This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft File: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json) Hash identifier: 4Gk9+aQpyOmBEdI8Of2b/NUt55k+i+2zPE/vzvgdS5Y= Subject key identifier: 8E:3B:13:BB:8A:B8:01:C2:DA:AB:F9:14:B6:EE:DE:EB:AC:81:52:58 Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 Certificate issuer: /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Certificate serial: 350A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft Manifest number: 34FA Signing time: Wed 24 Dec 2025 14:56:31 +0000 Manifest this update: Wed 24 Dec 2025 14:56:30 +0000 Manifest next update: Wed 31 Dec 2025 14:56:30 +0000 Files and hashes: 1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: Tb2Ak9lOdTVU1R3g/aTt0RByKVcxw36jvocXTJPg1Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 14:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13578 (0x350a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Validity Not Before: Dec 24 14:56:30 2025 GMT Not After : Dec 31 14:56:30 2025 GMT Subject: CN=694bff1f-89c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:71:08:27:52:e3:0b:f7:dd:ec:73:b3:fe: df:b3:ff:fe:20:a0:43:a9:43:64:ee:9b:36:57:23: 6f:2b:5e:eb:79:5c:07:da:7d:ce:a8:19:d8:19:14: 30:2b:c2:6c:21:7d:3e:e9:44:66:78:5c:21:14:e9: 4a:9e:38:2e:95:21:14:db:02:07:1e:f1:49:8a:91: 7e:3d:b5:61:93:fe:1d:52:ce:b1:e2:96:35:aa:2d: 65:92:2d:ae:fe:80:25:1c:22:ff:02:68:70:64:d8: 4c:ac:c8:40:3c:cd:e5:5f:89:58:7d:4a:42:00:53: 1f:1a:2c:7c:94:e6:83:83:0a:48:5c:88:28:55:7c: 81:69:cf:f8:f5:0b:30:9e:5b:aa:70:23:e7:af:c1: fb:0f:68:20:41:9e:27:85:c8:6c:bb:e9:01:6f:cc: 71:a8:b5:7e:96:09:08:3c:29:ee:88:1f:dd:71:57: ba:03:4f:9e:02:15:f7:45:35:fc:93:de:59:ca:a2: 16:a2:7c:3c:dd:72:59:3d:8b:e0:f1:97:a5:a1:0c: 5d:b5:a0:f9:47:85:e9:12:a5:28:9f:5a:ad:a6:58: 26:c2:92:7d:73:39:ad:a6:19:db:39:df:50:a1:c9: b1:60:23:8d:99:5f:bd:70:1a:7e:3a:20:f3:45:f7: 7f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3B:13:BB:8A:B8:01:C2:DA:AB:F9:14:B6:EE:DE:EB:AC:81:52:58 X509v3 Authority Key Identifier: keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:02:d0:78:91:d8:b0:46:d7:18:8b:13:20:19:21:42:8b:e4: f2:2e:75:27:f5:80:72:30:76:8c:8b:ec:34:a3:ca:98:fe:f8: 5a:69:7c:52:2e:96:f2:6d:d0:74:69:98:cc:f5:a3:b4:05:12: ed:08:d3:ef:66:74:a9:14:6f:c9:34:47:30:72:5f:85:65:fd: f2:b1:09:85:f9:61:a6:29:4a:bd:15:e9:6f:c4:f3:16:80:67: d9:1d:44:93:81:09:8a:cb:f1:74:e1:36:1a:b0:e3:90:26:53: 9f:10:5a:e0:14:5d:91:e0:54:8d:0b:72:e8:10:41:88:b3:81: 60:81:da:69:e0:72:00:e4:86:b1:6c:b6:0c:a9:2a:2a:6a:0f: 46:26:0b:d0:84:01:4d:62:50:91:bc:36:01:9c:b3:bc:28:11: 99:69:3c:35:e4:eb:42:1f:08:26:16:3f:22:6c:fb:d5:20:d7: 4d:24:e1:03:05:ca:1b:af:29:30:85:0c:a3:17:e0:12:d6:4b: 34:33:1c:ef:e8:82:b5:cd:36:d4:35:96:3d:cf:5f:dd:c4:ad: 41:b8:5e:04:e8:bd:4a:09:b0:7d:de:a1:97:1f:49:8c:d1:cf: 9c:6b:b7:50:51:bb:a4:67:7d:69:a6:fa:41:e6:96:3a:af:2f: 52:e4:b5:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIwQTMxMTAvBgNVBAUTKEQxNUE1QUY5QUY4RDk5REZFNUU0NEQzNUVFNTUwMTA1 RkVEOTQ1MTEwHhcNMjUxMjI0MTQ1NjMwWhcNMjUxMjMxMTQ1NjMwWjAYMRYwFAYD VQQDDA02OTRiZmYxZi04OWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcZxCCdS4wv33exzs/7fs//+IKBDqUNk7ps2VyNvK17reVwH2n3OqBnYGRQw K8JsIX0+6URmeFwhFOlKnjgulSEU2wIHHvFJipF+PbVhk/4dUs6x4pY1qi1lki2u /oAlHCL/AmhwZNhMrMhAPM3lX4lYfUpCAFMfGix8lOaDgwpIXIgoVXyBac/49Qsw nluqcCPnr8H7D2ggQZ4nhchsu+kBb8xxqLV+lgkIPCnuiB/dcVe6A0+eAhX3RTX8 k95ZyqIWonw83XJZPYvg8ZeloQxdtaD5R4XpEqUon1qtplgmwpJ9czmtphnbOd9Q ocmxYCONmV+9cBp+OiDzRfd/aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI47E7uK uAHC2qv5FLbu3uusgVJYMB8GA1UdIwQYMBaAFNFaWvmvjZnf5eRNNe5VAQX+2UUR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjBBMy9BRjRCOEE2MjFE OUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1kX2w1RTAxN2xVQkJmN1pS UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWcGEtYS1ObWRfbDVFMDE3bFVCQmY3WlJSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjBBMy9BRjRCOEE2MjFEOUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1k X2w1RTAxN2xVQkJmN1pSUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjAtB4kdiwRtcYixMgGSFCi+TyLnUn9YByMHaMi+w0o8qY/vhaaXxS LpbybdB0aZjM9aO0BRLtCNPvZnSpFG/JNEcwcl+FZf3ysQmF+WGmKUq9FelvxPMW gGfZHUSTgQmKy/F04TYasOOQJlOfEFrgFF2R4FSNC3LoEEGIs4Fggdpp4HIA5Iax bLYMqSoqag9GJgvQhAFNYlCRvDYBnLO8KBGZaTw15OtCHwgmFj8ibPvVINdNJOED BcobrykwhQyjF+AS1ks0Mxzv6IK1zTbUNZY9z1/dxK1BuF4E6L1KCbB93qGXH0mM 0c+ca7dQUbukZ31ppvpB5pY6ry9S5LUb -----END CERTIFICATE-----Generated at Wed Dec 24 21:50:03 2025 by rpki-client