This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft File: votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json) Hash identifier: MUQf4nBfWg0XjsX63O90c0IAaKww0VAawBojH/n1zqU= Subject key identifier: EB:D5:0D:0D:EF:DB:D7:2E:A8:9A:3E:21:5F:BB:CF:C2:95:A8:15:91 Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B Certificate issuer: /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft Manifest number: B8 Signing time: Mon 29 Dec 2025 05:04:52 +0000 Manifest this update: Mon 29 Dec 2025 05:04:51 +0000 Manifest next update: Mon 05 Jan 2026 05:04:51 +0000 Files and hashes: 1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: +UqOCRmsXXbW+Ymr7mkhKGTmfdTioS+J81TFcfl+OqY=) 2: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: q3EE6bhQvO1jqMvzi5TnaMDMrsSHuVeWmQU0kCxzZeQ=) 3: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: +20O4NUWPTxqKeXepVeDCO/g+GXNSbJwYfdmkDR6B2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 05:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B Validity Not Before: Dec 29 05:04:51 2025 GMT Not After : Jan 5 05:04:51 2026 GMT Subject: CN=69520bf4-5774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ba:66:51:ef:28:11:16:15:a4:75:84:45:09: f7:c4:5b:1b:25:eb:3f:05:f1:b5:d5:b0:89:33:9f: 69:b5:cd:1b:b0:d2:87:bf:b2:b3:a9:2e:03:ff:ff: 15:ac:ee:40:b8:ce:1c:cd:a9:da:db:21:fb:7b:95: ab:f0:5c:7d:4e:e2:f8:66:9c:18:bd:24:cf:84:19: 76:89:3f:ef:eb:09:26:73:0a:3a:e2:82:65:9d:a7: f3:ee:9d:a1:58:f3:49:be:c0:ff:28:ee:ab:d3:e6: 51:7b:ee:4d:9c:e3:d3:0c:6a:5f:49:29:1b:3e:90: 6d:55:37:4d:a4:11:18:61:0d:b9:70:d5:71:e0:b3: 62:bc:74:78:c9:31:12:62:23:45:87:5c:49:da:2b: 3a:f0:26:d8:93:c8:96:63:e0:4e:17:e6:b4:d2:6a: 0b:fb:c7:d1:6c:05:10:18:c4:08:d3:dc:90:8b:dc: c6:8e:58:15:16:19:60:72:ca:6a:9c:1b:00:f7:a1: a3:c5:6b:e5:1f:a1:ff:95:15:1d:99:78:5a:de:de: a7:12:7e:98:44:75:e5:b4:cc:bb:67:2d:b3:05:2b: 91:8c:dc:7d:f5:77:19:c4:79:f2:46:e9:ab:7f:7c: 69:73:b6:aa:ee:a7:a8:4b:e3:5c:da:d5:8f:f7:3d: 70:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D5:0D:0D:EF:DB:D7:2E:A8:9A:3E:21:5F:BB:CF:C2:95:A8:15:91 X509v3 Authority Key Identifier: keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:59:69:c3:c8:6b:eb:c5:ef:c9:39:ca:62:87:5e:14:85:dc: 7b:d5:48:9f:56:54:7d:16:af:c2:2b:e6:c0:fd:a1:39:6a:a1: b5:87:d7:c1:9d:03:79:b9:1d:95:2d:97:04:f9:96:f7:87:bf: 8f:e6:fa:41:6d:5e:82:e6:9b:2b:0c:d9:91:9f:96:c3:a5:d2: 97:43:94:b8:fb:0f:6b:61:bb:73:f9:f7:be:1c:14:5e:94:1b: 00:18:4f:f7:e3:91:f6:26:02:7c:50:c3:8c:d0:86:4d:cc:e1: 0c:83:06:93:99:2a:7d:30:c2:58:c7:85:97:12:7d:71:b5:2b: d5:92:1e:d7:73:db:0e:a4:0f:11:3e:d5:03:a3:41:23:96:04: 8d:c4:42:d7:2f:c9:0f:77:2c:eb:b7:e4:35:59:0c:e6:2a:00: 37:ed:12:f4:60:21:e4:33:67:21:5b:d5:97:e5:72:5b:0e:8e: a3:2c:96:df:1c:9a:00:84:d4:f9:f2:7f:1e:6f:cc:f1:20:12: b5:d0:5d:17:9d:b0:35:77:cb:66:34:da:28:24:71:fc:c3:05: 4a:88:aa:96:1a:8b:21:86:cf:3b:ac:6c:ef:9b:77:75:9c:6b: 84:5d:b7:33:5c:42:32:67:f1:53:a1:c1:72:9b:a8:81:09:ae: 8a:b5:69:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIzRDkxMTAvBgNVBAUTKEJFOEI0NzMzQjFBRThBNDczNkI3RTkxMzI3MzNENjU0 MDkxRTNEMkIwHhcNMjUxMjI5MDUwNDUxWhcNMjYwMTA1MDUwNDUxWjAYMRYwFAYD VQQDDA02OTUyMGJmNC01Nzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrpmUe8oERYVpHWERQn3xFsbJes/BfG11bCJM59ptc0bsNKHv7KzqS4D//8V rO5AuM4czana2yH7e5Wr8Fx9TuL4ZpwYvSTPhBl2iT/v6wkmcwo64oJlnafz7p2h WPNJvsD/KO6r0+ZRe+5NnOPTDGpfSSkbPpBtVTdNpBEYYQ25cNVx4LNivHR4yTES YiNFh1xJ2is68CbYk8iWY+BOF+a00moL+8fRbAUQGMQI09yQi9zGjlgVFhlgcspq nBsA96GjxWvlH6H/lRUdmXha3t6nEn6YRHXltMy7Zy2zBSuRjNx99XcZxHnyRumr f3xpc7aq7qeoS+Nc2tWP9z1wWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvVDQ3v 29cuqJo+IV+7z8KVqBWRMB8GA1UdIwQYMBaAFL6LRzOxropHNrfpEycz1lQJHj0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNEOS83QjhCRDZDQ0M5 RDExMUVGOTc1QkRDNEJDNEY5QUUwMi92b3RITTdHdWlrYzJ0LWtUSnpQV1ZBa2VQ U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZvdEhNN0d1aWtjMnQta1RKelBXVkFrZVBTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjNEOS83QjhCRDZDQ0M5RDExMUVGOTc1QkRDNEJDNEY5QUUwMi92b3RITTdHdWlr YzJ0LWtUSnpQV1ZBa2VQU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeWWnDyGvrxe/JOcpih14Uhdx71UifVlR9Fq/CK+bA/aE5aqG1h9fB nQN5uR2VLZcE+Zb3h7+P5vpBbV6C5psrDNmRn5bDpdKXQ5S4+w9rYbtz+fe+HBRe lBsAGE/345H2JgJ8UMOM0IZNzOEMgwaTmSp9MMJYx4WXEn1xtSvVkh7Xc9sOpA8R PtUDo0EjlgSNxELXL8kPdyzrt+Q1WQzmKgA37RL0YCHkM2chW9WX5XJbDo6jLJbf HJoAhNT58n8eb8zxIBK10F0XnbA1d8tmNNooJHH8wwVKiKqWGoshhs87rGzvm3d1 nGuEXbczXEIyZ/FTocFym6iBCa6KtWl1 -----END CERTIFICATE-----Generated at Mon Dec 29 06:48:57 2025 by rpki-client