This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft File: VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json) Hash identifier: NcfJTmNCjUSOif2Q20YBt4HFZV6/zB7QZ38nqhX68fA= Subject key identifier: 86:7B:73:FB:AC:A6:6F:C9:FC:5A:73:08:97:1D:A7:B3:66:81:41:53 Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Certificate serial: 0CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft Manifest number: 0C97 Signing time: Wed 24 Dec 2025 18:04:50 +0000 Manifest this update: Wed 24 Dec 2025 18:04:49 +0000 Manifest next update: Wed 31 Dec 2025 18:04:49 +0000 Files and hashes: 1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: JzQ4Ylib1ytex9hlrhxTTjRvhyEASEaGUQ1+cEJYn+o=) 2: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: u6PjzNYcnOXcXRJn9HLyhk2+LGVsDog450i4Tie6o0k=) 3: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: sXqVXr7ZHzH2JmpUEnTy5shMtTPK9xhXC3ul6iYq9+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Validity Not Before: Dec 24 18:04:49 2025 GMT Not After : Dec 31 18:04:49 2025 GMT Subject: CN=694c2b42-25f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:31:08:ca:75:7a:77:b0:47:18:3d:53:43:55: 82:88:55:c7:27:a7:e2:57:fc:b1:78:16:e0:fe:98: 31:1a:7e:e6:7c:b4:34:89:5e:71:34:71:6f:a5:9e: 06:c2:52:cd:21:8c:a9:74:e5:12:d5:c0:76:31:63: 03:1c:16:3c:fd:1a:74:12:bd:d0:75:22:7c:3c:35: 05:0a:5f:1c:60:3a:25:f0:6e:82:70:1e:2d:e1:ac: 58:f3:1f:86:f3:bb:60:74:da:48:43:c4:98:8d:12: fb:9f:f4:14:c0:56:52:7e:3d:d0:2a:39:dd:76:c7: 62:1e:5f:26:32:f8:69:b2:53:57:73:20:eb:d6:1b: 02:38:60:26:74:69:2f:dd:0c:a0:b5:0c:46:65:f3: 47:6c:01:8f:7d:6f:4d:0c:00:db:32:0b:05:3b:98: d1:a4:19:21:44:99:94:3e:06:e9:6b:0c:31:82:e4: 80:8b:75:31:74:23:2a:49:f4:ca:f9:58:5a:c7:ba: 0b:67:7d:21:79:d9:d4:71:2b:18:fc:f6:51:48:c6: d2:fb:54:54:ce:4c:81:ec:7d:9b:38:fb:89:d1:8f: 9e:ec:c2:8b:dd:b7:e9:73:0a:0e:46:72:2a:a5:ff: 91:61:ca:e9:48:ce:0a:6e:56:07:d8:e2:ab:fa:4a: 38:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7B:73:FB:AC:A6:6F:C9:FC:5A:73:08:97:1D:A7:B3:66:81:41:53 X509v3 Authority Key Identifier: keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:cf:7a:1c:df:77:55:1f:74:75:9a:8a:14:19:37:1b:06:54: 30:82:7d:8d:9d:19:f2:2b:ca:c2:b3:31:1e:87:26:7b:bd:40: 0d:80:f9:4e:ae:d1:08:97:57:69:96:21:13:5c:aa:01:e5:19: 32:92:dc:5e:d4:af:07:2a:89:1d:f3:ad:ff:31:a4:1a:84:e6: 8e:61:3e:22:1e:4f:82:c1:0f:31:31:cc:da:7c:5e:99:97:7d: 96:92:4b:60:e8:b7:50:d1:16:f2:5d:2a:b8:f1:fc:3a:a5:b8: cd:e7:ae:cb:fa:2e:c2:6b:84:9d:6b:73:a9:3c:67:54:c4:75: e5:9b:27:0a:69:3d:cb:95:2b:8a:1c:e6:3a:77:03:df:06:e8: bd:9c:05:5a:e7:da:43:d5:8e:3b:6c:d1:8b:27:ea:8d:af:d9: 13:40:94:d5:27:67:7b:49:02:1a:f2:ce:1e:e4:c9:d4:cb:8e: 2e:05:f7:83:01:29:25:4a:30:5d:55:54:c9:e1:49:75:29:29: 80:2a:8c:84:70:e2:d3:9c:14:ff:ff:ce:df:c8:c3:d4:f1:7e: 3e:13:9a:87:21:13:77:dd:73:6f:8b:ee:aa:7b:eb:b5:1d:dd: 80:e5:5d:f6:23:86:4b:37:69:68:21:7a:75:41:e1:7f:56:c4: 1d:67:5e:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzREMxMTAvBgNVBAUTKDU1RjJFNDg3NDAwNThFOEZDQzRGOTAxQTRBMzNFMUY0 MTc2MjAwRjgwHhcNMjUxMjI0MTgwNDQ5WhcNMjUxMjMxMTgwNDQ5WjAYMRYwFAYD VQQDDA02OTRjMmI0Mi0yNWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDEIynV6d7BHGD1TQ1WCiFXHJ6fiV/yxeBbg/pgxGn7mfLQ0iV5xNHFvpZ4G wlLNIYypdOUS1cB2MWMDHBY8/Rp0Er3QdSJ8PDUFCl8cYDol8G6CcB4t4axY8x+G 87tgdNpIQ8SYjRL7n/QUwFZSfj3QKjnddsdiHl8mMvhpslNXcyDr1hsCOGAmdGkv 3QygtQxGZfNHbAGPfW9NDADbMgsFO5jRpBkhRJmUPgbpawwxguSAi3UxdCMqSfTK +Vhax7oLZ30hednUcSsY/PZRSMbS+1RUzkyB7H2bOPuJ0Y+e7MKL3bfpcwoORnIq pf+RYcrpSM4KblYH2OKr+ko46QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZ7c/us pm/J/FpzCJcdp7NmgUFTMB8GA1UdIwQYMBaAFFXy5IdABY6PzE+QGkoz4fQXYgD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNEQy8wNjYzOUY4NjBB OTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpvX01UNUFhU2pQaDlCZGlB UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTGtoMEFGam9fTVQ1QWFTalBoOUJkaUFQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNEQy8wNjYzOUY4NjBBOTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpv X01UNUFhU2pQaDlCZGlBUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1z3oc33dVH3R1mooUGTcbBlQwgn2NnRnyK8rCszEehyZ7vUANgPlO rtEIl1dpliETXKoB5Rkyktxe1K8HKokd863/MaQahOaOYT4iHk+CwQ8xMczafF6Z l32Wkktg6LdQ0RbyXSq48fw6pbjN567L+i7Ca4Sda3OpPGdUxHXlmycKaT3LlSuK HOY6dwPfBui9nAVa59pD1Y47bNGLJ+qNr9kTQJTVJ2d7SQIa8s4e5MnUy44uBfeD ASklSjBdVVTJ4Ul1KSmAKoyEcOLTnBT//87fyMPU8X4+E5qHIRN33XNvi+6qe+u1 Hd2A5V32I4ZLN2loIXp1QeF/VsQdZ16I -----END CERTIFICATE-----Generated at Wed Dec 24 19:31:34 2025 by rpki-client