This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft File: a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft (raw, json) Hash identifier: EQWwAmQYk2p3PHjaeAQg/YehDXpkecDanhSUOhvnNPc= Subject key identifier: D0:A8:03:7B:A9:BF:41:96:AE:F7:4A:F7:A6:5F:07:0F:54:B0:38:9F Authority key identifier: 6B:EB:C0:21:2D:6F:ED:83:21:C8:D6:F0:C5:C9:C4:A6:6E:D7:11:7C Certificate issuer: /CN=A9152705/serialNumber=6BEBC0212D6FED8321C8D6F0C5C9C4A66ED7117C Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft Manifest number: 2C Signing time: Sun 07 Dec 2025 05:39:06 +0000 Manifest this update: Sun 07 Dec 2025 05:39:06 +0000 Manifest next update: Sun 14 Dec 2025 05:39:06 +0000 Files and hashes: 1: a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl (hash: mkTjmY0F6ljBdvMd9EXN3GU1iJXL4hypOmN9cbsrkXI=) 2: D5E5F60E92BF11F0BA90D823C4F9AE02.roa (hash: r5MD1RHeYrmwx+4qL0Z/lL7AllWPwSQqqeUriNLY+mo=) 3: 25CC4486C5B811F092EE2F29C4F9AE02.roa (hash: j0WmWd/YQ/ExSA0i6w+NpW9jRurtYn/dmfUGXmMo7EU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152705, serialNumber=6BEBC0212D6FED8321C8D6F0C5C9C4A66ED7117C Validity Not Before: Dec 7 05:39:06 2025 GMT Not After : Dec 14 05:39:06 2025 GMT Subject: CN=693512fa-a324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:13:5e:1f:7b:1d:04:53:7d:73:9a:60:94:bc: 97:f7:f0:bc:19:0d:e0:76:14:bf:d5:fc:63:22:8f: b0:64:48:00:95:c4:71:c2:c5:61:bf:59:71:a5:d2: 33:f5:3c:2e:49:56:e1:15:1d:ce:b0:98:fa:23:4c: 08:e4:f5:5c:08:80:25:aa:6a:fb:39:75:1c:b2:9e: 12:66:79:c9:4b:f6:e2:1b:13:bc:d9:a1:6b:f6:72: 1c:73:7a:62:85:53:ba:78:0a:89:c9:40:96:35:ac: 59:6f:f2:e9:ff:b1:5a:78:45:ab:96:f4:04:c4:5c: ec:0d:1a:21:a8:4c:5d:0b:3c:69:ab:fd:25:a9:5d: 20:33:6a:0d:53:51:c6:ef:d8:4a:1d:f0:12:68:5e: 1a:3a:f4:2e:df:40:c1:79:61:6f:15:4b:27:5c:13: e5:11:14:35:15:6b:89:67:7b:a3:23:dd:d8:88:29: fc:b6:31:dd:17:85:ac:91:f6:da:b6:de:79:47:dd: 75:8d:66:79:5d:37:05:ff:6c:26:28:4f:1f:42:bf: f0:54:60:a9:63:46:65:fd:bf:64:4e:c9:46:b5:17: 59:ba:09:1c:e9:43:a7:08:2f:e3:a0:a0:f9:41:2d: 96:af:ff:0b:87:c5:9c:03:bd:05:86:cb:72:43:12: 59:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A8:03:7B:A9:BF:41:96:AE:F7:4A:F7:A6:5F:07:0F:54:B0:38:9F X509v3 Authority Key Identifier: keyid:6B:EB:C0:21:2D:6F:ED:83:21:C8:D6:F0:C5:C9:C4:A6:6E:D7:11:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:85:6f:43:c3:71:58:82:66:95:89:73:39:4f:7f:ab:e8:8d: