This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json) Hash identifier: v/5/f03Zze40jsAaBlJojV8dua4sX2iQq3rWTh9Nyi4= Subject key identifier: D2:06:2C:8A:AE:26:86:B5:E1:3F:44:AF:0D:2A:A8:4B:02:61:50:26 Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Certificate serial: 0FC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft Manifest number: 0FB7 Signing time: Thu 18 Dec 2025 17:20:11 +0000 Manifest this update: Thu 18 Dec 2025 17:20:10 +0000 Manifest next update: Thu 25 Dec 2025 17:20:10 +0000 Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: jLNtmP2tt4RFCUU+zP+7xDgYoACvC8y/m06O33x+xkY=) 2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: PC0yewcBGOHCUfaxZkh95BTHNrPHiXnNi3ncb6P6Ep4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4035 (0xfc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Validity Not Before: Dec 18 17:20:10 2025 GMT Not After : Dec 25 17:20:10 2025 GMT Subject: CN=694437cb-6434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:43:4f:a1:bd:b5:6e:71:59:97:d4:05:fb: 4c:73:9e:58:7d:ce:76:d3:38:da:a3:89:44:f9:b4: a7:cd:01:51:b1:91:74:04:af:97:d9:61:0e:47:ef: 5d:92:88:22:0e:9c:9b:2e:ce:d0:54:7f:ed:61:83: ff:d4:09:ec:6a:0c:1a:6e:59:99:93:3c:1a:a8:f8: e3:19:51:c6:d9:2f:8b:70:9b:ac:99:c8:db:37:2a: 11:d1:48:a7:de:28:a0:8e:2b:f8:99:82:ce:f9:ec: 21:91:46:24:0c:d6:11:97:37:46:c0:50:83:48:bf: 1d:a1:ac:cc:52:29:e6:32:f1:f3:05:11:4a:bd:41: 6d:04:05:21:6a:37:6b:59:ad:53:10:89:f6:a0:ff: 74:9c:04:61:56:49:91:fe:48:7e:16:26:99:eb:33: a3:c0:a9:5a:18:fe:8b:51:f7:85:81:d7:85:d7:fe: e5:36:40:a7:f5:c5:99:33:ce:d7:75:47:dd:fb:48: 53:da:c0:6d:b1:80:0f:0e:02:d9:7e:86:bd:00:e6: 45:77:f0:7f:84:1a:f8:22:cb:72:08:5d:d3:1d:65: af:72:07:21:d6:61:ee:f1:d3:28:0f:2e:41:66:98: 5d:6c:44:30:33:90:b5:5c:e5:81:7b:c3:ce:a1:30: 94:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:06:2C:8A:AE:26:86:B5:E1:3F:44:AF:0D:2A:A8:4B:02:61:50:26 X509v3 Authority Key Identifier: keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:bd:b1:b7:fa:4c:fd:ce:aa:9b:3c:6a:8c:a3:5f:27:7d:f4: ed:09:7b:0f:8f:b9:52:1b:95:5b:28:32:84:bb:62:44:d6:93: ac:c6:81:e8:cb:9d:ce:f0:8d:34:9f:41:a8:2f:de:fc:2f:40: a9:ff:d6:37:73:7f:b7:f0:57:32:6f:e8:93:ca:de:51:7f:73: fe:f5:88:bf:65:e0:d3:63:a7:cc:70:62:14:96:5f:72:01:81: da:4d:95:e9:39:d5:5f:19:fe:f6:ed:e0:b2:16:03:2b:97:43: 04:eb:3c:a2:f6:d9:10:5f:93:f6:2a:19:dc:0b:02:2b:99:b6: db:5c:ca:82:48:30:aa:76:31:da:ae:cc:e9:27:6e:6c:36:ed: a2:c0:5c:1e:8e:ec:29:30:14:a3:5b:ff:36:71:19:d6:04:a0: ef:70:32:0f:04:49:0d:08:f4:ac:75:38:3a:15:2c:d2:3a:f8: dd:30:7a:dd:89:85:0d:56:da:c9:0c:3c:70:91:a6:a6:b2:6b: 71:a4:63:a4:b5:f2:f5:ff:85:8a:b9:56:4a:21:ca:c4:b7:53: a3:74:50:e0:ee:3c:53:6b:d8:af:51:61:c0:4d:a1:9c:e7:e0: d1:f0:01:be:39:a9:eb:e5:75:13:26:85:93:07:a8:0a:7f:be: 5c:cb:30:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy OTlERDdCQzIwHhcNMjUxMjE4MTcyMDEwWhcNMjUxMjI1MTcyMDEwWjAYMRYwFAYD VQQDDA02OTQ0MzdjYi02NDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eJDT6G9tW5xWZfUBftMc55Yfc520zjao4lE+bSnzQFRsZF0BK+X2WEOR+9d kogiDpybLs7QVH/tYYP/1AnsagwablmZkzwaqPjjGVHG2S+LcJusmcjbNyoR0Uin 3iigjiv4mYLO+ewhkUYkDNYRlzdGwFCDSL8doazMUinmMvHzBRFKvUFtBAUhajdr Wa1TEIn2oP90nARhVkmR/kh+FiaZ6zOjwKlaGP6LUfeFgdeF1/7lNkCn9cWZM87X dUfd+0hT2sBtsYAPDgLZfoa9AOZFd/B/hBr4IstyCF3THWWvcgch1mHu8dMoDy5B ZphdbEQwM5C1XOWBe8POoTCUIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIGLIqu Joa14T9Erw0qqEsCYVAmMB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Mi82RDZBMkEyODZDRDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVW UkNUNV9veW9VelFwbmRlOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjvbG3+kz9zqqbPGqMo18nffTtCXsPj7lSG5VbKDKEu2JE1pOsxoHo y53O8I00n0GoL978L0Cp/9Y3c3+38Fcyb+iTyt5Rf3P+9Yi/ZeDTY6fMcGIUll9y AYHaTZXpOdVfGf727eCyFgMrl0ME6zyi9tkQX5P2KhncCwIrmbbbXMqCSDCqdjHa rszpJ25sNu2iwFwejuwpMBSjW/82cRnWBKDvcDIPBEkNCPSsdTg6FSzSOvjdMHrd iYUNVtrJDDxwkaamsmtxpGOktfL1/4WKuVZKIcrEt1OjdFDg7jxTa9ivUWHATaGc 5+DR8AG+Oanr5XUTJoWTB6gKf75cyzC0 -----END CERTIFICATE-----Generated at Fri Dec 19 20:15:43 2025 by rpki-client