This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json) Hash identifier: X+R/zHYSuDHoRf5x8VIB3LHEqiB3NR889ZQFiRzr2LQ= Subject key identifier: F9:82:47:1A:C7:4F:F7:AC:81:44:31:DB:B1:7B:D9:6C:72:73:3B:DE Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Certificate serial: 0CC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft Manifest number: 0CBD Signing time: Sat 06 Dec 2025 17:35:19 +0000 Manifest this update: Sat 06 Dec 2025 17:35:18 +0000 Manifest next update: Sat 13 Dec 2025 17:35:18 +0000 Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: +BfwEy9V00cd6EgUkj7I+s5fxF4A1wvrP+72cG4bPCk=) 2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: +/HgExCatPcRmJalycUeFMmwknrCCg9dQk/HjuFZjUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3269 (0xcc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C27, serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Validity Not Before: Dec 6 17:35:18 2025 GMT Not After : Dec 13 17:35:18 2025 GMT Subject: CN=69346957-a92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:42:37:7e:61:d9:4e:40:9c:64:be:a0:5e:72: ad:4b:75:3c:0e:bf:86:0a:16:a1:a1:10:9c:26:48: c6:2b:d5:dc:71:c0:b5:ef:6f:bb:71:62:10:9c:cc: 63:6b:80:2e:14:03:de:b7:e8:7c:aa:5f:8e:eb:77: 41:93:6d:64:8b:a8:ad:38:b7:b2:93:c3:dc:a6:79: ce:7a:07:a0:30:27:29:0c:cb:a6:56:fe:38:5a:26: c2:b8:c1:ea:ff:83:e8:c3:2f:25:f6:b6:82:de:d5: 53:9b:62:c5:41:2b:0e:6f:c4:d4:d8:7f:d5:a1:79: c6:b4:b7:38:82:64:35:36:5d:81:4b:cb:f6:c1:79: 1c:ed:b7:c6:6b:8c:c4:f5:ed:3d:0c:f1:cb:70:f4: cb:10:e1:b0:49:d1:fa:b6:91:5b:41:ac:a8:23:4b: 34:d2:97:88:8a:99:5d:34:61:fe:86:a7:62:00:14: f0:c9:47:2a:70:50:20:f7:bb:06:a8:26:09:9a:13: b5:66:bf:8c:7b:20:2e:c5:8c:03:ec:31:2d:28:16: f9:df:62:91:bf:93:c8:c0:35:28:03:4e:68:ce:3e: 71:45:66:78:b2:26:09:27:20:ac:1a:ed:ab:bf:31: da:13:28:ad:ce:83:e7:f0:53:d1:19:20:69:a5:d7: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:82:47:1A:C7:4F:F7:AC:81:44:31:DB:B1:7B:D9:6C:72:73:3B:DE X509v3 Authority Key Identifier: keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:96:25:82:3f:94:d8:4f:df:22:3e:cb:e1:a0:66:35:5b:5d: f9:b2:41:fa:74:49:fe:d2:c2:a1:21:57:d3:1a:9c:07:e3:0c: 93:d4:d9:b4:63:90:cb:16:d4:8e:41:5b:71:39:c9:39:30:e6: 76:37:e9:9b:a9:af:37:3d:6f:7a:a3:71:1f:d3:3a:42:62:a3: 8e:62:14:26:bc:d4:cc:50:69:9d:d7:09:ef:52:57:70:dc:0b: df:53:b8:fa:0f:4b:ab:11:39:f6:29:95:58:1d:44:ec:f2:7c: e5:cb:4e:45:5f:0d:77:6e:87:f5:64:04:46:36:ab:34:62:f3: 6d:30:f1:bb:4a:56:ea:50:f7:22:af:51:5b:ad:69:29:3c:f2: 8c:c8:5e:89:f7:8e:79:06:80:7c:12:11:23:d7:a0:6b:50:98: 94:02:da:00:c8:ea:27:74:4d:40:bd:29:12:e5:5c:23:af:32: 84:a8:40:0c:3f:8a:52:68:b1:00:c2:8a:2d:73:08:1b:31:d1: 2b:4f:09:d9:52:aa:69:db:16:b8:96:88:54:d1:b4:58:9a:57: 85:f4:f6:9d:75:1e:09:3a:87:80:60:6b:bd:bc:2a:c2:a4:35: 16:5c:f3:b0:c1:4a:76:80:9d:1a:fd:bc:1c:3c:bb:94:bb:08: 75:08:5b:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDMjcxMTAvBgNVBAUTKDU0NThDNDU2MjlDMTA0QUFBN0E1ODcyODY4NkY4RDFF Mjg3MkE5MkEwHhcNMjUxMjA2MTczNTE4WhcNMjUxMjEzMTczNTE4WjAYMRYwFAYD VQQDEw02OTM0Njk1Ny1hOTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EI3fmHZTkCcZL6gXnKtS3U8Dr+GChahoRCcJkjGK9XcccC172+7cWIQnMxj a4AuFAPet+h8ql+O63dBk21ki6itOLeyk8PcpnnOegegMCcpDMumVv44WibCuMHq /4Powy8l9raC3tVTm2LFQSsOb8TU2H/VoXnGtLc4gmQ1Nl2BS8v2wXkc7bfGa4zE 9e09DPHLcPTLEOGwSdH6tpFbQayoI0s00peIipldNGH+hqdiABTwyUcqcFAg97sG qCYJmhO1Zr+MeyAuxYwD7DEtKBb532KRv5PIwDUoA05ozj5xRWZ4siYJJyCsGu2r vzHaEyitzoPn8FPRGSBppdey6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmCRxrH T/esgUQx27F72WxyczveMB8GA1UdIwQYMBaAFFRYxFYpwQSqp6WHKGhvjR4ocqkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0MyNy82NUJCNDg5QzAw NEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJLcW5wWWNvYUctTkhpaHlx U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGakVWaW5CQktxbnBZY29hRy1OSGloeXFTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0MyNy82NUJCNDg5QzAwNEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJL cW5wWWNvYUctTkhpaHlxU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpliWCP5TYT98iPsvhoGY1W135skH6dEn+0sKhIVfTGpwH4wyT1Nm0 Y5DLFtSOQVtxOck5MOZ2N+mbqa83PW96o3Ef0zpCYqOOYhQmvNTMUGmd1wnvUldw 3AvfU7j6D0urETn2KZVYHUTs8nzly05FXw13bof1ZARGNqs0YvNtMPG7SlbqUPci r1FbrWkpPPKMyF6J9455BoB8EhEj16BrUJiUAtoAyOondE1AvSkS5VwjrzKEqEAM P4pSaLEAwootcwgbMdErTwnZUqpp2xa4lohU0bRYmleF9PaddR4JOoeAYGu9vCrC pDUWXPOwwUp2gJ0a/bwcPLuUuwh1CFvH -----END CERTIFICATE-----Generated at Sat Dec 6 20:11:58 2025 by rpki-client