This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft File: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json) Hash identifier: pxVebrszGhJdMFDe0bBkQNwiD3lw8+IU1PK4+AraEPE= Subject key identifier: 00:78:FC:84:97:4A:05:51:9C:9E:1A:59:4B:22:EB:47:52:CF:5F:BD Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft Manifest number: AA Signing time: Fri 19 Dec 2025 05:31:42 +0000 Manifest this update: Fri 19 Dec 2025 05:31:42 +0000 Manifest next update: Fri 26 Dec 2025 05:31:42 +0000 Files and hashes: 1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: bpWBuEL/kSGTQfU7mBkvIiubQciPi6bjbNwh6d5yQCM=) 2: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: 4EsnPXpvxqy3HJn3NlZW+cFTXRzXY3NCiOsR6rWCGCE=) 3: 6E68E3C8A05811F0B1978E4CC4F9AE02.roa (hash: K72GRxN+2ab3JpFVQDE8rFQueI0JJ5aBZHWdLQsQchI=) 4: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: YKwfhn84elYu/Y8KsthWeHLfxYMDii6IqoqFACcb2JY=) 5: 07E3560E707B11F08CCE202CC4F9AE02.roa (hash: hsVU/mADy2OXX1cQt4x/FdSd52E8zN5hB6L5qVYRCOM=) 6: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: cqpKhHQ429f1vtQzVS9iSS/6yBn8Tr7cOiYSPyhXnqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Validity Not Before: Dec 19 05:31:42 2025 GMT Not After : Dec 26 05:31:42 2025 GMT Subject: CN=6944e33e-c0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:58:b6:20:45:0a:71:53:c3:d9:28:e7:c0:a3: ad:c2:2a:b6:1e:db:e5:e3:ab:8c:bd:97:39:d2:db: 4f:84:fb:f7:c3:77:69:44:8e:5e:48:70:94:8e:3d: 73:69:ef:cf:19:ae:68:47:6f:01:85:0f:e4:6a:5d: cf:cb:b4:10:8d:a3:be:82:fa:fe:5f:23:13:44:3d: ac:72:2d:24:c1:60:85:eb:a0:e2:50:49:a4:0d:67: c2:88:09:0e:0c:76:77:84:1b:70:59:db:0e:90:c3: 79:e0:05:84:31:dc:6a:51:3b:c4:ba:e7:32:bf:66: 0f:c1:5d:74:95:1a:e3:80:01:4d:54:1a:6d:25:9f: 88:cf:8c:7a:72:f7:a7:8e:bb:03:25:83:da:02:11: 4b:ec:a6:2e:53:69:d8:59:ea:53:e6:d2:c3:01:be: 9e:ab:5f:91:9f:1f:48:8f:3b:64:05:aa:76:83:2a: 2a:3b:40:cc:39:09:b1:7b:a6:21:e2:0e:8a:be:71: e9:b6:7e:4f:de:e1:e7:f2:ed:fc:3a:37:c2:2d:ab: 54:0b:d6:b1:43:97:ac:b8:8b:c6:ac:a5:03:63:a3: 90:a1:3d:31:e9:a6:9d:6d:de:49:7d:a9:1b:5e:6c: 05:ac:09:f7:05:68:e4:36:0e:02:8f:5e:65:a0:ee: 00:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:78:FC:84:97:4A:05:51:9C:9E:1A:59:4B:22:EB:47:52:CF:5F:BD X509v3 Authority Key Identifier: keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:f3:1c:2f:21:12:6f:7f:fd:0f:9a:c7:31:b3:01:8f:87:54: e5:66:2c:dc:fe:7a:7d:d6:f0:7e:68:58:dc:01:eb:99:db:72: 1d:f9:98:e5:71:21:2e:cc:28:d5:93:1d:bc:bf:da:65:02:47: 72:70:eb:3b:a6:a1:17:fa:95:02:a3:a0:1f:e2:fe:b7:7b:10: 8b:11:33:9f:41:7e:64:bd:85:50:4c:6b:cc:4c:18:e8:1f:2c: 6b:0a:b3:6d:25:a8:89:bc:45:3a:5e:24:b7:26:6e:85:da:f0: 93:df:31:b3:8b:61:60:03:85:4f:66:e5:ae:59:cc:87:44:5f: 94:00:68:b6:5f:7c:87:a0:a1:9c:f4:f8:52:08:dd:d0:95:9b: d6:02:c4:cd:89:0a:52:f1:36:31:24:ac:0d:e7:19:7e:49:cc: 14:eb:99:59:d3:9a:4c:9a:eb:3f:4e:ea:7d:3a:3f:3f:46:64: b4:57:04:e3:a7:30:21:bf:24:53:3d:aa:59:9c:f7:be:ec:5e: 1f:05:2f:3f:38:52:75:0f:10:a3:1b:f0:15:cd:d3:80:68:21: 5c:19:9c:9d:7e:a8:7f:88:1f:d5:c7:96:32:a1:f5:7a:82:48: f0:90:ad:c9:84:eb:ef:7b:c3:8e:44:29:b5:42:0e:26:48:82: 21:d7:2f:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwMjYxMTAvBgNVBAUTKEJENzlBQzc2NDBDOTU1QzQzNUM4Q0Y1NUMyOTFGMTIy QjcwRTJGOTkwHhcNMjUxMjE5MDUzMTQyWhcNMjUxMjI2MDUzMTQyWjAYMRYwFAYD VQQDDA02OTQ0ZTMzZS1jMGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6li2IEUKcVPD2SjnwKOtwiq2Htvl46uMvZc50ttPhPv3w3dpRI5eSHCUjj1z ae/PGa5oR28BhQ/kal3Py7QQjaO+gvr+XyMTRD2sci0kwWCF66DiUEmkDWfCiAkO DHZ3hBtwWdsOkMN54AWEMdxqUTvEuucyv2YPwV10lRrjgAFNVBptJZ+Iz4x6cven jrsDJYPaAhFL7KYuU2nYWepT5tLDAb6eq1+Rnx9IjztkBap2gyoqO0DMOQmxe6Yh 4g6KvnHptn5P3uHn8u38OjfCLatUC9axQ5esuIvGrKUDY6OQoT0x6aadbd5Jfakb XmwFrAn3BWjkNg4Cj15loO4AAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAB4/ISX SgVRnJ4aWUsi60dSz1+9MB8GA1UdIwQYMBaAFL15rHZAyVXENcjPVcKR8SK3Di+Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjAyNi8zQkFBQUM0NEZC MjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZjUTF5TTlWd3BIeElyY09M NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYbXNka0RKVmNRMXlNOVZ3cEh4SXJjT0w1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjAyNi8zQkFBQUM0NEZCMjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZj UTF5TTlWd3BIeElyY09MNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA8xwvIRJvf/0PmscxswGPh1TlZizc/np91vB+aFjcAeuZ23Id+Zjl cSEuzCjVkx28v9plAkdycOs7pqEX+pUCo6Af4v63exCLETOfQX5kvYVQTGvMTBjo HyxrCrNtJaiJvEU6XiS3Jm6F2vCT3zGzi2FgA4VPZuWuWcyHRF+UAGi2X3yHoKGc 9PhSCN3QlZvWAsTNiQpS8TYxJKwN5xl+ScwU65lZ05pMmus/Tup9Oj8/RmS0VwTj pzAhvyRTPapZnPe+7F4fBS8/OFJ1DxCjG/AVzdOAaCFcGZydfqh/iB/Vx5YyofV6 gkjwkK3JhOvve8OORCm1Qg4mSIIh1y9G -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:43 2025 by rpki-client