This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft File: vkY_wZGbQUKyOCgTgn-3FtbukoM.mft (raw, json) Hash identifier: 4rMVbeElsB5oQms0IchKWK67ZRNfO+TRjfKwLQThJVo= Subject key identifier: EB:23:9C:70:1D:E8:B2:1F:F6:9A:62:94:E7:46:73:73:02:4E:B6:50 Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83 Certificate issuer: /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283 Certificate serial: 07C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft Manifest number: 07B7 Signing time: Thu 18 Dec 2025 20:49:43 +0000 Manifest this update: Thu 18 Dec 2025 20:49:42 +0000 Manifest next update: Thu 25 Dec 2025 20:49:42 +0000 Files and hashes: 1: vkY_wZGbQUKyOCgTgn-3FtbukoM.crl (hash: fbWfhl8yhCBKFWm+6LWIciXrFkmROdUGmvSOowGJw2M=) 2: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (hash: XOt7bB+UgZTY8Thh+DvUt1JxAIDEDKn5j8X2t+ws97c=) 3: 2798B9A6BABA11EB8A51C234C4F9AE02.roa (hash: +zcjX2imATb1GbMG2fycsIcaiWvdU6/+K/wkiamqX6U=) 4: 28543AA0BABA11EB8A51C234C4F9AE02.roa (hash: tLbuywK1hQsCi3a1AqRQB3esx6wP54LrqFgdAXcaBdM=) 5: 58E4A6E8B60811F0AF40B71EC4F9AE02.roa (hash: 726+J+96Tj+HjEIghhxWecanICxHywnH4M9SjhljsVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40BF, serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283 Validity Not Before: Dec 18 20:49:42 2025 GMT Not After : Dec 25 20:49:42 2025 GMT Subject: CN=694468e7-c93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:5a:51:f2:6a:aa:85:92:0e:61:bf:37:c9: 18:03:94:5e:28:23:48:d3:5c:46:2e:c5:31:1e:f0: 0a:ef:95:5e:61:45:a1:d0:c4:1e:7f:8e:e9:4e:e4: 3c:db:04:e7:4d:b0:b1:bf:95:bc:14:d8:14:23:4b: 7b:75:39:d6:ac:bb:b3:5c:bf:09:7c:35:ce:51:6a: 06:5a:8c:d0:23:41:0c:04:66:90:68:3a:5f:ae:6a: d3:e7:95:d0:4e:5f:ad:8a:04:49:cc:26:54:1a:24: 34:3c:7d:ea:84:f9:8f:63:88:04:84:f6:97:32:e0: b7:3d:13:ae:cc:0f:1e:1b:0c:61:a4:df:ed:98:e6: 15:07:02:72:15:bc:49:01:4b:6a:dd:31:f1:fa:c4: f8:1b:23:93:0f:50:16:30:33:a8:17:b8:b6:a0:e4: dc:cb:b6:62:2f:08:08:23:6d:d4:2d:87:16:67:3d: a7:d6:13:7a:0a:2a:dd:66:be:35:7c:1b:46:8b:25: 46:ba:42:eb:d0:db:65:8f:46:16:9c:27:e4:93:a0: 8f:b1:d0:75:87:db:53:a4:5c:46:b8:12:7d:35:e1: 44:cc:3d:91:7d:6c:f1:55:0b:3f:aa:8f:13:56:59: d6:b2:9a:9e:f3:a9:2a:0c:30:36:97:0f:a3:09:c7: b1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:23:9C:70:1D:E8:B2:1F:F6:9A:62:94:E7:46:73:73:02:4E:B6:50 X509v3 Authority Key Identifier: keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:08:26:9a:80:70:0e:ad:73:f4:b2:60:a5:69:b5:49:01:30: bb:28:71:02:2e:97:3d:0a:5a:ad:57:1e:5b:11:87:79:ce:7b: 2d:fd:54:43:d8:42:67:30:29:72:11:6c:39:f8:22:18:d9:8f: e9:f9:c2:d9:87:f6:ff:27:b0:a2:48:31:27:1e:3a:50:f9:d0: da:20:0c:e1:40:21:e6:ca:d2:c0:09:12:8b:48:21:38:21:8d: 45:7f:63:a1:48:39:09:94:ca:2e:4c:40:80:5b:0e:9e:ab:b3: 73:d8:47:f8:bc:e4:2e:ea:20:87:e2:01:f8:15:44:d5:03:01: 6a:7c:bc:f0:49:10:7d:2f:ce:cd:47:38:ea:fd:9d:b1:fc:3b: 61:82:16:21:de:d6:37:81:e2:60:72:4f:87:43:c3:4a:88:b8: 94:e9:9c:b5:5f:73:b0:43:52:05:58:50:21:fd:97:13:fd:15: 4a:2a:34:61:fa:30:56:00:17:d2:2a:94:47:9b:2d:73:b8:77: 5b:2d:41:dd:15:e6:e6:5d:9f:c8:04:92:dc:72:de:21:28:b3: ce:58:ab:15:d5:bc:6b:1b:18:c5:4c:9e:d9:5a:9b:37:52:2b: 43:f8:70:1e:1a:f3:29:b3:1d:a2:5b:c9:d4:c0:1e:bd:94:9d: ce:3e:08:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQkYxMTAvBgNVBAUTKEJFNDYzRkMxOTE5QjQxNDJCMjM4MjgxMzgyN0ZCNzE2 RDZFRTkyODMwHhcNMjUxMjE4MjA0OTQyWhcNMjUxMjI1MjA0OTQyWjAYMRYwFAYD VQQDDA02OTQ0NjhlNy1jOTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYFaUfJqqoWSDmG/N8kYA5ReKCNI01xGLsUxHvAK75VeYUWh0MQef47pTuQ8 2wTnTbCxv5W8FNgUI0t7dTnWrLuzXL8JfDXOUWoGWozQI0EMBGaQaDpfrmrT55XQ Tl+tigRJzCZUGiQ0PH3qhPmPY4gEhPaXMuC3PROuzA8eGwxhpN/tmOYVBwJyFbxJ AUtq3THx+sT4GyOTD1AWMDOoF7i2oOTcy7ZiLwgII23ULYcWZz2n1hN6CirdZr41 fBtGiyVGukLr0Ntlj0YWnCfkk6CPsdB1h9tTpFxGuBJ9NeFEzD2RfWzxVQs/qo8T VlnWspqe86kqDDA2lw+jCcexgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsjnHAd 6LIf9ppilOdGc3MCTrZQMB8GA1UdIwQYMBaAFL5GP8GRm0FCsjgoE4J/txbW7pKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBCRi8yN0I3QTI4NDI0 QzAxMUVCQjYyQjQzODdDNEY5QUUwMi92a1lfd1pHYlFVS3lPQ2dUZ24tM0Z0YnVr b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZrWV93WkdiUVVLeU9DZ1Rnbi0zRnRidWtvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBCRi8yN0I3QTI4NDI0QzAxMUVCQjYyQjQzODdDNEY5QUUwMi92a1lfd1pHYlFV S3lPQ2dUZ24tM0Z0YnVrb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFCCaagHAOrXP0smClabVJATC7KHECLpc9ClqtVx5bEYd5znst/VRD 2EJnMClyEWw5+CIY2Y/p+cLZh/b/J7CiSDEnHjpQ+dDaIAzhQCHmytLACRKLSCE4 IY1Ff2OhSDkJlMouTECAWw6eq7Nz2Ef4vOQu6iCH4gH4FUTVAwFqfLzwSRB9L87N Rzjq/Z2x/DthghYh3tY3geJgck+HQ8NKiLiU6Zy1X3OwQ1IFWFAh/ZcT/RVKKjRh +jBWABfSKpRHmy1zuHdbLUHdFebmXZ/IBJLcct4hKLPOWKsV1bxrGxjFTJ7ZWps3 UitD+HAeGvMpsx2iW8nUwB69lJ3OPghm -----END CERTIFICATE-----Generated at Sat Dec 20 05:17:56 2025 by rpki-client