This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json) Hash identifier: 88Au4NL62R9dYGXqie/tHM4hH+D6u5jjVDcx+C7JMgE= Subject key identifier: 5A:A8:E8:38:AE:AA:0B:AD:87:DD:69:53:24:31:BB:F1:55:41:F8:E6 Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0E30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft Manifest number: 0E27 Signing time: Thu 04 Dec 2025 17:22:05 +0000 Manifest this update: Thu 04 Dec 2025 17:22:04 +0000 Manifest next update: Thu 11 Dec 2025 17:22:04 +0000 Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: No2yDYjkXAC1TI9IRQtKv3/ZUFlN5kWoLOBvmUKnKaM=) 2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: J3asPRjW2OTxFxfAPN+SaGNCDyYHApcc4gcIkuEE9lM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3632 (0xe30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: Dec 4 17:22:04 2025 GMT Not After : Dec 11 17:22:04 2025 GMT Subject: CN=6931c33d-ac11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1c:e6:37:3c:bd:b7:ea:01:dc:89:74:3d:24: 11:a1:0c:55:8e:da:00:20:54:74:69:39:a3:4b:c2: 04:bb:09:20:37:63:a5:ce:a8:6b:33:c7:4b:a7:27: f5:47:2c:07:0f:54:15:f5:22:1a:b3:67:f1:b7:a7: d6:4a:ff:60:4c:35:2c:bd:03:ef:26:74:bf:a5:96: 16:d6:85:18:8e:3f:df:da:85:f0:60:6f:be:6e:f5: 4e:45:68:09:59:a4:d3:ce:e9:c9:61:64:22:1a:c6: ce:b8:44:7f:59:e9:5a:ac:77:3d:31:55:6a:f4:b4: 5a:cf:ee:1f:0d:4f:14:25:83:b6:66:d0:fb:9b:b6: 39:6a:de:27:4b:9d:20:bd:f1:91:a9:5b:dd:55:6f: a8:c6:2e:85:95:02:73:d7:ef:c4:1d:a5:31:6f:13: 3b:83:66:7f:bc:74:56:32:98:90:56:35:23:41:25: 56:45:52:a9:d1:d1:2e:30:a6:e1:d8:91:a6:d7:63: 31:7a:25:6d:06:3a:7d:ee:64:65:52:81:44:34:b3: 91:9c:87:3c:eb:14:1d:ba:21:6b:9f:c9:e8:57:97: 36:fa:f3:bb:bd:05:0a:4b:af:dc:f9:01:4b:22:dc: 84:8e:60:1b:13:db:ae:97:cd:6b:cc:cb:53:0b:52: 41:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A8:E8:38:AE:AA:0B:AD:87:DD:69:53:24:31:BB:F1:55:41:F8:E6 X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c1:f7:38:81:ba:48:e3:5b:f5:41:91:b2:0c:ab:52:68:f7: 5e:25:88:0b:06:3c:c3:02:88:3d:6e:5b:a8:60:eb:6e:2e:1e: 83:ec:b8:33:84:e0:93:28:37:dd:db:dc:17:96:fb:6a:32:9f: 51:3f:ca:9a:ab:8a:8b:ff:13:70:59:54:48:10:58:42:0b:eb: bb:04:c3:03:a9:cc:f6:31:dd:e2:0d:5c:98:a2:58:92:2b:5e: 14:22:95:63:9b:8e:8b:c2:50:3f:7b:e3:fb:40:4e:11:bf:63: 57:07:84:61:6b:ac:68:7a:08:79:81:9f:a2:51:17:3b:41:ee: 06:a8:ac:34:d2:52:37:b5:ef:9c:4a:9e:fa:7e:d1:c2:5a:72: 56:14:22:1b:4f:99:bd:c5:1b:7e:f5:9a:17:b5:f5:c9:3e:98: 66:09:c3:5f:35:d6:ee:49:bf:b0:d3:42:f1:09:5e:1a:53:8e: ce:b7:49:cc:86:09:f1:22:c7:6c:dc:38:e5:af:a9:6a:c6:52: 57:54:d2:24:ef:1d:83:ee:bf:58:41:52:97:80:48:c2:7e:b7: 10:23:6e:50:f4:c1:a8:f0:de:1a:50:98:46:5b:ad:39:22:e0: 4b:c4:b6:96:eb:5e:f3:58:b7:ea:03:65:ca:04:40:1c:85:fc: 47:16:63:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjUxMjA0MTcyMjA0WhcNMjUxMjExMTcyMjA0WjAYMRYwFAYD VQQDEw02OTMxYzMzZC1hYzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhzmNzy9t+oB3Il0PSQRoQxVjtoAIFR0aTmjS8IEuwkgN2OlzqhrM8dLpyf1 RywHD1QV9SIas2fxt6fWSv9gTDUsvQPvJnS/pZYW1oUYjj/f2oXwYG++bvVORWgJ WaTTzunJYWQiGsbOuER/WelarHc9MVVq9LRaz+4fDU8UJYO2ZtD7m7Y5at4nS50g vfGRqVvdVW+oxi6FlQJz1+/EHaUxbxM7g2Z/vHRWMpiQVjUjQSVWRVKp0dEuMKbh 2JGm12MxeiVtBjp97mRlUoFENLORnIc86xQduiFrn8noV5c2+vO7vQUKS6/c+QFL ItyEjmAbE9uul81rzMtTC1JB6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqo6Diu qguth91pUyQxu/FVQfjmMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZwfc4gbpI41v1QZGyDKtSaPdeJYgLBjzDAog9bluoYOtuLh6D7Lgz hOCTKDfd29wXlvtqMp9RP8qaq4qL/xNwWVRIEFhCC+u7BMMDqcz2Md3iDVyYoliS K14UIpVjm46LwlA/e+P7QE4Rv2NXB4Rha6xoegh5gZ+iURc7Qe4GqKw00lI3te+c Sp76ftHCWnJWFCIbT5m9xRt+9ZoXtfXJPphmCcNfNdbuSb+w00LxCV4aU47Ot0nM hgnxIsds3Djlr6lqxlJXVNIk7x2D7r9YQVKXgEjCfrcQI25Q9MGo8N4aUJhGW605 IuBLxLaW617zWLfqA2XKBEAchfxHFmMC -----END CERTIFICATE-----Generated at Sat Dec 6 17:06:35 2025 by rpki-client