This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft File: VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft (raw, json) Hash identifier: 6ZJhT7IIPUnNxl5fE8QTan/3uVWckHzmLC/yanXAmRI= Subject key identifier: 54:5A:71:2F:2A:18:79:A7:59:A3:D8:FC:AA:EC:E5:91:7A:21:EC:81 Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 Certificate issuer: /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Certificate serial: 0BA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft Manifest number: 0BA0 Signing time: Sat 06 Dec 2025 18:17:15 +0000 Manifest this update: Sat 06 Dec 2025 18:17:14 +0000 Manifest next update: Sat 13 Dec 2025 18:17:14 +0000 Files and hashes: 1: VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl (hash: HJaH/hbrRXp2uc/Eo96yn72B6ib6p3Nyd2snmNbO6Mo=) 2: 8789C45E384311EAAA40EE51C4F9AE02.roa (hash: MAWDNXgpu9PgJn7Gnnkwa2ICesKD1B+IPcDJf1k8UoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2984 (0xba8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154534, serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Validity Not Before: Dec 6 18:17:14 2025 GMT Not After : Dec 13 18:17:14 2025 GMT Subject: CN=6934732b-c80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:26:d6:9c:84:5e:2b:53:97:1f:45:63:f9: 8f:5f:2a:af:29:c7:3d:a0:46:e2:48:ae:33:c5:f0: c8:bb:3a:c2:52:24:e2:44:53:58:98:8b:0a:f6:8f: 71:15:4d:8a:e5:22:24:ca:75:d5:f4:19:ce:c0:7f: 35:37:fe:33:8a:4f:24:56:c3:f6:89:6c:8c:0e:16: e3:0f:ad:1d:45:12:47:df:bd:11:d5:93:d9:ad:8f: bf:eb:28:66:25:e5:07:57:c6:2d:4b:a7:16:d7:ee: ad:7b:05:2c:d8:4d:13:72:29:93:1b:c7:91:9d:28: 27:5e:dd:d0:a8:54:ec:92:64:d9:20:b9:06:f2:66: 11:93:68:47:a9:a4:cb:d3:59:66:a1:e0:82:f5:30: e1:24:80:04:dd:94:49:11:0b:b4:de:54:c1:48:57: 4a:5b:66:f9:a8:85:09:e3:17:70:7b:8b:b4:53:0d: c8:5c:75:8f:97:fe:2d:ee:57:05:66:ad:23:22:1e: 5b:2d:df:64:a5:6d:87:b6:73:10:57:f8:6f:b1:65: 0f:1b:38:88:43:47:30:55:e1:0d:3c:65:69:bb:56: b0:7c:8e:16:c0:39:c9:ae:e9:b3:23:28:23:0c:38: 03:f4:b0:a2:15:db:ef:6f:9c:23:91:43:a5:00:e5: 2e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5A:71:2F:2A:18:79:A7:59:A3:D8:FC:AA:EC:E5:91:7A:21:EC:81 X509v3 Authority Key Identifier: keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:0b:81:ec:65:65:67:cf:6c:9e:df:8d:34:02:05:0c:7e:1c: 1f:95:f5:23:1c:b0:49:a3:78:4a:e0:95:64:cf:b9:e5:b0:a3: 9c:db:36:44:69:46:fb:e7:dd:f2:18:b0:55:fc:fc:9f:a5:d4: d5:fd:2d:ac:69:de:2f:4c:d6:f2:48:fa:58:8c:86:6b:72:69: 0b:fc:b4:f3:77:52:2e:23:9f:c2:e4:b0:c7:11:f0:20:df:b9: d7:2b:59:84:08:e5:a2:26:ab:95:5f:ec:60:5a:cf:bd:e2:71: 66:b0:b9:9b:03:b2:90:7f:ae:7e:56:74:bd:0f:dc:bb:45:75: b2:bd:8b:cb:cc:43:1c:59:18:d2:c8:1b:0e:e9:3e:10:54:9f: 54:2e:07:86:91:73:cc:91:a7:d0:8e:48:2d:a3:b0:3d:c0:34: 15:ac:eb:4f:a8:50:ef:44:09:32:af:de:73:d9:76:c3:9e:70: 1d:3f:dc:67:14:0d:e0:36:c4:ce:4e:8a:25:ce:b2:eb:a2:fc: 44:84:6c:69:5b:99:ed:e4:1f:d9:d8:fd:13:f4:c5:dc:6f:3d: e3:a8:c5:2b:94:22:b6:0f:58:25:d9:03:39:6c:81:70:79:77: 4e:b9:a2:15:1e:7a:43:98:66:b3:5b:e5:89:66:6c:db:b6:ab: 08:20:85:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MzQxMTAvBgNVBAUTKDU1QzQ2ODU1Q0M5MUFDNTRBQzA3NUMyOTdCNzUzMUZB ODhBNzM1RDkwHhcNMjUxMjA2MTgxNzE0WhcNMjUxMjEzMTgxNzE0WjAYMRYwFAYD VQQDEw02OTM0NzMyYi1jODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgEm1pyEXitTlx9FY/mPXyqvKcc9oEbiSK4zxfDIuzrCUiTiRFNYmIsK9o9x FU2K5SIkynXV9BnOwH81N/4zik8kVsP2iWyMDhbjD60dRRJH370R1ZPZrY+/6yhm JeUHV8YtS6cW1+6tewUs2E0TcimTG8eRnSgnXt3QqFTskmTZILkG8mYRk2hHqaTL 01lmoeCC9TDhJIAE3ZRJEQu03lTBSFdKW2b5qIUJ4xdwe4u0Uw3IXHWPl/4t7lcF Zq0jIh5bLd9kpW2HtnMQV/hvsWUPGziIQ0cwVeENPGVpu1awfI4WwDnJrumzIygj DDgD9LCiFdvvb5wjkUOlAOUumQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRacS8q GHmnWaPY/Krs5ZF6IeyBMB8GA1UdIwQYMBaAFFXEaFXMkaxUrAdcKXt1MfqIpzXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUzNC9CRDI2OTA5RTM4 NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJGU3NCMXdwZTNVeC1vaW5O ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZjUm9WY3lSckZTc0Ixd3BlM1V4LW9pbk5kay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUzNC9CRDI2OTA5RTM4NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJG U3NCMXdwZTNVeC1vaW5OZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWC4HsZWVnz2ye3400AgUMfhwflfUjHLBJo3hK4JVkz7nlsKOc2zZE aUb7593yGLBV/PyfpdTV/S2sad4vTNbySPpYjIZrcmkL/LTzd1IuI5/C5LDHEfAg 37nXK1mECOWiJquVX+xgWs+94nFmsLmbA7KQf65+VnS9D9y7RXWyvYvLzEMcWRjS yBsO6T4QVJ9ULgeGkXPMkafQjkgto7A9wDQVrOtPqFDvRAkyr95z2XbDnnAdP9xn FA3gNsTOToolzrLrovxEhGxpW5nt5B/Z2P0T9MXcbz3jqMUrlCK2D1gl2QM5bIFw eXdOuaIVHnpDmGazW+WJZmzbtqsIIIWu -----END CERTIFICATE-----Generated at Sat Dec 6 20:21:43 2025 by rpki-client