This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft File: VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json) Hash identifier: iVl84uliXSijXPx2bjtg9+bW+7vqsOtUuqUoggF9R2M= Subject key identifier: 28:D8:02:D9:94:41:97:00:10:F1:63:DC:04:89:C9:A1:B0:CD:7F:C8 Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Certificate serial: 0CE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft Manifest number: 0CCF Signing time: Thu 04 Dec 2025 17:39:42 +0000 Manifest this update: Thu 04 Dec 2025 17:39:41 +0000 Manifest next update: Thu 11 Dec 2025 17:39:41 +0000 Files and hashes: 1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: 60unya1p4x24zZkDgfycvfs8qFigy6aiySAbjRtVmjM=) 2: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: 4YH39eDrIDa7IadaSN/cuxBt6gEtX4YBHrWkQQlMsw4=) 3: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: +KOn7mdx2UIcOidbcffpTudXCnUkrRKRoWxktoOxGu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3301 (0xce5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Validity Not Before: Dec 4 17:39:41 2025 GMT Not After : Dec 11 17:39:41 2025 GMT Subject: CN=6931c75e-6027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:5b:65:12:1d:79:77:43:1f:55:a2:54:61: ae:e3:c8:9c:6c:fc:2e:b6:7c:c0:f1:c8:d5:1c:09: 0f:c9:b6:33:12:32:12:9b:1c:63:5b:b3:82:21:f6: 8b:bd:12:77:49:1f:e8:c5:00:45:a6:e4:08:87:b3: 04:0f:cd:b5:58:5c:f8:db:b0:aa:ba:57:7f:a2:99: d9:29:dd:ce:17:0a:89:0e:9e:7f:25:a0:f7:bc:13: 8b:90:18:22:4a:d5:9a:2f:f3:79:bd:0a:b3:5d:0d: 71:94:c4:52:98:bc:51:b5:f5:f6:b6:a9:cf:2c:1f: 23:e8:e3:15:a7:f6:59:25:60:ca:1a:3e:85:e7:9d: 5f:46:ae:a4:6f:ea:89:21:21:96:c0:4b:c2:35:8e: 3b:5f:b2:ee:7c:65:84:3e:66:d0:59:16:7f:c7:40: 71:63:ba:ac:66:c2:85:0b:45:e3:12:95:98:a2:5c: 84:13:35:71:9f:82:2e:45:1d:49:32:b1:83:6b:fe: 39:0a:f6:70:e0:fa:0a:5e:19:cf:93:38:3f:7b:fa: b9:58:3a:9b:f2:61:8d:fd:27:fd:bd:a7:ab:42:74: ad:01:22:4a:c0:61:23:8c:d0:e5:aa:a7:ce:a1:90: f0:69:c0:6a:10:7c:09:5c:6d:ec:f6:5f:05:ef:80: 66:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D8:02:D9:94:41:97:00:10:F1:63:DC:04:89:C9:A1:B0:CD:7F:C8 X509v3 Authority Key Identifier: keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:79:ae:1b:9c:56:95:4e:8d:e1:66:2f:04:c4:b5:78:77:d3: 3f:e3:57:36:d7:59:7a:02:d7:1d:d0:81:77:91:78:94:0e:0c: 8d:70:2c:02:30:e0:f8:ea:7c:06:df:66:44:89:e8:11:78:7c: 3d:dc:c9:1c:c7:e7:e8:5b:46:9f:c3:84:26:71:54:42:cf:86: 4f:66:18:93:10:ff:ae:20:2b:f3:bc:e3:db:da:75:53:59:5a: 38:19:a5:05:cd:8d:d6:76:70:91:7b:06:be:f2:71:04:80:3e: 1b:b0:80:80:76:c8:a8:e3:d5:53:a3:08:40:dc:56:ce:23:78: 26:e8:9b:59:4f:72:30:19:35:10:8a:7f:0b:aa:35:36:58:87: 6d:6a:ff:f1:67:9b:46:90:c5:d6:ce:b8:0f:40:c9:81:f6:06: 70:89:66:99:6c:dc:5f:46:22:da:73:35:99:d6:89:84:83:78: e0:82:c1:0b:74:fe:7d:7b:2e:28:da:8d:57:dd:e4:95:fb:a0: 58:b1:c9:2e:ed:de:a1:20:d9:b8:45:12:80:97:d0:05:52:6c: 01:37:c6:f2:cd:1a:d0:6e:e0:69:fe:3b:85:ea:4f:53:f3:17: c3:c7:b5:2d:4e:3f:58:5c:5d:88:c8:d9:e0:a3:ef:40:3a:88: 7a:f1:2e:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIyNDgxMTAvBgNVBAUTKDU1MTFERUMyOURDQUVEQTE3QkYzNkJCRjMzOTUzMjcx NTlGMTRBODEwHhcNMjUxMjA0MTczOTQxWhcNMjUxMjExMTczOTQxWjAYMRYwFAYD VQQDEw02OTMxYzc1ZS02MDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLpbZRIdeXdDH1WiVGGu48icbPwutnzA8cjVHAkPybYzEjISmxxjW7OCIfaL vRJ3SR/oxQBFpuQIh7MED821WFz427Cquld/opnZKd3OFwqJDp5/JaD3vBOLkBgi StWaL/N5vQqzXQ1xlMRSmLxRtfX2tqnPLB8j6OMVp/ZZJWDKGj6F551fRq6kb+qJ ISGWwEvCNY47X7LufGWEPmbQWRZ/x0BxY7qsZsKFC0XjEpWYolyEEzVxn4IuRR1J MrGDa/45CvZw4PoKXhnPkzg/e/q5WDqb8mGN/Sf9vaerQnStASJKwGEjjNDlqqfO oZDwacBqEHwJXG3s9l8F74BmVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjYAtmU QZcAEPFj3ASJyaGwzX/IMB8GA1UdIwQYMBaAFFUR3sKdyu2he/NrvzOVMnFZ8UqB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjI0OC9DNzk4QTBGQUZG MDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdhRjc4MnVfTTVVeWNWbnhT b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSSGV3cDNLN2FGNzgydV9NNVV5Y1ZueFNvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjI0OC9DNzk4QTBGQUZGMDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdh Rjc4MnVfTTVVeWNWbnhTb0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSea4bnFaVTo3hZi8ExLV4d9M/41c211l6Atcd0IF3kXiUDgyNcCwC MOD46nwG32ZEiegReHw93Mkcx+foW0afw4QmcVRCz4ZPZhiTEP+uICvzvOPb2nVT WVo4GaUFzY3WdnCRewa+8nEEgD4bsICAdsio49VTowhA3FbOI3gm6JtZT3IwGTUQ in8LqjU2WIdtav/xZ5tGkMXWzrgPQMmB9gZwiWaZbNxfRiLaczWZ1omEg3jggsEL dP59ey4o2o1X3eSV+6BYscku7d6hINm4RRKAl9AFUmwBN8byzRrQbuBp/juF6k9T 8xfDx7UtTj9YXF2IyNngo+9AOoh68S5n -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:17 2025 by rpki-client