This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json) Hash identifier: s+hQvTod7DXBY3+h3qMdHP7fB4churvxPsABwVSeBTA= Subject key identifier: 9A:B5:8F:4E:37:71:DE:4F:4E:7F:71:76:D3:1B:5F:64:7E:48:01:1D Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Certificate serial: 3561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft Manifest number: 3530 Signing time: Thu 18 Dec 2025 14:55:44 +0000 Manifest this update: Thu 18 Dec 2025 14:55:44 +0000 Manifest next update: Thu 25 Dec 2025 14:55:44 +0000 Files and hashes: 1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: swfZamWUKc15764iXsiRnXGFE6spnDSprzYq+knxmh0=) 2: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: UllqnXfDL+2VdUTPx8xQ2Za44+cPvkaWdFYKS+C8QQM=) 3: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: lO7bWRMdVQIujCi4o8pQPJbkrtgWtKnNWX6be5e8XsM=) 4: 931C5524175011EB8585CA60C4F9AE02.roa (hash: zSmeOMcR4UTwUq4R32M120QhIdCnmd/G6j8Yf4YDhJ0=) 5: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: ZD0GATgarU5SJf51be/V12br/cDS5vLdtBMxX0BhbhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13665 (0x3561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Validity Not Before: Dec 18 14:55:44 2025 GMT Not After : Dec 25 14:55:44 2025 GMT Subject: CN=694415f0-4c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:b7:93:48:e2:42:63:ee:47:05:93:4d:3d: 36:40:aa:a2:b4:a3:e4:4f:75:72:18:e5:03:ac:11: 5f:ca:5e:90:98:4d:36:91:db:0c:4a:7f:1e:c7:07: 6b:d6:40:a8:89:d7:be:a8:4c:57:3d:d8:5a:ed:38: 71:7c:86:13:9e:b7:3d:a3:59:3f:8a:7b:a8:54:eb: ad:2e:c4:38:25:6b:d1:5a:22:38:27:f1:f1:14:37: c5:24:ad:d5:38:fd:19:6f:31:9d:58:79:e3:82:c9: 7d:42:b4:51:7f:11:8e:18:26:ff:40:fd:2c:7b:d1: b7:8b:19:83:54:fb:1a:06:0e:04:76:d5:4f:4e:f2: 5b:0c:37:16:24:9d:07:a0:a9:f6:8c:79:d0:43:f9: 1f:22:9d:54:2a:09:fd:9d:ff:b6:52:f4:d8:9f:c3: a9:ca:a5:f0:d8:17:f0:56:9e:5e:2d:71:37:06:a6: c6:51:fd:ce:5e:36:e9:58:ab:67:71:c6:20:20:1c: b8:94:21:33:82:c4:60:a8:6a:97:1d:23:f0:61:93: 36:47:96:0d:21:f2:a1:f7:4c:06:04:8a:05:9e:ca: f8:6b:f9:49:e2:e9:12:1a:06:88:16:54:6b:c2:63: af:ad:80:51:5a:52:2c:d2:51:d4:41:79:67:52:2f: c7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B5:8F:4E:37:71:DE:4F:4E:7F:71:76:D3:1B:5F:64:7E:48:01:1D X509v3 Authority Key Identifier: keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:1e:88:c2:eb:4c:a0:5e:39:f2:d7:41:fa:a7:3e:ae:03:6c: a2:e7:a8:ab:75:b9:88:3c:58:5c:73:1c:2a:8a:92:44:f7:13: 31:fe:3d:93:d5:0b:9a:41:a1:1a:d1:b0:99:62:ae:45:97:0a: 53:d6:f6:aa:42:f5:cf:d9:53:40:27:45:4e:14:a5:ed:57:0e: eb:e4:15:3f:99:8d:ba:c5:e2:93:91:b8:b2:b2:86:ef:15:ff: 4f:d0:66:2c:a7:25:6f:e3:1f:ff:57:b3:6b:a1:85:ac:e2:1a: df:47:eb:51:df:ab:f6:11:0b:a9:e7:eb:6f:f9:20:fc:fc:2f: 63:b1:ca:83:33:9d:1e:1e:ab:09:59:28:97:1a:d5:5e:18:57: cf:90:41:f2:e0:08:98:3c:3f:90:58:1c:2b:a0:52:05:71:bf: 98:89:af:97:98:f7:f1:44:ee:f8:a8:ea:1a:e4:da:d0:36:f8: 7b:76:00:6a:b3:97:06:e0:ad:13:b2:ea:94:28:61:8d:fe:82: d8:2b:4a:6c:f1:02:27:8e:ea:bc:bf:66:3e:1c:90:0b:54:50: 76:08:83:1a:32:76:3e:1b:dd:92:c3:31:e5:27:7b:c5:c4:c1: e4:66:b2:a5:db:2b:38:c1:1c:eb:30:f0:63:9c:3c:dd:13:68: 56:1f:77:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZEQkExMTAvBgNVBAUTKEZFRjkxNDNCMTYxNkNEQTExNTlCNTlFQ0Q1RTM5OTNF OTgyNjU0RkUwHhcNMjUxMjE4MTQ1NTQ0WhcNMjUxMjI1MTQ1NTQ0WjAYMRYwFAYD VQQDDA02OTQ0MTVmMC00YzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsS23k0jiQmPuRwWTTT02QKqitKPkT3VyGOUDrBFfyl6QmE02kdsMSn8exwdr 1kCoide+qExXPdha7ThxfIYTnrc9o1k/inuoVOutLsQ4JWvRWiI4J/HxFDfFJK3V OP0ZbzGdWHnjgsl9QrRRfxGOGCb/QP0se9G3ixmDVPsaBg4EdtVPTvJbDDcWJJ0H oKn2jHnQQ/kfIp1UKgn9nf+2UvTYn8OpyqXw2BfwVp5eLXE3BqbGUf3OXjbpWKtn ccYgIBy4lCEzgsRgqGqXHSPwYZM2R5YNIfKh90wGBIoFnsr4a/lJ4ukSGgaIFlRr wmOvrYBRWlIs0lHUQXlnUi/H1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJq1j043 cd5PTn9xdtMbX2R+SAEdMB8GA1UdIwQYMBaAFP75FDsWFs2hFZtZ7NXjmT6YJlT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkRCQS8wNzc4NTFBNDFE OUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3phRVZtMW5zMWVPWlBwZ21W UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192a1VPeFlXemFFVm0xbnMxZU9aUHBnbVZQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkRCQS8wNzc4NTFBNDFEOUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3ph RVZtMW5zMWVPWlBwZ21WUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYHojC60ygXjny10H6pz6uA2yi56irdbmIPFhccxwqipJE9xMx/j2T 1QuaQaEa0bCZYq5FlwpT1vaqQvXP2VNAJ0VOFKXtVw7r5BU/mY26xeKTkbiysobv Ff9P0GYspyVv4x//V7NroYWs4hrfR+tR36v2EQup5+tv+SD8/C9jscqDM50eHqsJ WSiXGtVeGFfPkEHy4AiYPD+QWBwroFIFcb+Yia+XmPfxRO74qOoa5NrQNvh7dgBq s5cG4K0TsuqUKGGN/oLYK0ps8QInjuq8v2Y+HJALVFB2CIMaMnY+G92SwzHlJ3vF xMHkZrKl2ys4wRzrMPBjnDzdE2hWH3dm -----END CERTIFICATE-----Generated at Thu Dec 18 19:10:57 2025 by rpki-client