This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: DXtkV5IGyUbA7ZYxOy69OOWNvA/9NW/dFbgjtPIvEq8= Subject key identifier: 23:2A:9A:90:71:81:4C:1D:F1:77:D8:58:29:BE:92:A3:CE:82:15:4A Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 354F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 3522 Signing time: Sat 20 Dec 2025 14:36:06 +0000 Manifest this update: Sat 20 Dec 2025 14:36:05 +0000 Manifest next update: Sat 27 Dec 2025 14:36:05 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: xSOCpMEgYIEe3MUFlXawy/VVR1+ZELglBvf4srnE96g=) 2: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: YTAhLYofQ5bGqpN1MRJJdGJjIa93aOaav1SZOkx9D70=) 3: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: 2sM6dqjwFaWvanKsFaRgJilTOFHKXatSdEC+MoptC6Q=) 4: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: tRzHmoCM5bp0eiCAe2WTWAhqYkb98p9OjQpa6ZuzTto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13647 (0x354f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Dec 20 14:36:05 2025 GMT Not After : Dec 27 14:36:05 2025 GMT Subject: CN=6946b456-f58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:51:69:94:f4:08:e0:af:15:07:59:0c:83: bb:0b:54:2c:45:e8:3f:4e:de:c8:11:c5:c6:53:f3: c2:ab:28:36:bf:49:e3:87:a6:cf:4e:83:77:3d:89: b6:b2:c2:ff:8f:79:5d:ce:39:b7:86:6c:e4:c4:43: 3b:9f:83:30:ba:cb:bf:f7:62:7a:03:0b:65:01:bc: 8f:3b:eb:f9:cb:a1:e9:e0:5d:56:63:ee:0b:55:12: b8:8c:4f:19:cd:24:f4:1e:13:f3:13:48:94:13:f0: 5a:9f:e0:a2:f9:f0:6a:df:d6:70:56:63:df:d2:c1: ab:b6:e9:de:78:d4:6b:85:6c:a9:48:5b:3b:bb:75: e6:2d:5c:28:14:fc:5f:93:5c:e7:04:58:38:1b:96: 0e:cd:69:81:85:65:44:f9:b7:ab:54:a3:b6:5d:e4: 28:55:95:91:ec:7a:41:71:10:92:29:ef:8a:0e:d4: 6a:0f:0d:03:98:67:3c:37:d9:8d:27:3c:4f:34:9d: 50:f7:86:6b:e5:e9:e3:c2:26:26:54:99:d8:33:f1: 84:c1:c8:9f:a5:85:ae:5d:32:74:d7:02:62:8f:1d: 01:49:24:e4:30:9b:c4:92:09:50:26:3b:23:ec:a5: 33:8b:7f:ab:aa:3d:77:10:94:16:8e:c1:de:d3:e6: 3f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2A:9A:90:71:81:4C:1D:F1:77:D8:58:29:BE:92:A3:CE:82:15:4A X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:8b:00:e5:dc:b0:61:fb:fe:9d:df:0a:34:9b:25:92:bb:ac: 5d:6b:67:7c:3d:64:c1:cd:a0:85:42:6f:f3:00:4c:73:c1:87: 67:b7:f7:ae:ea:28:ce:31:cb:67:2a:4f:01:b8:ec:b8:4d:03: 33:e8:20:41:52:13:c5:07:cd:d2:6a:f7:82:71:b8:6d:1f:dc: 4f:02:97:24:9f:b3:53:45:41:a7:d0:37:94:fb:e0:ca:3c:6f: 92:46:1f:f1:14:e1:80:fd:d9:5d:8a:eb:d2:de:96:3c:fe:4c: 22:4e:4b:ad:68:d2:ba:8d:52:31:72:15:e1:d8:5b:27:0e:6c: 29:ac:f2:28:ee:2f:e7:ff:fa:8a:c8:92:16:25:ae:95:da:7f: 29:00:9b:fb:52:77:23:93:c9:d2:57:f8:89:0f:3e:17:3d:78: 82:7a:58:73:bd:2d:bb:77:da:02:bb:6f:a2:f1:46:cb:2b:95: 4f:49:c5:5b:56:a9:68:8b:51:e7:d7:ec:f2:30:6a:c2:e5:21: bf:04:2b:05:4a:4f:dd:71:5b:26:69:9c:34:70:56:06:15:05: 2d:3c:65:1f:b4:ef:5b:a3:46:fc:6c:9c:a6:71:80:11:84:a7: b5:be:eb:9c:81:a5:95:45:65:06:41:0f:30:0f:21:e9:32:54: 78:53:83:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjUxMjIwMTQzNjA1WhcNMjUxMjI3MTQzNjA1WjAYMRYwFAYD VQQDDA02OTQ2YjQ1Ni1mNThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPFRaZT0COCvFQdZDIO7C1QsReg/Tt7IEcXGU/PCqyg2v0njh6bPToN3PYm2 ssL/j3ldzjm3hmzkxEM7n4Mwusu/92J6AwtlAbyPO+v5y6Hp4F1WY+4LVRK4jE8Z zST0HhPzE0iUE/Ban+Ci+fBq39ZwVmPf0sGrtuneeNRrhWypSFs7u3XmLVwoFPxf k1znBFg4G5YOzWmBhWVE+berVKO2XeQoVZWR7HpBcRCSKe+KDtRqDw0DmGc8N9mN JzxPNJ1Q94Zr5enjwiYmVJnYM/GEwcifpYWuXTJ01wJijx0BSSTkMJvEkglQJjsj 7KUzi3+rqj13EJQWjsHe0+Y/XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMqmpBx gUwd8XfYWCm+kqPOghVKMB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEiwDl3LBh+/6d3wo0myWSu6xda2d8PWTBzaCFQm/zAExzwYdnt/eu 6ijOMctnKk8BuOy4TQMz6CBBUhPFB83SaveCcbhtH9xPApckn7NTRUGn0DeU++DK PG+SRh/xFOGA/dldiuvS3pY8/kwiTkutaNK6jVIxchXh2FsnDmwprPIo7i/n//qK yJIWJa6V2n8pAJv7Uncjk8nSV/iJDz4XPXiCelhzvS27d9oCu2+i8UbLK5VPScVb Vqloi1Hn1+zyMGrC5SG/BCsFSk/dcVsmaZw0cFYGFQUtPGUftO9bo0b8bJymcYAR hKe1vuucgaWVRWUGQQ8wDyHpMlR4U4NC -----END CERTIFICATE-----Generated at Sun Dec 21 04:58:25 2025 by rpki-client