This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft File: VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft (raw, json) Hash identifier: YSUHeIH3snc8BKVjFMpjT3BdElWYB0lyQm6JmU7Fafk= Subject key identifier: 53:71:48:0C:7E:A7:0D:50:98:3E:97:F6:97:B8:1C:80:10:90:1E:17 Authority key identifier: 55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61 Certificate issuer: /CN=A913E614/serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft Manifest number: 12 Signing time: Fri 05 Dec 2025 05:48:48 +0000 Manifest this update: Fri 05 Dec 2025 05:48:47 +0000 Manifest next update: Fri 12 Dec 2025 05:48:47 +0000 Files and hashes: 1: VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl (hash: a8AZoXiQu7QdbpoesZVVJJbTn78sI7A26ZYxEWRKsos=) 2: 390B7BFAC62311F092B8183CC4F9AE02.roa (hash: IttW8lnhM9U/w4yhzUeGX0DYIjEGvnTp18lKA3bXa/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E614, serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661 Validity Not Before: Dec 5 05:48:47 2025 GMT Not After : Dec 12 05:48:47 2025 GMT Subject: CN=6932723f-2625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:fc:6e:0f:62:0a:49:0b:3f:3e:c4:e7:01: 46:43:fd:58:68:69:24:a8:64:65:ba:3c:eb:33:58: 9a:ac:2f:cb:82:b9:ce:52:0c:46:e4:44:79:ca:9c: cf:1f:07:ef:78:e6:47:33:b9:a7:b6:a8:4b:cc:be: 45:eb:8a:9b:9b:5d:eb:c9:7f:c4:82:cf:37:73:a8: e4:b6:47:93:be:2b:28:b4:2a:ce:11:88:fe:12:a5: 59:1b:e4:b6:45:b4:43:61:ba:c3:29:c9:4d:7a:ff: 3f:7c:2c:2c:4c:46:62:91:5f:4b:1e:dd:cf:d5:5a: f2:e4:db:28:ab:14:2c:88:87:94:ef:a5:3f:cb:b0: a2:05:25:1d:83:eb:88:bf:95:4e:2d:b4:ef:62:95: 3a:c0:39:e5:12:e4:21:98:d5:97:ae:12:55:1a:40: d3:69:7f:a0:af:4f:7b:d9:ea:b4:2e:32:63:27:22: 53:29:4b:df:48:87:f9:77:01:83:bf:fd:71:3c:46: 08:39:58:f1:d5:8a:0f:0d:36:39:45:42:c9:5f:86: c5:25:ca:60:d0:0b:a3:04:2d:8c:c3:6b:81:58:c4: a8:44:5c:ef:4b:c5:c1:50:ce:72:cf:6b:d0:78:87: 46:4f:72:81:30:71:e1:e2:7b:e0:5e:4f:0c:cd:d5: 39:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:71:48:0C:7E:A7:0D:50:98:3E:97:F6:97:B8:1C:80:10:90:1E:17 X509v3 Authority Key Identifier: keyid:55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:ce:ab:3f:b7:b9:b7:51:56:9c:2d:c7:3a:b3:fa:f2:db:a1: 8e:1d:1e:2b:19:be:c3:7d:80:ab:f2:db:69:aa:6a:3b:de:0b: 73:f4:c4:e0:20:05:00:c0:a0:c6:4a:87:08:00:39:2c:d5:06: de:62:ee:ee:57:c5:8f:ed:6c:76:a2:58:ef:ce:3c:e2:d8:ab: df:f4:69:f9:69:76:ba:4a:ee:b0:0e:e4:a7:22:f9:34:a6:59: 45:d4:0e:f0:1f:08:0c:88:2e:f4:a0:11:e2:37:37:d9:05:af: f0:29:53:88:7b:bc:63:12:21:86:f2:f8:cf:64:e8:86:a6:73: 92:d9:e5:59:a8:34:58:14:db:76:38:06:4a:57:c6:0a:dd:bd: 37:3e:8d:b3:58:00:35:fa:5d:f5:ab:51:18:c1:34:67:11:36: 2e:9c:43:31:f4:03:21:e9:d7:c5:55:75:e1:30:1b:e8:07:a8: 48:8e:d4:54:fd:c8:32:c2:8d:68:a1:a0:9a:9a:e4:f9:34:fe: a6:b1:9d:b0:2c:86:6e:ab:be:00:54:81:43:6b:06:65:20:00: 97:48:c1:c2:ec:51:be:11:cb:23:a5:b5:1b:46:93:fc:33:92: b3:8f:21:37:ab:18:c0:9e:dc:9e:7d:42:cf:0c:44:34:e4:71: aa:c9:a2:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYxNDExMC8GA1UEBRMoNTU3M0M1NjhBRTAxNDgxNEQxQjRERUFGNjhGQTQ2NEY0 OTUyMzY2MTAeFw0yNTEyMDUwNTQ4NDdaFw0yNTEyMTIwNTQ4NDdaMBgxFjAUBgNV BAMTDTY5MzI3MjNmLTI2MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMLPxuD2IKSQs/PsTnAUZD/VhoaSSoZGW6POszWJqsL8uCuc5SDEbkRHnKnM8f B+945kczuae2qEvMvkXripubXevJf8SCzzdzqOS2R5O+Kyi0Ks4RiP4SpVkb5LZF tENhusMpyU16/z98LCxMRmKRX0se3c/VWvLk2yirFCyIh5TvpT/LsKIFJR2D64i/ lU4ttO9ilTrAOeUS5CGY1ZeuElUaQNNpf6CvT3vZ6rQuMmMnIlMpS99Ih/l3AYO/ /XE8Rgg5WPHVig8NNjlFQslfhsUlymDQC6MELYzDa4FYxKhEXO9LxcFQznLPa9B4 h0ZPcoEwceHie+BeTwzN1TkLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU3FIDH6n DVCYPpf2l7gcgBCQHhcwHwYDVR0jBBgwFoAUVXPFaK4BSBTRtN6vaPpGT0lSNmEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjE0LzJGRDkwMEUwQzNB MTExRjA5QjFCQzMzOUM0RjlBRTAyL1ZYUEZhSzRCU0JUUnRONnZhUHBHVDBsU05t RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVlhQRmFLNEJTQlRSdE42dmFQcEdUMGxTTm1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NjE0LzJGRDkwMEUwQzNBMTExRjA5QjFCQzMzOUM0RjlBRTAyL1ZYUEZhSzRCU0JU UnRONnZhUHBHVDBsU05tRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAADOqz+3ubdRVpwtxzqz+vLboY4dHisZvsN9gKvy22mqajveC3P0xOAg BQDAoMZKhwgAOSzVBt5i7u5XxY/tbHaiWO/OPOLYq9/0aflpdrpK7rAO5Kci+TSm WUXUDvAfCAyILvSgEeI3N9kFr/ApU4h7vGMSIYby+M9k6Iamc5LZ5VmoNFgU23Y4 BkpXxgrdvTc+jbNYADX6XfWrURjBNGcRNi6cQzH0AyHp18VVdeEwG+gHqEiO1FT9 yDLCjWihoJqa5Pk0/qaxnbAshm6rvgBUgUNrBmUgAJdIwcLsUb4RyyOltRtGk/wz krOPITerGMCe3J59Qs8MRDTkcarJouw= -----END CERTIFICATE-----Generated at Sun Dec 7 01:13:38 2025 by rpki-client