ac:d5:77:06:e2:23:ff:e9:56:7f:a0:7c:7d:24:ee:c8:47:03: e9:4d:a9:af:f5:ad:05:f8:f5:f3:e6:d2:3c:06:f3:a6:22:e6: fd:de:97:1e:7e:56:75:4a:23:1d:87:fb:06:9b:77:62:45:55: 89:9c:e7:1f:65:5a:05:eb:c7:fd:bc:b3:61:e1:a4:f5:c4:36: a9:51:5a:51:df:76:72:91:0b:c9:7c:19:3e:39:3e:a9:94:16: 22:b0:04:ae:17:c5:6e:14:e2:5c:6f:f3:36:91:5e:b2:56:bb: d4:98:30:a5:41:8a:69:8b:e9:7d:15:4e:dc:dd:73:32:ad:d0: af:02:af:a7:e3:b2:86:df:c8:4f:8e:72:a7:b6:4d:96:ac:1b: 1b:30:fb:25:6b:5a:a9:c8:04:81:3c:e1:25:6c:36:48:04:11: 48:87:f6:72:25:f7:f9:e8:06:95:29:83:52:20:9b:b1:93:a2: bd:b8:84:a0:b5:ed:7d:6e:31:a0:c4:f2:cb:8a:0c:f1:5d:26: d5:04:c1:3b:a7:46:3b:9b:f3:c8:bb:13:75:38:b3:c7:ec:a4: 7c:8f:9e:35:ea:b8:d0:c1:27:1c:6b:82:ce:dc:06:24:10:76: e5:f2:d2:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjcwNTExMC8GA1UEBRMoNkJFQkMwMjEyRDZGRUQ4MzIxQzhENkYwQzVDOUM0QTY2 RUQ3MTE3QzAeFw0yNTEyMDcwNTM5MDZaFw0yNTEyMTQwNTM5MDZaMBgxFjAUBgNV BAMTDTY5MzUxMmZhLWEzMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqE14fex0EU31zmmCUvJf38LwZDeB2FL/V/GMij7BkSACVxHHCxWG/WXGl0jP1 PC5JVuEVHc6wmPojTAjk9VwIgCWqavs5dRyynhJmeclL9uIbE7zZoWv2chxzemKF U7p4ConJQJY1rFlv8un/sVp4RauW9ATEXOwNGiGoTF0LPGmr/SWpXSAzag1TUcbv 2Eod8BJoXho69C7fQMF5YW8VSydcE+URFDUVa4lne6Mj3diIKfy2Md0XhayR9tq2 3nlH3XWNZnldNwX/bCYoTx9Cv/BUYKljRmX9v2ROyUa1F1m6CRzpQ6cIL+OgoPlB LZav/wuHxZwDvQWGy3JDElltAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0KgDe6m/ QZau90r3pl8HD1SwOJ8wHwYDVR0jBBgwFoAUa+vAIS1v7YMhyNbwxcnEpm7XEXww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyNzA1LzYyNzYwRDI2OTJC RjExRjA5OUFDMTMyM0M0RjlBRTAyL2EtdkFJUzF2N1lNaHlOYnd4Y25FcG03WEVY dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYS12QUlTMXY3WU1oeU5id3hjbkVwbTdYRVh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy NzA1LzYyNzYwRDI2OTJCRjExRjA5OUFDMTMyM0M0RjlBRTAyL2EtdkFJUzF2N1lN aHlOYnd4Y25FcG03WEVYdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJGFb0PDcViCZpWJczlPf6vojazVdwbiI//pVn+gfH0k7shHA+lNqa/1 rQX49fPm0jwG86Yi5v3elx5+VnVKIx2H+wabd2JFVYmc5x9lWgXrx/28s2HhpPXE NqlRWlHfdnKRC8l8GT45PqmUFiKwBK4XxW4U4lxv8zaRXrJWu9SYMKVBimmL6X0V TtzdczKt0K8Cr6fjsobfyE+Ocqe2TZasGxsw+yVrWqnIBIE84SVsNkgEEUiH9nIl 9/noBpUpg1Igm7GTor24hKC17X1uMaDE8suKDPFdJtUEwTunRjub88i7E3U4s8fs pHyPnjXquNDBJxxrgs7cBiQQduXy0iQ= -----END CERTIFICATE-----Generated at Mon Dec 8 09:25:02 2025 by rpki-client