This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft File: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft (raw, json) Hash identifier: p4Yzzu4OsQgNs9Dvbk9JClJMG1uCBjGMb0H7KC4EKJs= Subject key identifier: 85:FA:EB:D4:B5:FD:31:1F:E7:2E:A9:8B:9B:85:8A:D3:0F:B5:C3:B6 Authority key identifier: 56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA Certificate issuer: /CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Certificate serial: 13DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft Manifest number: 13D6 Signing time: Thu 18 Dec 2025 16:48:23 +0000 Manifest this update: Thu 18 Dec 2025 16:48:23 +0000 Manifest next update: Thu 25 Dec 2025 16:48:23 +0000 Files and hashes: 1: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl (hash: vaAdsvEAKyswhs4nHUIwujDHdpk96EfV3Hrm6m5zwXk=) 2: 8B2E3BA270BD11ED970C535FC4F9AE02.roa (hash: 5VH2eBCf4hkjUtJHqHQPv/5yN4SkQaCzRWcunhO07pE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5086 (0x13de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F22A, serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Validity Not Before: Dec 18 16:48:23 2025 GMT Not After : Dec 25 16:48:23 2025 GMT Subject: CN=69443057-73f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c7:3b:d8:ef:30:a3:9b:b8:f3:c4:46:a1:e8: d9:6b:44:e7:b9:df:92:b3:88:0e:33:6e:6b:dc:3c: 26:76:76:75:7d:05:a2:b9:d3:a5:5b:c6:90:2d:d0: 0e:f0:f0:ea:c7:50:08:9b:19:2e:83:99:41:2a:91: 80:8d:80:dd:f3:52:16:50:d5:db:fa:72:6e:5c:4f: 82:4a:b9:4a:ac:84:b4:90:a4:62:30:b3:11:fc:2d: ff:33:f7:27:47:88:f7:83:a3:45:be:af:3d:24:52: fc:e6:91:a4:bd:ab:7f:f3:8c:a1:04:f1:58:ff:dc: ac:89:20:c9:8e:6f:b5:25:cf:43:81:6c:63:f2:4b: 1e:e9:eb:0e:cb:5a:d1:44:6b:5e:4a:81:41:3e:28: cf:1c:28:8f:09:24:63:aa:1c:55:a2:6c:83:4b:20: 9a:76:3d:98:ee:5c:88:dd:ec:e8:72:1d:c9:d6:de: cb:fc:bd:94:8f:af:ea:de:e7:40:d7:80:99:14:41: 6d:54:b1:e5:3f:fd:c2:54:dc:5c:44:bd:9e:22:7a: cd:7a:88:9c:7f:7b:2c:e8:a8:13:86:f3:95:88:61: 3c:a3:94:be:2b:e6:0a:6c:7b:1c:18:c8:64:c8:75: 89:bd:ab:4a:4f:98:b5:cc:cf:72:6d:17:fb:3a:25: 76:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FA:EB:D4:B5:FD:31:1F:E7:2E:A9:8B:9B:85:8A:D3:0F:B5:C3:B6 X509v3 Authority Key Identifier: keyid:56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3b:12:46:af:ae:be:99:98:1a:7d:9d:0a:e3:d5:ff:ec:f4: 9e:7d:5f:bc:79:4e:04:8a:31:ae:fd:05:c3:8c:81:65:e6:22: a5:63:ee:d4:5b:ed:ad:9e:9d:ab:70:0e:43:3b:d2:1a:13:78: 7c:bf:b6:b0:74:bb:49:b8:ad:8e:b0:be:71:61:03:14:d4:b5: fc:a4:b9:20:43:50:26:cf:83:42:bd:ae:de:03:09:08:df:8c: 89:56:9b:5e:32:66:8a:e9:4d:a1:08:46:47:e1:92:d0:cf:a9: 29:c8:e5:03:bb:7a:74:59:d9:25:f4:22:eb:55:b1:07:03:5d: 52:b4:ea:90:7f:ec:a6:f9:85:35:ed:7e:3f:46:ea:17:ce:8e: 83:bf:50:e3:08:de:01:fe:81:5f:6a:f5:b6:6b:69:69:7e:0e: ca:a3:e6:bd:f3:3d:50:8c:66:ba:f6:dc:15:2e:b3:3c:ae:ef: 07:e0:9d:14:a1:e1:ed:60:45:a7:8f:d4:5f:6c:2c:ec:2e:ed: 8b:3e:e6:43:26:0a:8a:0b:28:6b:10:23:bc:a1:a6:ec:fc:81: 50:50:97:1a:df:b1:ff:78:68:92:1a:e8:bf:a0:05:93:6e:f3: 26:47:a0:c6:c2:f3:11:df:08:51:7a:6c:65:6a:61:ec:42:f6: b6:38:7a:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYyMkExMTAvBgNVBAUTKDU2QUYxQ0QwQjRFMDdEMDAwQzY0QUIwMTZDMzNGNzg2 QTBERDkwRkEwHhcNMjUxMjE4MTY0ODIzWhcNMjUxMjI1MTY0ODIzWjAYMRYwFAYD VQQDDA02OTQ0MzA1Ny03M2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMc72O8wo5u488RGoejZa0Tnud+Ss4gOM25r3DwmdnZ1fQWiudOlW8aQLdAO 8PDqx1AImxkug5lBKpGAjYDd81IWUNXb+nJuXE+CSrlKrIS0kKRiMLMR/C3/M/cn R4j3g6NFvq89JFL85pGkvat/84yhBPFY/9ysiSDJjm+1Jc9DgWxj8kse6esOy1rR RGteSoFBPijPHCiPCSRjqhxVomyDSyCadj2Y7lyI3ezoch3J1t7L/L2Uj6/q3udA 14CZFEFtVLHlP/3CVNxcRL2eInrNeoicf3ss6KgThvOViGE8o5S+K+YKbHscGMhk yHWJvatKT5i1zM9ybRf7OiV2WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIX669S1 /TEf5y6pi5uFitMPtcO2MB8GA1UdIwQYMBaAFFavHNC04H0ADGSrAWwz94ag3ZD6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjIyQS83RUVDMUU0QzlD RDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZRQU1aS3NCYkRQM2hxRGRr UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxOGMwTFRnZlFBTVpLc0JiRFAzaHFEZGtQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjIyQS83RUVDMUU0QzlDRDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZR QU1aS3NCYkRQM2hxRGRrUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPOxJGr66+mZgafZ0K49X/7PSefV+8eU4EijGu/QXDjIFl5iKlY+7U W+2tnp2rcA5DO9IaE3h8v7awdLtJuK2OsL5xYQMU1LX8pLkgQ1Amz4NCva7eAwkI 34yJVpteMmaK6U2hCEZH4ZLQz6kpyOUDu3p0Wdkl9CLrVbEHA11StOqQf+ym+YU1 7X4/RuoXzo6Dv1DjCN4B/oFfavW2a2lpfg7Ko+a98z1QjGa69twVLrM8ru8H4J0U oeHtYEWnj9RfbCzsLu2LPuZDJgqKCyhrECO8oabs/IFQUJca37H/eGiSGui/oAWT bvMmR6DGwvMR3whRemxlamHsQva2OHpO -----END CERTIFICATE-----Generated at Thu Dec 18 22:07:15 2025 by rpki-client