This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json) Hash identifier: M2SAlh9JjMaLqT89Q9nNAi9ZIVL9u6PkY+8k/tjQCB8= Subject key identifier: 59:EF:72:E7:08:0C:08:9E:5A:4B:52:8B:62:90:E3:F7:14:C3:8C:BA Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Certificate serial: 355B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft Manifest number: 352A Signing time: Sat 06 Dec 2025 14:52:16 +0000 Manifest this update: Sat 06 Dec 2025 14:52:15 +0000 Manifest next update: Sat 13 Dec 2025 14:52:15 +0000 Files and hashes: 1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: vE23E8mUhaUCnySZK0NCo4YNKwkQADLWdli6VZjB8JE=) 2: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: UllqnXfDL+2VdUTPx8xQ2Za44+cPvkaWdFYKS+C8QQM=) 3: 931C5524175011EB8585CA60C4F9AE02.roa (hash: zSmeOMcR4UTwUq4R32M120QhIdCnmd/G6j8Yf4YDhJ0=) 4: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: ZD0GATgarU5SJf51be/V12br/cDS5vLdtBMxX0BhbhU=) 5: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: lO7bWRMdVQIujCi4o8pQPJbkrtgWtKnNWX6be5e8XsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13659 (0x355b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Validity Not Before: Dec 6 14:52:15 2025 GMT Not After : Dec 13 14:52:15 2025 GMT Subject: CN=6934431f-3acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:ba:be:6f:13:b8:c6:d7:98:27:81:49:b1: 81:25:d2:c3:f3:3c:20:3c:ac:9c:e8:a3:29:3d:9d: 97:65:9d:fe:ff:14:19:41:04:8f:4e:f9:89:49:d1: 3f:a8:83:4b:9a:72:a3:4b:42:2c:b7:72:d8:4a:b8: 5d:87:61:39:b7:8a:ab:ed:5f:44:8c:b2:a9:2a:98: d2:e5:14:f8:23:0f:46:67:30:f4:f6:f2:77:31:20: 57:24:b7:11:2a:75:66:8e:cf:69:90:f4:07:dd:9f: 84:dd:47:8b:5d:ab:8c:83:75:12:a8:fa:8b:0f:a9: e2:56:98:b4:25:a4:00:f7:a1:a2:fa:ec:ea:f3:df: b6:3a:de:95:2f:cd:41:75:33:a4:8c:ab:f1:d0:05: 04:93:79:75:14:16:89:ab:0a:6d:54:4c:c9:4f:28: b3:13:02:92:d4:b5:8d:8c:95:c0:e7:5b:f3:a8:df: 6f:52:cc:b0:e9:2d:1e:2e:b9:01:a9:cd:f1:00:6d: f6:63:6f:4d:93:4e:10:28:7b:b4:28:64:0b:35:2d: b6:6b:79:98:d2:a1:4c:15:64:56:44:9e:ff:11:51: b3:ad:a7:5b:6d:f2:e9:4e:70:6d:57:6b:b3:82:4e: 18:3b:8d:16:7c:7e:7c:72:0d:4b:c7:9f:51:d8:8e: 1a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EF:72:E7:08:0C:08:9E:5A:4B:52:8B:62:90:E3:F7:14:C3:8C:BA X509v3 Authority Key Identifier: keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d4:15:0a:ed:95:60:a6:98:dc:73:a2:dc:48:85:9e:7f:c9: 29:d6:d8:12:cc:bd:22:78:19:96:f2:c4:a6:94:3e:29:fb:61: 27:0a:8b:1b:25:13:26:6c:03:ef:7b:49:03:b7:40:77:b9:8a: f1:e9:c4:ff:79:2c:f4:c5:66:15:81:c9:5c:dd:c3:25:c0:de: 5d:e8:f8:39:9e:61:b3:4e:47:8b:d6:e0:be:07:8a:38:69:e5: 0d:27:c8:7d:82:ba:f3:6d:e0:10:d6:23:e8:39:c1:47:86:33: 40:04:66:59:0c:8c:fe:63:7d:62:aa:c7:a3:5b:64:ef:8a:c8: 74:9d:dd:9d:46:d5:d6:f1:50:17:8a:54:09:42:0d:50:ae:1a: 25:b3:44:b0:d9:f5:4e:4a:43:dc:2c:78:75:34:26:74:57:3b: f1:8b:3c:ca:38:9c:67:45:a7:30:17:f0:64:c0:f0:5c:c8:1d: ac:4d:26:30:35:09:d0:d7:e9:6c:98:06:d6:b1:56:0e:c7:f7: a1:76:5b:ba:e8:84:df:4c:61:c4:5c:ea:89:3c:c4:26:6a:c1: bf:90:04:5b:8e:cd:9e:8b:29:3c:1a:83:cd:0e:0a:bd:11:db: 07:51:d2:62:83:f4:57:d0:a9:03:66:c0:9c:3c:53:de:2c:7f: 01:7e:2d:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZEQkExMTAvBgNVBAUTKEZFRjkxNDNCMTYxNkNEQTExNTlCNTlFQ0Q1RTM5OTNF OTgyNjU0RkUwHhcNMjUxMjA2MTQ1MjE1WhcNMjUxMjEzMTQ1MjE1WjAYMRYwFAYD VQQDEw02OTM0NDMxZi0zYWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcy6vm8TuMbXmCeBSbGBJdLD8zwgPKyc6KMpPZ2XZZ3+/xQZQQSPTvmJSdE/ qINLmnKjS0Ist3LYSrhdh2E5t4qr7V9EjLKpKpjS5RT4Iw9GZzD09vJ3MSBXJLcR KnVmjs9pkPQH3Z+E3UeLXauMg3USqPqLD6niVpi0JaQA96Gi+uzq89+2Ot6VL81B dTOkjKvx0AUEk3l1FBaJqwptVEzJTyizEwKS1LWNjJXA51vzqN9vUsyw6S0eLrkB qc3xAG32Y29Nk04QKHu0KGQLNS22a3mY0qFMFWRWRJ7/EVGzradbbfLpTnBtV2uz gk4YO40WfH58cg1Lx59R2I4aywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnvcucI DAieWktSi2KQ4/cUw4y6MB8GA1UdIwQYMBaAFP75FDsWFs2hFZtZ7NXjmT6YJlT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkRCQS8wNzc4NTFBNDFE OUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3phRVZtMW5zMWVPWlBwZ21W UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192a1VPeFlXemFFVm0xbnMxZU9aUHBnbVZQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkRCQS8wNzc4NTFBNDFEOUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3ph RVZtMW5zMWVPWlBwZ21WUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB1BUK7ZVgppjcc6LcSIWef8kp1tgSzL0ieBmW8sSmlD4p+2EnCosb JRMmbAPve0kDt0B3uYrx6cT/eSz0xWYVgclc3cMlwN5d6Pg5nmGzTkeL1uC+B4o4 aeUNJ8h9grrzbeAQ1iPoOcFHhjNABGZZDIz+Y31iqsejW2Tvish0nd2dRtXW8VAX ilQJQg1Qrhols0Sw2fVOSkPcLHh1NCZ0VzvxizzKOJxnRacwF/BkwPBcyB2sTSYw NQnQ1+lsmAbWsVYOx/ehdlu66ITfTGHEXOqJPMQmasG/kARbjs2eiyk8GoPNDgq9 EdsHUdJig/RX0KkDZsCcPFPeLH8Bfi0c -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:28 2025 by rpki-client