This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json) Hash identifier: k7DCKL9ujIFuHbQo64KVdX6JJyAF2fJpR6zZZoIo0bE= Subject key identifier: 94:41:20:63:DE:77:CB:EC:BE:F3:9B:A6:FE:0E:DD:89:28:E7:CB:7C Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 049C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft Manifest number: 0482 Signing time: Thu 18 Dec 2025 23:31:17 +0000 Manifest this update: Thu 18 Dec 2025 23:31:17 +0000 Manifest next update: Thu 25 Dec 2025 23:31:17 +0000 Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: InihIUGnaCAzFQuwIrO+0DKPyDiZ8WoIA3GkniSqs3A=) 2: B25FEE6E85EB11F088AFC15EC4F9AE02.roa (hash: FmTdhb6JOatjzFGpUujz0yqqemXgtcfk0JQ/+/a77U0=) 3: 168BE8747EEE11ECAB036C59C4F9AE02.roa (hash: wF1Z2aa2PTEiRRPCp23vYrxyf7/d64gIm78PkkwoFEI=) 4: 616435103F3E11EE81024074C4F9AE02.roa (hash: BV7IOs58jkocun9KOxJEZWid0CjNqRr4h3oLm+oM9XA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1180 (0x49c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Validity Not Before: Dec 18 23:31:17 2025 GMT Not After : Dec 25 23:31:17 2025 GMT Subject: CN=69448ec5-79d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fa:c6:34:36:8d:da:85:3c:f4:48:5f:ef:fc: 62:27:89:dc:ec:8d:82:57:32:1e:69:b5:8f:d5:a1: c3:37:91:6a:c3:cd:1b:ce:1b:1e:36:ed:3d:e4:b0: c1:4e:ae:a1:65:a1:f6:4f:d7:db:7a:82:c4:01:8e: 71:65:0e:89:2f:71:fb:96:42:31:d9:08:42:a5:bf: bc:27:dd:5b:5b:56:7d:ff:c4:bb:19:e6:36:e7:ac: 51:db:dd:de:f6:a2:61:7a:17:c5:bd:68:37:72:52: 07:6f:c6:f0:96:c6:bc:68:ef:54:48:8b:23:09:6e: 9c:6c:35:27:cd:40:56:2c:c1:bb:2a:96:82:c4:2f: 2f:08:e0:fe:f8:ec:23:98:b2:0c:f5:f1:9b:82:9e: 40:f8:b7:3c:0a:95:0d:2c:f3:91:e4:53:85:e9:d8: 71:52:be:d1:e1:43:38:0f:75:86:ed:63:f7:d6:e6: e9:c1:64:c7:86:12:f0:27:3e:f8:c8:2d:cf:5d:cb: d8:33:62:00:7e:e0:a1:c7:cc:34:66:88:c3:5e:2f: a8:e8:06:ef:3b:89:96:ba:aa:6c:56:89:ad:13:04: 92:5a:3d:62:c5:fa:5e:16:a7:24:1c:93:4f:1b:02: 3e:b7:1a:0b:54:e7:f4:02:e2:66:d9:be:bf:44:b1: 79:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:41:20:63:DE:77:CB:EC:BE:F3:9B:A6:FE:0E:DD:89:28:E7:CB:7C X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:67:f3:2a:b2:ad:b4:7e:fc:56:64:7a:7d:90:ce:e5:75:45: 0d:5d:c9:cf:bb:28:14:90:0c:f9:a2:d8:f5:a3:54:13:32:03: 9a:65:90:39:a7:ba:f3:6b:e1:b2:3e:71:f2:94:bf:c3:56:5c: 23:8c:af:22:08:93:55:b8:ad:0a:e1:a7:99:3c:2b:9d:4f:a8: 38:91:9f:2a:c3:c3:89:9c:c8:6a:4d:82:cf:55:38:2c:d2:4d: a4:d9:6c:e9:25:a5:db:88:08:68:f2:f8:24:c9:a9:37:42:87: 65:90:7f:88:11:a4:84:19:9b:26:f1:16:14:57:ee:39:62:91: 5a:22:72:64:09:ff:ad:56:87:e5:b8:d4:82:95:54:bd:f0:53: 3b:fd:bd:64:e2:9b:88:3b:e3:d3:c7:43:00:f2:a0:21:bc:0c: 24:6f:94:58:f9:d4:55:2f:ee:a9:54:0f:f0:88:15:2c:53:43: 8f:9b:f4:15:90:45:9e:79:44:c4:ab:53:ff:a4:85:5f:d1:35: cd:0e:c4:bc:a8:6e:c6:5d:00:2f:3f:3c:06:20:a7:f5:31:4a: f8:47:7a:b4:8a:11:fb:e3:15:ad:3c:3d:22:0b:b8:5f:78:4a: ad:7b:19:ef:c5:ad:c6:4c:4c:7b:fb:72:c0:c5:d3:eb:b9:d2: 94:1d:06:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjUxMjE4MjMzMTE3WhcNMjUxMjI1MjMzMTE3WjAYMRYwFAYD VQQDDA02OTQ0OGVjNS03OWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6PrGNDaN2oU89Ehf7/xiJ4nc7I2CVzIeabWP1aHDN5Fqw80bzhseNu095LDB Tq6hZaH2T9fbeoLEAY5xZQ6JL3H7lkIx2QhCpb+8J91bW1Z9/8S7GeY256xR293e 9qJhehfFvWg3clIHb8bwlsa8aO9USIsjCW6cbDUnzUBWLMG7KpaCxC8vCOD++Owj mLIM9fGbgp5A+Lc8CpUNLPOR5FOF6dhxUr7R4UM4D3WG7WP31ubpwWTHhhLwJz74 yC3PXcvYM2IAfuChx8w0ZojDXi+o6AbvO4mWuqpsVomtEwSSWj1ixfpeFqckHJNP GwI+txoLVOf0AuJm2b6/RLF5swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRBIGPe d8vsvvObpv4O3Yko58t8MB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu TWR3dFpLY01ZWnhtazBhZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJZ/Mqsq20fvxWZHp9kM7ldUUNXcnPuygUkAz5otj1o1QTMgOaZZA5 p7rza+GyPnHylL/DVlwjjK8iCJNVuK0K4aeZPCudT6g4kZ8qw8OJnMhqTYLPVTgs 0k2k2WzpJaXbiAho8vgkyak3QodlkH+IEaSEGZsm8RYUV+45YpFaInJkCf+tVofl uNSClVS98FM7/b1k4puIO+PTx0MA8qAhvAwkb5RY+dRVL+6pVA/wiBUsU0OPm/QV kEWeeUTEq1P/pIVf0TXNDsS8qG7GXQAvPzwGIKf1MUr4R3q0ihH74xWtPD0iC7hf eEqtexnvxa3GTEx7+3LAxdPrudKUHQYh -----END CERTIFICATE-----Generated at Fri Dec 19 20:25:25 2025 by rpki-client