This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft File: VKJNxo3yZA57s_8PNreO-IQAww8.mft (raw, json) Hash identifier: CmVmebsXoK4kTycYGsP4Wl4a03nlp+8DkD/GQDb20Fk= Subject key identifier: 26:D7:69:CD:DE:9D:EB:D0:C1:5C:1A:FC:10:E3:A9:F6:FC:71:27:69 Authority key identifier: 54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F Certificate issuer: /CN=A91362EB/serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft Manifest number: 4D Signing time: Fri 05 Dec 2025 05:08:20 +0000 Manifest this update: Fri 05 Dec 2025 05:08:19 +0000 Manifest next update: Fri 12 Dec 2025 05:08:19 +0000 Files and hashes: 1: VKJNxo3yZA57s_8PNreO-IQAww8.crl (hash: rphCnZDejQH+/feSWInO9k2Kg1PgWkgdX3xzPgwDc3E=) 2: 0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa (hash: /uTCkM+7T3MX4CR0F7TNTBgsSs4yKxKjHNmhUVycHRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362EB, serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Validity Not Before: Dec 5 05:08:19 2025 GMT Not After : Dec 12 05:08:19 2025 GMT Subject: CN=693268c3-dd54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7e:dd:81:56:d9:a6:27:6a:35:4f:a1:97:3f: dd:8d:83:ea:b3:5d:b9:d9:88:ae:df:03:a8:91:32: d5:02:fe:39:c2:36:28:4b:46:13:ad:75:5f:91:64: be:53:06:48:09:d5:7f:20:1e:84:fb:32:5f:38:0c: 20:af:d2:5f:6b:0b:3b:4e:dd:52:17:9b:75:01:9d: ef:14:ac:ca:69:82:7f:ff:a1:75:61:5f:89:ac:4f: 89:69:43:98:a3:49:54:46:a4:0a:b8:a7:9b:fb:8f: db:8b:88:ed:95:9b:ad:16:ea:04:f8:a1:b6:af:02: 2b:3f:07:77:e1:52:34:b5:d1:1b:f2:c9:da:ba:c8: b4:4f:8a:f0:1a:6b:e8:24:3c:2a:b5:76:c5:8f:af: 1a:f7:7d:99:df:99:7d:aa:f7:06:87:95:a2:78:03: 60:e5:7c:38:f5:52:be:37:22:18:56:3e:c6:0e:3e: f4:1d:13:2e:eb:7f:17:dc:0d:1f:57:3a:09:50:4f: 51:39:b9:5c:ce:7f:f2:30:b2:ba:ef:60:e8:8d:ae: 51:fa:27:c7:51:e2:12:a6:bf:71:32:b1:10:27:57: 19:71:c5:40:36:40:67:66:0d:2b:e8:ad:ed:f9:5a: 2f:9a:6b:7f:da:d1:6a:76:82:86:73:9c:29:46:0f: 66:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D7:69:CD:DE:9D:EB:D0:C1:5C:1A:FC:10:E3:A9:F6:FC:71:27:69 X509v3 Authority Key Identifier: keyid:54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8b:ea:9b:cf:79:38:0c:fe:68:1a:c6:0b:17:66:d5:33:3c: 32:ee:53:d5:4b:b2:33:29:a8:ee:d0:d3:15:ea:dc:1e:09:72: 3c:3a:54:a7:66:8c:e2:08:49:84:a7:7b:f3:88:37:e1:72:d9: fa:69:cf:15:34:be:76:70:7b:94:c1:7a:58:d4:7d:f9:0e:7f: 0a:d3:84:3b:dd:94:8c:cc:17:d7:f0:bb:a5:0c:a9:d4:00:d5: 21:4a:8e:08:41:51:e6:86:0c:a8:14:da:e0:4f:60:67:0e:14: 69:4b:5e:02:25:60:29:80:81:d4:23:6c:d7:3e:c8:f9:09:12: 21:26:2e:48:40:74:a7:e4:8f:05:af:de:9c:d0:4e:25:81:d2: 4e:7c:e1:ae:1e:31:7e:cc:81:d9:11:0d:b5:d0:b9:3c:76:39: 29:1f:d2:5b:28:64:ae:5f:a9:91:92:e5:ad:c9:e3:48:74:75: 4e:a4:db:dc:be:b9:ab:81:81:90:74:96:cc:32:8d:50:36:e0: 4b:37:4b:5c:0e:fd:45:f1:f3:6f:7f:a0:42:54:b6:d3:2d:c5: 48:b8:f0:f9:ca:33:fd:d3:a7:0a:3d:6b:c2:58:30:e7:6e:42: 3d:68:3a:4a:81:e5:ce:82:0c:de:2e:fe:7e:6c:9e:07:ac:5f: 5d:c0:fe:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjJFQjExMC8GA1UEBRMoNTRBMjREQzY4REYyNjQwRTdCQjNGRjBGMzZCNzhFRjg4 NDAwQzMwRjAeFw0yNTEyMDUwNTA4MTlaFw0yNTEyMTIwNTA4MTlaMBgxFjAUBgNV BAMTDTY5MzI2OGMzLWRkNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCft2BVtmmJ2o1T6GXP92Ng+qzXbnZiK7fA6iRMtUC/jnCNihLRhOtdV+RZL5T BkgJ1X8gHoT7Ml84DCCv0l9rCztO3VIXm3UBne8UrMppgn//oXVhX4msT4lpQ5ij SVRGpAq4p5v7j9uLiO2Vm60W6gT4obavAis/B3fhUjS10Rvyydq6yLRPivAaa+gk PCq1dsWPrxr3fZnfmX2q9waHlaJ4A2DlfDj1Ur43IhhWPsYOPvQdEy7rfxfcDR9X OglQT1E5uVzOf/IwsrrvYOiNrlH6J8dR4hKmv3EysRAnVxlxxUA2QGdmDSvore35 Wi+aa3/a0Wp2goZznClGD2ZjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJtdpzd6d 69DBXBr8EOOp9vxxJ2kwHwYDVR0jBBgwFoAUVKJNxo3yZA57s/8PNreO+IQAww8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MkVCL0RGNTQ1Q0M4NUM5 OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1N3NfOFBOcmVPLUlRQXd3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVktKTnhvM3laQTU3c184UE5yZU8tSVFBd3c4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MkVCL0RGNTQ1Q0M4NUM5OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1 N3NfOFBOcmVPLUlRQXd3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAuL6pvPeTgM/mgaxgsXZtUzPDLuU9VLsjMpqO7Q0xXq3B4Jcjw6VKdm jOIISYSne/OIN+Fy2fppzxU0vnZwe5TBeljUffkOfwrThDvdlIzMF9fwu6UMqdQA 1SFKjghBUeaGDKgU2uBPYGcOFGlLXgIlYCmAgdQjbNc+yPkJEiEmLkhAdKfkjwWv 3pzQTiWB0k584a4eMX7MgdkRDbXQuTx2OSkf0lsoZK5fqZGS5a3J40h0dU6k29y+ uauBgZB0lswyjVA24Es3S1wO/UXx829/oEJUttMtxUi48PnKM/3Tpwo9a8JYMOdu Qj1oOkqB5c6CDN4u/n5sngesX13A/o0= -----END CERTIFICATE-----Generated at Sat Dec 6 18:32:10 2025 by rpki-client