hash: yvhUjHAiX+EPlHQdcU4E7154R9m6cxsrAxWsgLI83Mw=) 4: BE3E0EE00C4E11EF85EEFC1FC4F9AE02.roa (hash: VQG0WF9XSuXwWbMIIOSS0EFZqyrabhvnJP0dkdCPAVw=) 5: 8F64B3240C4B11EFACEF2C6FC4F9AE02.roa (hash: 2CtFG7HWVSfrrJnKmf+0gUAHRHN8PeRmFCcQjXhYXBE=) 6: D6871FC40C5711EFBD14BD5AC4F9AE02.roa (hash: ct7HNnoVMRTu9GGbvMdnAsr99cdgOMQ5g1ojGQzID0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 03:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91993A0, serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D Validity Not Before: Dec 31 03:35:45 2025 GMT Not After : Jan 7 03:35:45 2026 GMT Subject: CN=69549a11-f1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4d:4d:b6:6b:85:ee:1f:90:0a:c3:1d:d3:ad: a1:7d:ff:b6:22:18:d8:3a:49:7f:81:9a:87:78:39: 04:54:15:f9:25:e2:c0:83:0c:96:01:d6:4c:63:3c: 41:2a:4a:04:4b:c2:00:f1:f2:8f:b9:ed:75:db:f4: 3f:52:7e:5d:b5:c3:66:e7:1a:97:c5:5d:75:98:d6: 86:de:f1:42:d7:30:18:3b:4a:5f:9b:b6:2f:7a:aa: 98:fe:b0:24:c4:2b:88:bc:ab:ec:e3:98:42:7c:a4: f3:71:1c:b3:5c:07:9c:8e:07:8a:85:aa:ab:b2:05: 62:7e:2f:1f:86:2a:33:f5:a9:16:30:6a:5c:e9:db: 0a:f5:08:46:c4:89:af:de:e0:db:2a:f6:96:83:dd: fd:c0:96:cb:83:2e:72:ee:b5:39:c8:40:11:ba:fd: df:2f:46:e6:0e:ae:db:98:82:18:6b:03:91:5f:9a: 0d:6e:5f:48:8b:b8:01:10:a5:97:07:fc:5d:72:41: be:86:79:8b:e5:60:26:c7:57:c6:5f:ab:af:00:55: 64:0d:33:90:1d:86:82:24:a6:fc:36:df:fc:f8:3d: 8d:7e:57:66:db:27:c5:7e:d6:71:ff:c4:07:43:c5: 51:08:47:80:cc:36:e2:3e:9b:c6:a3:55:dc:0e:5d: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:63:EF:2B:C8:D8:CC:A7:1D:D9:CF:41:70:49:E5:4B:1C:E9:94:9A X509v3 Authority Key Identifier: keyid:BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:82:bc:b9:e3:96:c7:d6:0f:9a:5a:d3:72:b3:fd:6d:7e:7a: 3e:8a:74:60:7d:9d:1d:11:e1:d6:64:b2:6e:e4:f4:eb:a0:eb: c6:a0:e2:f9:d0:73:a2:fd:b9:e1:f0:fc:1c:95:70:4e:f5:45: bb:a0:b6:26:6b:9b:83:2e:c9:2c:6a:3d:02:ae:02:7b:9b:fc: 8c:a2:59:65:79:de:8e:b9:8b:75:19:af:29:24:89:2b:f0:5e: e6:9f:22:65:fd:c6:f0:12:a7:70:c1:51:52:eb:49:01:9b:06: e1:f4:7f:19:92:9e:f3:06:ab:61:d7:39:43:51:56:81:0f:5f: d4:76:5d:34:48:b9:03:54:c5:aa:0d:3a:44:50:6c:eb:fb:1a: d9:a7:c7:b6:a2:39:7f:6e:48:72:2d:e6:c3:e0:b7:cd:26:b5: 11:91:c3:6f:e6:d4:8c:60:a4:1d:ab:91:37:40:08:4d:2c:c9: fe:8f:5c:4f:f1:b2:35:f5:97:e7:2a:eb:08:6c:dc:61:13:e4: 37:b8:82:30:e2:b3:2c:a5:78:be:96:7b:66:23:90:62:ce:de: db:e9:bf:76:12:c2:0f:ab:bd:6a:21:b8:ed:d3:b8:85:bb:d1: 2a:39:0f:97:84:c0:48:1e:8b:48:a2:12:be:4f:dc:82:98:03: c8:8f:b4:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkzQTAxMTAvBgNVBAUTKEJDQjdDRjQ0MzBCQjk4RUEwNDg1MUMzNDA3MjZFNTg4 MTUwRTEzOUQwHhcNMjUxMjMxMDMzNTQ1WhcNMjYwMTA3MDMzNTQ1WjAYMRYwFAYD VQQDDA02OTU0OWExMS1mMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz01NtmuF7h+QCsMd062hff+2IhjYOkl/gZqHeDkEVBX5JeLAgwyWAdZMYzxB KkoES8IA8fKPue112/Q/Un5dtcNm5xqXxV11mNaG3vFC1zAYO0pfm7YveqqY/rAk xCuIvKvs45hCfKTzcRyzXAecjgeKhaqrsgVifi8fhioz9akWMGpc6dsK9QhGxImv 3uDbKvaWg939wJbLgy5y7rU5yEARuv3fL0bmDq7bmIIYawORX5oNbl9Ii7gBEKWX B/xdckG+hnmL5WAmx1fGX6uvAFVkDTOQHYaCJKb8Nt/8+D2Nfldm2yfFftZx/8QH Q8VRCEeAzDbiPpvGo1XcDl37gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdj7yvI 2MynHdnPQXBJ5Usc6ZSaMB8GA1UdIwQYMBaAFLy3z0Qwu5jqBIUcNAcm5YgVDhOd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTNBMC9BNTk1NUU1NjBD NDUxMUVGOUU3RTA1MURDNEY5QUUwMi92TGZQUkRDN21Pb0VoUncwQnlibGlCVU9F NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZMZlBSREM3bU9vRWhSdzBCeWJsaUJVT0U1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTNBMC9BNTk1NUU1NjBDNDUxMUVGOUU3RTA1MURDNEY5QUUwMi92TGZQUkRDN21P b0VoUncwQnlibGlCVU9FNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBogry545bH1g+aWtNys/1tfno+inRgfZ0dEeHWZLJu5PTroOvGoOL5 0HOi/bnh8PwclXBO9UW7oLYma5uDLsksaj0CrgJ7m/yMollled6OuYt1Ga8pJIkr 8F7mnyJl/cbwEqdwwVFS60kBmwbh9H8Zkp7zBqth1zlDUVaBD1/Udl00SLkDVMWq DTpEUGzr+xrZp8e2ojl/bkhyLebD4LfNJrURkcNv5tSMYKQdq5E3QAhNLMn+j1xP 8bI19ZfnKusIbNxhE+Q3uIIw4rMspXi+lntmI5Bizt7b6b92EsIPq71qIbjt07iF u9EqOQ+XhMBIHotIohK+T9yCmAPIj7SU -----END CERTIFICATE-----Generated at Wed Dec 31 09:01:57 2025 by rpki-client