This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft File: VlIPoddulfCBm23dSWe0VQRphp0.mft (raw, json) Hash identifier: KQhaRqSyT6I6WKcKc8p38Xj3OHTUJAhiPiGsfrQ1MJM= Subject key identifier: 2B:B7:C4:D0:7C:ED:38:C5:5D:86:6C:0F:BA:C1:9D:E5:D9:84:38:2E Authority key identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D Certificate issuer: /CN=A91A91CB/serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft Manifest number: 9E Signing time: Sun 21 Dec 2025 05:25:10 +0000 Manifest this update: Sun 21 Dec 2025 05:25:09 +0000 Manifest next update: Sun 28 Dec 2025 05:25:09 +0000 Files and hashes: 1: VlIPoddulfCBm23dSWe0VQRphp0.crl (hash: RokMQCMLuMNwfLeg/OgKiR0BfpQOEyl9ldtbx0SF5/U=) 2: EE8CD88EEA5A11EF922B276DC4F9AE02.roa (hash: NgoL1gjr88ZdEn/6hgZXntqKOlCBVmw0eMD59yFjWlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91CB, serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D Validity Not Before: Dec 21 05:25:09 2025 GMT Not After : Dec 28 05:25:09 2025 GMT Subject: CN=694784b5-2d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:11:84:30:7d:23:84:6d:64:17:16:68:fa:c0: 8e:b6:2f:76:ae:68:0f:14:7b:82:52:0d:77:27:0b: 3a:ca:21:10:23:b3:3b:ba:01:10:0b:0d:b3:f2:a9: 34:ad:df:93:01:eb:00:f7:67:08:9e:4d:58:a6:4b: af:a2:8a:94:25:13:f5:1b:a7:1e:c2:2d:de:08:be: 6f:e0:09:93:29:86:9e:9a:75:ec:93:8b:d0:27:b9: 3f:bf:eb:c9:65:eb:b3:da:c4:0d:be:de:aa:1a:87: 8e:bd:9f:31:4f:7e:58:46:18:6e:d0:1c:c2:ae:4e: 60:5e:10:ec:64:07:d2:e4:9c:4f:0d:11:ba:07:c8: 8f:06:99:ae:24:11:d4:6e:d6:1c:4b:60:e1:f8:a8: 73:3c:03:dd:65:7f:fd:c2:4c:ca:22:74:5f:d5:66: 3e:4f:d2:70:e3:27:bd:47:95:ad:ab:5c:d5:47:90: 25:d7:bd:3e:1e:cb:28:31:04:24:a7:34:ca:ca:b6: 73:cb:57:b9:ae:18:70:1b:9b:e6:05:12:a8:95:cd: 9d:e2:c0:f7:c6:53:1e:35:f4:51:57:51:56:98:29: 6d:0c:28:0d:6b:a7:17:c1:6a:33:15:90:57:f4:70: d1:3f:6f:2c:30:4f:3f:85:3c:90:d1:f8:e2:d8:31: a9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B7:C4:D0:7C:ED:38:C5:5D:86:6C:0F:BA:C1:9D:E5:D9:84:38:2E X509v3 Authority Key Identifier: keyid:56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:97:11:95:b6:33:ec:be:6b:90:83:21:f7:b6:16:35:69:5f: b3:63:16:c5:9e:bc:33:16:d8:03:7b:69:8e:5c:01:13:74:43: 45:54:fd:1d:aa:21:79:17:36:b9:55:b5:3b:db:9e:ab:c9:11: 6f:e0:7e:9d:17:84:0e:b7:51:3b:27:28:b9:30:e3:54:25:fe: ce:d9:06:58:c6:b8:fb:0a:24:63:8f:05:a9:7f:0f:17:5b:06: 2e:50:08:f4:d0:83:17:c4:23:99:fc:c3:14:01:c7:72:7e:92: 60:61:94:e7:30:7e:54:d1:94:5b:db:c4:ad:f8:46:a1:06:8e: 12:a2:2e:88:60:2f:3e:a8:40:e9:69:f1:62:39:34:c5:8a:7f: 71:a7:fa:dd:e4:2c:03:14:a9:de:d0:f4:fb:f5:a3:05:8c:a4: 08:39:f4:a4:5e:e9:3d:61:c6:16:a6:55:d9:dc:8e:9d:c9:4e: 6f:38:02:04:83:e3:0b:c0:77:3d:3c:94:de:8d:65:60:c1:c6: 43:c6:59:e1:f9:ea:f3:72:d3:9b:e3:5f:6c:ec:d4:62:2b:84: 9c:c8:fa:cc:3c:97:da:8f:e8:9e:6c:07:09:64:0f:48:15:a9: 5a:fd:b5:a7:b2:f1:c3:c5:d2:c6:72:c0:a3:aa:0d:a9:a3:d0: fd:51:03:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQ0IxMTAvBgNVBAUTKDU2NTIwRkExRDc2RTk1RjA4MTlCNkRERDQ5NjdCNDU1 MDQ2OTg2OUQwHhcNMjUxMjIxMDUyNTA5WhcNMjUxMjI4MDUyNTA5WjAYMRYwFAYD VQQDDA02OTQ3ODRiNS0yZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hGEMH0jhG1kFxZo+sCOti92rmgPFHuCUg13Jws6yiEQI7M7ugEQCw2z8qk0 rd+TAesA92cInk1YpkuvooqUJRP1G6cewi3eCL5v4AmTKYaemnXsk4vQJ7k/v+vJ Zeuz2sQNvt6qGoeOvZ8xT35YRhhu0BzCrk5gXhDsZAfS5JxPDRG6B8iPBpmuJBHU btYcS2Dh+KhzPAPdZX/9wkzKInRf1WY+T9Jw4ye9R5Wtq1zVR5Al170+HssoMQQk pzTKyrZzy1e5rhhwG5vmBRKolc2d4sD3xlMeNfRRV1FWmCltDCgNa6cXwWozFZBX 9HDRP28sME8/hTyQ0fji2DGpCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCu3xNB8 7TjFXYZsD7rBneXZhDguMB8GA1UdIwQYMBaAFFZSD6HXbpXwgZtt3UlntFUEaYad MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFDQi81QjZGQTM2MEVB NUExMUVGQjg0QUU0NjhDNEY5QUUwMi9WbElQb2RkdWxmQ0JtMjNkU1dlMFZRUnBo cDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZsSVBvZGR1bGZDQm0yM2RTV2UwVlFScGhwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFDQi81QjZGQTM2MEVBNUExMUVGQjg0QUU0NjhDNEY5QUUwMi9WbElQb2RkdWxm Q0JtMjNkU1dlMFZRUnBocDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBslxGVtjPsvmuQgyH3thY1aV+zYxbFnrwzFtgDe2mOXAETdENFVP0d qiF5Fza5VbU7256ryRFv4H6dF4QOt1E7Jyi5MONUJf7O2QZYxrj7CiRjjwWpfw8X WwYuUAj00IMXxCOZ/MMUAcdyfpJgYZTnMH5U0ZRb28St+EahBo4Soi6IYC8+qEDp afFiOTTFin9xp/rd5CwDFKne0PT79aMFjKQIOfSkXuk9YcYWplXZ3I6dyU5vOAIE g+MLwHc9PJTejWVgwcZDxlnh+erzctOb419s7NRiK4ScyPrMPJfaj+iebAcJZA9I Fala/bWnsvHDxdLGcsCjqg2po9D9UQP7 -----END CERTIFICATE-----Generated at Sun Dec 21 14:39:31 2025 by rpki-client