This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft File: VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft (raw, json) Hash identifier: 9UBGC4//QXKzvG+GeHumTKyFTRxYEWlF6V8sMIdXMjs= Subject key identifier: 79:F5:53:80:A4:EC:FB:FA:A0:B2:A9:CB:7C:9E:69:03:20:7B:69:B3 Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD Certificate issuer: /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD Certificate serial: 06DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft Manifest number: 06C8 Signing time: Thu 04 Dec 2025 21:00:53 +0000 Manifest this update: Thu 04 Dec 2025 21:00:53 +0000 Manifest next update: Thu 11 Dec 2025 21:00:53 +0000 Files and hashes: 1: VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl (hash: 972VgAy2DJwKnWKWxUKRsVCB7lAbJBmP8HpP2zmXTfc=) 2: C437B01282C211EBBB08B280C4F9AE02.roa (hash: LDI+BxI6yWXikOHlYdiFwqiUYfCU5mn6/crB9AgbNkw=) 3: C3AD861C82C211EBBB08B280C4F9AE02.roa (hash: ppuSVqb5ak+lKAoy3v74h5n7285gGl/XWCpfoBLQk4c=) 4: 9EA2D73236D311EF89295180C4F9AE02.roa (hash: +9/yAjbYtByxr02PsszdU6WoEOBanUxI3XJ58Y32rUg=) 5: C310545082C211EBBB08B280C4F9AE02.roa (hash: 0laeAZbe0gy37miOPDx6Hc3w0hPowOHvIhox87nHsFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1759 (0x6df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD Validity Not Before: Dec 4 21:00:53 2025 GMT Not After : Dec 11 21:00:53 2025 GMT Subject: CN=6931f685-567b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:4e:88:b9:4d:11:36:9f:45:40:ae:bf:ba: 2d:12:ae:c2:6c:e3:ca:be:7c:8b:3a:84:81:39:30: 23:7a:39:aa:28:56:44:3c:b2:ca:22:5a:6c:ed:2e: 8e:23:9c:94:ce:9f:95:f2:49:87:32:94:ea:fa:9a: 04:f6:9a:0d:32:7a:f8:6e:f4:52:3b:c4:53:0a:22: b1:e9:2f:4d:76:04:c5:00:44:45:10:24:ef:48:c8: b7:b8:5b:45:6a:80:c7:46:ed:30:91:05:34:4b:ce: 08:9f:b0:44:dd:b6:9d:e0:a6:63:95:0e:48:d8:ab: ce:9e:64:0a:8a:25:46:b5:f8:98:cb:b6:f9:cc:0e: f1:6b:e5:e5:94:73:33:1c:ba:7f:c0:32:60:48:26: 2b:7b:25:fd:03:41:1e:1f:e7:37:84:3a:30:1f:af: 9f:93:88:a2:88:e2:30:e4:b8:62:4e:f3:5e:71:0c: ec:d9:d5:cd:6f:9c:ce:b0:b4:a1:21:a0:14:40:55: a5:0b:29:7c:9f:05:a6:7d:fa:4d:cc:99:9f:f9:1a: de:bf:82:7e:10:3f:52:62:86:96:a6:82:32:22:e0: 12:36:d0:6e:30:f4:ba:11:a7:bc:2a:70:1c:7b:44: 1b:74:10:65:44:b1:84:70:47:06:c7:0f:df:f4:d9: f8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F5:53:80:A4:EC:FB:FA:A0:B2:A9:CB:7C:9E:69:03:20:7B:69:B3 X509v3 Authority Key Identifier: keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:02:e4:5e:f4:5f:0f:34:5d:97:53:36:51:c2:ca:50:ae:92: 68:7b:c5:6c:11:95:68:59:36:63:57:8f:2a:be:90:ea:c5:7e: 00:2b:06:a5:5d:5c:e3:e0:df:ba:78:8a:f8:a4:d7:8a:ec:7f: c0:5d:1d:00:5c:39:88:a0:53:ab:f9:71:72:0a:d1:3c:a9:7f: fa:1e:83:09:0c:ac:8c:f0:1a:55:f0:de:2e:9b:c6:df:a2:66: df:94:a3:2a:03:86:8b:d7:fc:eb:ca:cf:03:fa:46:10:da:a0: 81:fd:87:eb:31:1d:db:32:af:fe:1e:bf:1c:74:2d:3d:43:f0: 53:5c:ff:45:b1:4d:2a:3e:8a:fc:20:ae:1d:4e:83:9f:91:4b: 01:03:3a:b9:a0:6b:37:20:9a:29:18:c8:9e:eb:52:87:65:de: 66:9a:26:fb:dc:61:c9:a0:a9:07:af:0d:ae:f9:cf:5a:c9:3e: e9:54:ef:ac:1e:10:12:03:f5:0f:91:56:85:0c:b8:c0:37:6b: 70:0a:bb:19:e9:71:9d:62:4d:83:89:84:cd:28:52:48:a9:df: f4:a4:7c:b5:6c:dc:0e:27:57:9a:ab:ea:e1:ee:b8:33:6a:4f: 0d:1d:31:37:0d:42:c6:a7:b4:a9:79:4c:2c:44:61:f9:a2:ce: 9d:9c:21:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzkwQzMxMTAvBgNVBAUTKDU0ODdCNjNGNDRENjkxRDQzNTY4OEFGRTNDOEFDMjdC RkQ5MTEyQUQwHhcNMjUxMjA0MjEwMDUzWhcNMjUxMjExMjEwMDUzWjAYMRYwFAYD VQQDEw02OTMxZjY4NS01NjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSFOiLlNETafRUCuv7otEq7CbOPKvnyLOoSBOTAjejmqKFZEPLLKIlps7S6O I5yUzp+V8kmHMpTq+poE9poNMnr4bvRSO8RTCiKx6S9NdgTFAERFECTvSMi3uFtF aoDHRu0wkQU0S84In7BE3bad4KZjlQ5I2KvOnmQKiiVGtfiYy7b5zA7xa+XllHMz HLp/wDJgSCYreyX9A0EeH+c3hDowH6+fk4iiiOIw5LhiTvNecQzs2dXNb5zOsLSh IaAUQFWlCyl8nwWmffpNzJmf+Rrev4J+ED9SYoaWpoIyIuASNtBuMPS6Eae8KnAc e0QbdBBlRLGEcEcGxw/f9Nn4WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHn1U4Ck 7Pv6oLKpy3yeaQMge2mzMB8GA1UdIwQYMBaAFFSHtj9E1pHUNWiK/jyKwnv9kRKt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTBDMy84NTUzMDVFMjgy QzAxMUVCQkFDRTJBN0JDNEY5QUUwMi9WSWUyUDBUV2tkUTFhSXItUElyQ2VfMlJF cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJZTJQMFRXa2RRMWFJci1QSXJDZV8yUkVxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTBDMy84NTUzMDVFMjgyQzAxMUVCQkFDRTJBN0JDNEY5QUUwMi9WSWUyUDBUV2tk UTFhSXItUElyQ2VfMlJFcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASAuRe9F8PNF2XUzZRwspQrpJoe8VsEZVoWTZjV48qvpDqxX4AKwal XVzj4N+6eIr4pNeK7H/AXR0AXDmIoFOr+XFyCtE8qX/6HoMJDKyM8BpV8N4um8bf ombflKMqA4aL1/zrys8D+kYQ2qCB/YfrMR3bMq/+Hr8cdC09Q/BTXP9FsU0qPor8 IK4dToOfkUsBAzq5oGs3IJopGMie61KHZd5mmib73GHJoKkHrw2u+c9ayT7pVO+s HhASA/UPkVaFDLjAN2twCrsZ6XGdYk2DiYTNKFJIqd/0pHy1bNwOJ1eaq+rh7rgz ak8NHTE3DULGp7SpeUwsRGH5os6dnCHD -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:58 2025 by rpki-client