This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft File: VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json) Hash identifier: k0sRVAqVnbmhclEPDcER5rchPVt25OpFdppOeyxEpKc= Subject key identifier: FD:48:30:CB:47:E5:05:92:13:A0:BE:2C:1F:BA:71:C5:24:74:F6:E4 Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Certificate serial: 0CA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft Manifest number: 0C99 Signing time: Sun 28 Dec 2025 18:02:02 +0000 Manifest this update: Sun 28 Dec 2025 18:02:02 +0000 Manifest next update: Sun 04 Jan 2026 18:02:02 +0000 Files and hashes: 1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: ClGAlibnzLOAuVz6DCeD4i1OrnCVO4FzkiI/poED89s=) 2: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: u6PjzNYcnOXcXRJn9HLyhk2+LGVsDog450i4Tie6o0k=) 3: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: sXqVXr7ZHzH2JmpUEnTy5shMtTPK9xhXC3ul6iYq9+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 18:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Validity Not Before: Dec 28 18:02:02 2025 GMT Not After : Jan 4 18:02:02 2026 GMT Subject: CN=6951709a-251e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2d:28:fc:b4:53:83:48:ce:43:1b:53:eb:1e: 89:ee:34:08:1d:08:b3:7b:5f:39:ff:7d:ef:ed:f9: 53:9e:0e:7c:05:cc:e0:5e:b1:0e:5f:cf:c9:db:9c: 72:96:b0:9e:10:9d:e3:48:27:af:56:fa:01:7b:3e: d6:e1:9f:53:d4:be:dd:43:1a:dc:a3:35:32:a9:f6: e4:f1:53:d8:46:0d:28:84:5b:d9:11:50:93:77:c2: 95:91:bd:7f:ca:56:a0:a8:4f:c1:73:e4:0b:fb:97: 3e:70:98:7f:4a:71:65:66:e8:64:a0:20:ff:b1:64: 91:b8:e6:03:97:25:db:a2:28:93:b1:28:d4:1e:0b: 12:aa:d7:70:4c:01:20:39:aa:8e:30:1d:52:25:f4: b6:fc:3e:9d:d9:aa:87:de:24:5b:8a:ab:fe:5e:3c: 6c:e0:ed:b8:f0:28:d4:df:79:e9:20:5f:68:49:e0: 9e:8c:23:a0:fa:f3:63:a7:b8:78:1d:86:d1:43:4f: b4:7b:9b:9e:73:a3:fd:af:a6:2e:1f:4d:65:2f:31: 1d:e2:11:03:34:79:76:0b:81:2a:32:67:84:9e:3e: 4c:55:e0:c3:f2:95:ba:d9:47:cb:01:de:88:7c:5f: d1:9c:b1:2c:25:9a:51:ed:07:50:05:5a:49:27:ca: e0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:48:30:CB:47:E5:05:92:13:A0:BE:2C:1F:BA:71:C5:24:74:F6:E4 X509v3 Authority Key Identifier: keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:7b:e3:96:b4:0f:70:cf:ad:70:f1:e8:4d:68:9d:fb:28:c9: 46:23:3b:ef:21:4f:53:2b:be:76:1b:96:8f:c8:68:5f:95:75: 00:dd:ce:1a:42:57:0f:f6:ae:4c:5f:3e:c2:f1:23:2a:40:c3: f7:38:2d:6c:54:9a:20:b0:a0:46:6b:6a:87:67:f2:99:a9:46: 56:e6:98:2b:98:c3:0e:34:ec:ba:33:c0:77:b3:d6:3a:f8:2b: ed:ac:2b:88:58:16:c8:28:a2:85:96:ec:b6:e7:f7:2a:5a:bb: 67:c4:ba:5c:e1:20:cc:68:ac:8d:3e:d1:63:d3:5e:b1:0a:8f: 1c:1c:45:e8:17:81:21:9a:0f:1a:4b:d8:1f:e1:1e:ce:73:5a: c5:64:db:a4:ea:29:17:eb:c7:bd:79:77:46:63:a3:f9:17:8b: 0b:b6:de:6c:90:1a:56:49:f7:94:9f:a3:14:ca:14:82:6c:e8: 11:a7:d9:8c:83:4e:78:7b:a0:bb:52:22:9a:f2:aa:c9:0e:6e: f0:24:28:dc:cb:16:aa:dc:de:c7:cb:af:c8:87:77:54:c5:a4: b6:80:57:31:fb:73:19:df:7f:a1:e6:7a:ba:8b:7e:92:2b:72: f4:a0:bc:12:40:82:07:0f:bb:46:d0:b8:b3:33:33:ca:ac:ae: b3:17:64:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzREMxMTAvBgNVBAUTKDU1RjJFNDg3NDAwNThFOEZDQzRGOTAxQTRBMzNFMUY0 MTc2MjAwRjgwHhcNMjUxMjI4MTgwMjAyWhcNMjYwMTA0MTgwMjAyWjAYMRYwFAYD VQQDDA02OTUxNzA5YS0yNTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlS0o/LRTg0jOQxtT6x6J7jQIHQize185/33v7flTng58BczgXrEOX8/J25xy lrCeEJ3jSCevVvoBez7W4Z9T1L7dQxrcozUyqfbk8VPYRg0ohFvZEVCTd8KVkb1/ ylagqE/Bc+QL+5c+cJh/SnFlZuhkoCD/sWSRuOYDlyXboiiTsSjUHgsSqtdwTAEg OaqOMB1SJfS2/D6d2aqH3iRbiqv+Xjxs4O248CjU33npIF9oSeCejCOg+vNjp7h4 HYbRQ0+0e5uec6P9r6YuH01lLzEd4hEDNHl2C4EqMmeEnj5MVeDD8pW62UfLAd6I fF/RnLEsJZpR7QdQBVpJJ8rgfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1IMMtH 5QWSE6C+LB+6ccUkdPbkMB8GA1UdIwQYMBaAFFXy5IdABY6PzE+QGkoz4fQXYgD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNEQy8wNjYzOUY4NjBB OTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpvX01UNUFhU2pQaDlCZGlB UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTGtoMEFGam9fTVQ1QWFTalBoOUJkaUFQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNEQy8wNjYzOUY4NjBBOTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpv X01UNUFhU2pQaDlCZGlBUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2e+OWtA9wz61w8ehNaJ37KMlGIzvvIU9TK752G5aPyGhflXUA3c4a QlcP9q5MXz7C8SMqQMP3OC1sVJogsKBGa2qHZ/KZqUZW5pgrmMMONOy6M8B3s9Y6 +CvtrCuIWBbIKKKFluy25/cqWrtnxLpc4SDMaKyNPtFj016xCo8cHEXoF4Ehmg8a S9gf4R7Oc1rFZNuk6ikX68e9eXdGY6P5F4sLtt5skBpWSfeUn6MUyhSCbOgRp9mM g054e6C7UiKa8qrJDm7wJCjcyxaq3N7Hy6/Ih3dUxaS2gFcx+3MZ33+h5nq6i36S K3L0oLwSQIIHD7tG0LizMzPKrK6zF2Qh -----END CERTIFICATE-----Generated at Mon Dec 29 16:20:54 2025 by rpki-client