This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json) Hash identifier: 8QAa498zPhxa8xTjlQX6nCrd4eeueL75yrOaeNoApwE= Subject key identifier: D4:3E:6E:65:4C:06:3D:90:5B:C8:FA:E8:86:F4:AE:4C:4E:91:F1:2B Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0CAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft Manifest number: 0CA6 Signing time: Thu 18 Dec 2025 18:05:24 +0000 Manifest this update: Thu 18 Dec 2025 18:05:23 +0000 Manifest next update: Thu 25 Dec 2025 18:05:23 +0000 Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: ArfiT9LYUS6f6c/KtkfLgwc3oADCUk7/is+E9hQK31o=) 2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: MoMl/DlQY62DjxtHrGyaIblAP24xLixngcq1DFl3W2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3245 (0xcad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: Dec 18 18:05:23 2025 GMT Not After : Dec 25 18:05:23 2025 GMT Subject: CN=69444264-f56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2b:13:10:aa:04:b9:4d:8b:55:70:f8:bb:8c: 9d:69:c3:95:35:21:e0:d8:3a:82:4c:31:07:4c:82: 4c:28:47:ba:0e:e0:e7:df:07:cb:83:97:92:22:c7: a8:b0:cc:c2:68:01:ad:da:81:08:21:60:1a:12:14: 0d:25:f2:d0:36:5d:41:02:d4:31:db:f3:73:9b:7f: 83:61:8b:32:8b:ba:a0:69:c2:9b:7d:a8:f2:0a:e1: 5f:61:65:9e:6f:30:6a:ad:12:93:6d:67:6d:21:1c: 56:49:c3:08:45:0b:30:8a:59:94:7e:97:c2:11:ba: e8:40:93:b6:23:66:a7:d6:6b:98:c3:1a:04:1f:01: 47:64:da:6f:22:b7:32:4b:d4:9f:05:43:db:47:fa: 21:40:f8:9b:d4:20:31:8b:39:d5:c6:45:c3:e0:02: b3:e3:65:71:34:26:ca:dc:91:40:7c:5a:a0:99:7e: dc:29:b3:ed:49:13:f5:3a:32:4d:0f:34:c3:61:6a: 25:54:0b:33:e0:4c:71:e1:0c:0b:37:b2:4c:cf:fd: 7e:2a:f6:d6:77:e7:3c:ec:78:b9:7c:d6:35:72:e5: c4:11:2e:57:64:0e:bc:bd:67:ab:a3:84:a5:f3:ed: 1a:9f:07:78:af:e7:a5:91:ea:82:fa:9b:c7:34:c4: c4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3E:6E:65:4C:06:3D:90:5B:C8:FA:E8:86:F4:AE:4C:4E:91:F1:2B X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f3:72:21:5a:fd:a5:d0:32:15:7c:f3:88:c9:5d:4f:b5:ca: 64:5b:d6:2d:da:38:be:b3:f1:62:c5:66:94:05:e6:d2:25:0d: 7b:af:f3:5e:3e:de:a1:da:c7:4a:32:42:82:dc:81:5d:95:da: e8:3e:3b:3c:97:9a:46:fa:bb:5b:dd:c6:fd:48:2d:bc:c1:63: 7d:bf:b7:4e:a2:58:a6:60:0b:e1:03:5a:b1:cc:62:b0:eb:64: be:06:54:49:a8:d7:b9:28:5d:ac:db:89:76:38:a1:8c:45:0d: b9:bc:6f:c4:2d:02:57:08:3c:7c:a1:50:be:5b:4a:10:1b:a1: 9b:96:15:ed:86:2a:b1:f4:47:79:79:e4:a5:12:3f:24:c4:d9: 5f:28:3e:a7:76:aa:86:ae:a4:ab:73:d9:44:b2:53:0d:a5:8b: d4:c8:8e:75:06:9d:14:43:3c:13:a1:df:52:47:15:c6:dc:e7: e6:64:56:54:f7:80:a7:45:c5:d5:95:08:95:63:85:ff:1a:d1: d0:80:6c:d6:84:7e:e2:9f:e1:16:41:4e:9c:e7:94:12:4c:fd: 71:80:a9:b7:0c:40:5c:bd:6b:4f:5c:f0:67:8e:87:e7:dd:a5: a4:7a:20:d7:78:27:58:4b:02:8e:fe:27:34:64:33:3d:55:7c: 3c:d2:83:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjUxMjE4MTgwNTIzWhcNMjUxMjI1MTgwNTIzWjAYMRYwFAYD VQQDDA02OTQ0NDI2NC1mNTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiysTEKoEuU2LVXD4u4ydacOVNSHg2DqCTDEHTIJMKEe6DuDn3wfLg5eSIseo sMzCaAGt2oEIIWAaEhQNJfLQNl1BAtQx2/Nzm3+DYYsyi7qgacKbfajyCuFfYWWe bzBqrRKTbWdtIRxWScMIRQswilmUfpfCEbroQJO2I2an1muYwxoEHwFHZNpvIrcy S9SfBUPbR/ohQPib1CAxiznVxkXD4AKz42VxNCbK3JFAfFqgmX7cKbPtSRP1OjJN DzTDYWolVAsz4Exx4QwLN7JMz/1+KvbWd+c87Hi5fNY1cuXEES5XZA68vWero4Sl 8+0anwd4r+elkeqC+pvHNMTElQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQ+bmVM Bj2QW8j66Ib0rkxOkfErMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv UVlGYWpONmhrSzZsRUMzODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ83IhWv2l0DIVfPOIyV1PtcpkW9Yt2ji+s/FixWaUBebSJQ17r/Ne Pt6h2sdKMkKC3IFdldroPjs8l5pG+rtb3cb9SC28wWN9v7dOolimYAvhA1qxzGKw 62S+BlRJqNe5KF2s24l2OKGMRQ25vG/ELQJXCDx8oVC+W0oQG6GblhXthiqx9Ed5 eeSlEj8kxNlfKD6ndqqGrqSrc9lEslMNpYvUyI51Bp0UQzwTod9SRxXG3OfmZFZU 94CnRcXVlQiVY4X/GtHQgGzWhH7in+EWQU6c55QSTP1xgKm3DEBcvWtPXPBnjofn 3aWkeiDXeCdYSwKO/ic0ZDM9VXw80oO4 -----END CERTIFICATE-----Generated at Fri Dec 19 17:36:38 2025 by rpki-client