This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft File: vIlHKy_1NJ5Maoqwmc745o3XuZU.mft (raw, json) Hash identifier: NZ+VihwBBsAUchp1FLeN5sFtvi5V5Wvf7Z3WyfWPaJg= Subject key identifier: 1C:AC:68:79:21:7F:89:98:47:9D:43:6A:A7:9A:5C:CF:9F:95:19:02 Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 Certificate issuer: /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Certificate serial: 0848 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft Manifest number: 0842 Signing time: Sat 06 Dec 2025 19:51:33 +0000 Manifest this update: Sat 06 Dec 2025 19:51:33 +0000 Manifest next update: Sat 13 Dec 2025 19:51:33 +0000 Files and hashes: 1: vIlHKy_1NJ5Maoqwmc745o3XuZU.crl (hash: 5EujIaHZM1/swkZusZ09Y9SpE2uZQqFQ92t6D7hHMRo=) 2: 27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (hash: g+6S4S2dxNtg0BGxl2vF4MpJIveeS58PPReJPs/GBY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2120 (0x848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91495CF, serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Validity Not Before: Dec 6 19:51:33 2025 GMT Not After : Dec 13 19:51:33 2025 GMT Subject: CN=69348945-35b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:98:52:ae:dd:78:db:92:86:09:39:f0:11:d4: 57:59:cc:f4:71:2f:c1:41:a7:21:dd:0b:f8:0e:29: 7f:0d:c4:f2:27:2e:ee:b0:3b:6b:55:1e:3c:70:63: aa:55:16:bc:fb:23:39:42:0e:ef:36:2f:c1:6f:ee: 08:bd:0e:28:6a:76:44:1d:07:17:a9:09:52:8c:0a: c9:c5:39:d1:46:39:d9:f0:1e:ec:13:6f:77:1d:c2: 00:dd:33:2f:fe:f1:5d:96:2d:13:d8:3e:52:29:f8: 93:19:92:38:3f:aa:51:b1:52:ce:2f:a1:63:79:0b: 1e:98:d6:b7:82:4b:ec:d9:a3:3d:df:d6:8f:29:bf: 1c:1e:18:c7:07:5d:2a:5c:10:9a:d3:44:f8:d6:b8: c9:72:19:ac:17:9d:99:35:bd:b2:68:44:1d:23:e5: 3b:45:88:df:c6:46:0c:5a:ca:78:c7:59:82:19:95: 61:6e:2b:d7:91:36:5b:a0:aa:9e:d2:1d:fb:00:a5: 93:40:b0:18:9e:a6:b1:3e:68:60:cc:c5:c9:53:62: e7:fb:95:86:80:bc:d6:13:a1:7a:fe:05:84:b2:83: 34:ed:a2:1d:ff:e8:51:08:22:fe:95:9b:75:f4:df: ad:41:9c:40:6f:02:1a:66:b6:c8:3a:7d:07:be:55: c6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AC:68:79:21:7F:89:98:47:9D:43:6A:A7:9A:5C:CF:9F:95:19:02 X509v3 Authority Key Identifier: keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e4:e6:52:d0:58:a7:d7:ce:0b:d1:f3:14:13:67:e0:a4:50: b6:3e:55:2c:64:de:87:56:02:ad:21:b5:01:54:64:2d:32:25: e2:e9:0f:dc:3e:58:07:be:b8:4a:0f:d9:d7:9b:d8:1e:3d:8c: c5:ac:b6:8f:35:94:51:34:cc:bb:67:12:45:e2:a1:9a:58:75: 61:8e:f3:fa:64:db:d0:0b:0f:65:78:84:fe:0f:47:b0:87:aa: 7b:3b:a6:ab:d7:31:1f:f1:cd:58:b5:07:04:95:79:34:f0:65: df:c8:43:9d:8a:fa:80:72:81:27:39:fd:42:f0:d9:37:1a:2e: b2:ca:ac:ff:f4:ee:53:22:e0:68:b5:87:d2:6a:45:79:3e:da: 61:b8:a8:89:f9:a0:e0:77:6f:78:ef:f2:a6:45:aa:34:28:66: 9f:60:a9:01:17:88:3c:32:98:62:1a:2b:06:1f:d7:9f:a2:28: cb:76:e1:81:3e:5e:08:2d:f3:6f:0d:69:ba:68:65:f0:11:03: 6a:9f:bd:dc:53:89:c8:c3:8d:78:8c:d3:bc:34:71:e6:93:4c: 11:ba:7d:06:e6:d0:ce:9b:cc:e9:43:38:14:3a:db:29:a2:d4: 2c:44:c4:10:46:d9:84:cc:e1:4b:db:f2:fd:62:c5:28:64:cf: de:25:8c:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk1Q0YxMTAvBgNVBAUTKEJDODk0NzJCMkZGNTM0OUU0QzZBOEFCMDk5Q0VGOEU2 OEREN0I5OTUwHhcNMjUxMjA2MTk1MTMzWhcNMjUxMjEzMTk1MTMzWjAYMRYwFAYD VQQDEw02OTM0ODk0NS0zNWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJhSrt1425KGCTnwEdRXWcz0cS/BQach3Qv4Dil/DcTyJy7usDtrVR48cGOq VRa8+yM5Qg7vNi/Bb+4IvQ4oanZEHQcXqQlSjArJxTnRRjnZ8B7sE293HcIA3TMv /vFdli0T2D5SKfiTGZI4P6pRsVLOL6FjeQsemNa3gkvs2aM939aPKb8cHhjHB10q XBCa00T41rjJchmsF52ZNb2yaEQdI+U7RYjfxkYMWsp4x1mCGZVhbivXkTZboKqe 0h37AKWTQLAYnqaxPmhgzMXJU2Ln+5WGgLzWE6F6/gWEsoM07aId/+hRCCL+lZt1 9N+tQZxAbwIaZrbIOn0HvlXGVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBysaHkh f4mYR51DaqeaXM+flRkCMB8GA1UdIwQYMBaAFLyJRysv9TSeTGqKsJnO+OaN17mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTVDRi8yQTUxMDY5Q0VC QUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5KNU1hb3F3bWM3NDVvM1h1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJbEhLeV8xTko1TWFvcXdtYzc0NW8zWHVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTVDRi8yQTUxMDY5Q0VCQUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5K NU1hb3F3bWM3NDVvM1h1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt5OZS0Fin184L0fMUE2fgpFC2PlUsZN6HVgKtIbUBVGQtMiXi6Q/c PlgHvrhKD9nXm9gePYzFrLaPNZRRNMy7ZxJF4qGaWHVhjvP6ZNvQCw9leIT+D0ew h6p7O6ar1zEf8c1YtQcElXk08GXfyEOdivqAcoEnOf1C8Nk3Gi6yyqz/9O5TIuBo tYfSakV5PtphuKiJ+aDgd2947/KmRao0KGafYKkBF4g8MphiGisGH9efoijLduGB Pl4ILfNvDWm6aGXwEQNqn73cU4nIw414jNO8NHHmk0wRun0G5tDOm8zpQzgUOtsp otQsRMQQRtmEzOFL2/L9YsUoZM/eJYza -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:46 2025 by rpki-client