This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft File: VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json) Hash identifier: i86AMWACbVptKGb/fyCX6xCUaCHKzIAMwIuyu3eKRs8= Subject key identifier: D9:F8:0B:B6:41:2A:A7:31:C7:53:7B:E4:57:FF:48:8A:9A:DE:6C:88 Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A Certificate issuer: /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A Certificate serial: 0C79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft Manifest number: 0C6E Signing time: Sat 06 Dec 2025 17:54:38 +0000 Manifest this update: Sat 06 Dec 2025 17:54:37 +0000 Manifest next update: Sat 13 Dec 2025 17:54:37 +0000 Files and hashes: 1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: 1uYuH+cQyQ2c8iiKtHmShjVRUX8wwW/c4pIzvNk+RHU=) 2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: 9jpZ67QWGAJhgEp9yZYa+B85oL6nxjWkZcfSp/yeSCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3193 (0xc79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AAB5, serialNumber=553711F2EFE94844C43F776D451018C064972C9A Validity Not Before: Dec 6 17:54:37 2025 GMT Not After : Dec 13 17:54:37 2025 GMT Subject: CN=69346dde-5bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:8d:00:f1:6e:aa:73:de:17:ab:24:e0:9b: fb:25:16:9b:51:2d:e9:44:d3:0b:d2:d4:eb:a7:dd: d0:7e:59:94:e6:9d:b6:bd:49:ff:4c:4d:f7:34:60: 27:b4:f8:ab:43:30:ae:9d:49:9c:e0:ed:a8:28:f7: 18:58:be:19:85:6b:5f:86:64:82:d5:b8:c0:ae:c7: ab:be:03:20:39:b7:c0:f7:43:6c:53:73:28:d4:f6: 2a:85:c0:b3:ce:68:79:9a:79:fd:2a:69:25:65:0e: 44:82:2b:b8:a4:fa:4d:73:ec:1d:de:bd:a1:5b:ff: 89:86:0d:7c:c6:d6:43:3f:0a:ad:3e:aa:98:6e:86: 42:a8:db:2c:5b:0c:df:78:a2:b9:e0:b9:fe:d8:86: 3c:2b:d8:a0:6f:ba:e1:24:ba:c3:4e:df:fb:11:b8: 39:fd:95:36:8a:c9:f9:88:58:03:82:31:aa:37:a3: 12:8e:57:e7:b4:e6:85:ce:21:85:09:71:1f:9f:c3: a3:53:6c:cc:8e:4f:4f:de:2d:d1:a8:87:6f:be:d8: 88:75:10:11:f1:39:f5:cf:20:d5:cd:9e:78:69:8c: 1b:c1:a5:3e:f4:2b:ad:74:43:ea:56:dc:46:47:65: 31:fb:15:2f:15:4b:91:0a:42:43:c9:fc:64:34:aa: 99:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F8:0B:B6:41:2A:A7:31:C7:53:7B:E4:57:FF:48:8A:9A:DE:6C:88 X509v3 Authority Key Identifier: keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:48:1e:e6:65:45:ab:7a:2f:2c:f7:01:c5:4e:45:bd:ca:6d: e5:72:20:74:3e:d5:8a:3f:bd:d0:84:1d:b9:0e:5b:61:1f:cc: 92:b0:78:08:00:b9:40:4a:d0:4b:fb:71:4d:86:6e:5a:f3:fa: 39:a9:95:02:39:71:0a:f7:3a:a2:7b:3e:94:0e:a5:81:7f:c4: a1:91:98:5f:fa:08:2d:96:5c:4f:a4:41:7e:c7:a5:73:81:37: f5:6e:b9:23:54:ec:bf:56:59:e1:6e:00:90:95:38:dc:d7:62: a3:3d:86:dd:f7:f7:89:d2:9a:94:16:f2:72:ee:26:63:68:5d: 6f:51:a0:ef:60:85:9c:dc:c8:9f:e0:30:89:1a:ff:d2:e4:85: ef:0f:d7:87:21:84:1b:03:45:26:a1:01:47:19:6d:e0:16:d8: 75:97:d3:93:ff:38:b6:22:51:8f:b8:6f:c5:56:35:f4:94:50: 1c:15:40:6f:78:40:82:f3:d0:ab:d9:30:04:e4:b1:55:1c:99: b3:1d:32:25:80:85:fc:31:be:9e:90:dc:c1:5d:99:1d:4e:55: 0a:15:65:f8:70:e4:32:1c:ae:38:97:94:db:1f:5d:00:1b:83: ea:ce:8d:6d:b5:cb:e2:6f:bc:b1:c0:69:82:83:98:6a:db:bb: 9d:19:69:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBQjUxMTAvBgNVBAUTKDU1MzcxMUYyRUZFOTQ4NDRDNDNGNzc2RDQ1MTAxOEMw NjQ5NzJDOUEwHhcNMjUxMjA2MTc1NDM3WhcNMjUxMjEzMTc1NDM3WjAYMRYwFAYD VQQDEw02OTM0NmRkZS01YmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDWNAPFuqnPeF6sk4Jv7JRabUS3pRNML0tTrp93QflmU5p22vUn/TE33NGAn tPirQzCunUmc4O2oKPcYWL4ZhWtfhmSC1bjArservgMgObfA90NsU3Mo1PYqhcCz zmh5mnn9KmklZQ5Egiu4pPpNc+wd3r2hW/+Jhg18xtZDPwqtPqqYboZCqNssWwzf eKK54Ln+2IY8K9igb7rhJLrDTt/7Ebg5/ZU2isn5iFgDgjGqN6MSjlfntOaFziGF CXEfn8OjU2zMjk9P3i3RqIdvvtiIdRAR8Tn1zyDVzZ54aYwbwaU+9CutdEPqVtxG R2Ux+xUvFUuRCkJDyfxkNKqZeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNn4C7ZB Kqcxx1N75Ff/SIqa3myIMB8GA1UdIwQYMBaAFFU3EfLv6UhExD93bUUQGMBklyya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUFCNS9BM0JERTdBMDEw RjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNFVEVQM2R0UlJBWXdHU1hM Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUY1I4dV9wU0VURVAzZHRSUkFZd0dTWExKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUFCNS9BM0JERTdBMDEwRjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNF VEVQM2R0UlJBWXdHU1hMSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVSB7mZUWrei8s9wHFTkW9ym3lciB0PtWKP73QhB25DlthH8ySsHgI ALlAStBL+3FNhm5a8/o5qZUCOXEK9zqiez6UDqWBf8ShkZhf+ggtllxPpEF+x6Vz gTf1brkjVOy/VlnhbgCQlTjc12KjPYbd9/eJ0pqUFvJy7iZjaF1vUaDvYIWc3Mif 4DCJGv/S5IXvD9eHIYQbA0UmoQFHGW3gFth1l9OT/zi2IlGPuG/FVjX0lFAcFUBv eECC89Cr2TAE5LFVHJmzHTIlgIX8Mb6ekNzBXZkdTlUKFWX4cOQyHK44l5TbH10A G4Pqzo1ttcvib7yxwGmCg5hq27udGWk8 -----END CERTIFICATE-----Generated at Sun Dec 7 02:35:41 2025 by rpki-client