This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft File: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json) Hash identifier: m+IeVOMmbshb3PUF0kb3HR8NmSW7BCGAQ0rYotnlYmY= Subject key identifier: 1C:9D:9D:42:6C:9D:8E:00:05:D5:97:18:A6:61:1D:DB:FB:01:D1:CD Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft Manifest number: A3 Signing time: Fri 05 Dec 2025 04:30:17 +0000 Manifest this update: Fri 05 Dec 2025 04:30:17 +0000 Manifest next update: Fri 12 Dec 2025 04:30:17 +0000 Files and hashes: 1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: rLEzio/RD3Ou/EdU7pDGAIoKgi+RIYuyMFGCTa7nYm0=) 2: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: cqpKhHQ429f1vtQzVS9iSS/6yBn8Tr7cOiYSPyhXnqM=) 3: 07E3560E707B11F08CCE202CC4F9AE02.roa (hash: hsVU/mADy2OXX1cQt4x/FdSd52E8zN5hB6L5qVYRCOM=) 4: 6E68E3C8A05811F0B1978E4CC4F9AE02.roa (hash: K72GRxN+2ab3JpFVQDE8rFQueI0JJ5aBZHWdLQsQchI=) 5: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: YKwfhn84elYu/Y8KsthWeHLfxYMDii6IqoqFACcb2JY=) 6: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: 4EsnPXpvxqy3HJn3NlZW+cFTXRzXY3NCiOsR6rWCGCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Validity Not Before: Dec 5 04:30:17 2025 GMT Not After : Dec 12 04:30:17 2025 GMT Subject: CN=69325fd9-7d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c4:b4:e6:62:e7:f7:d1:96:81:06:f4:6c:39: 39:1f:5c:5a:17:d1:f4:5c:5e:bd:b8:9a:e5:11:62: f2:88:e6:91:a9:08:ea:49:cb:88:ef:35:a1:ce:08: f9:a7:c9:ed:4a:43:3b:c4:b1:c0:63:e5:0d:cb:a0: dc:0d:21:a8:47:80:9f:3c:d6:69:fe:a2:fa:8c:9a: 9f:27:b1:ff:05:47:ba:e0:17:4f:c4:8c:69:bc:f1: f7:19:bc:9a:d3:20:6a:c7:28:b0:f8:73:c4:e3:0e: bf:ab:de:d3:45:ee:fb:bc:4b:f4:a6:01:25:23:b4: 14:94:ea:0e:58:9f:6d:1d:de:ac:9b:30:02:b2:b2: de:78:b0:66:1e:ff:17:4e:6b:c5:c5:0b:9a:42:62: bd:41:57:1c:11:b6:4e:40:5a:7a:2a:fc:46:b4:7b: b2:d9:5f:41:9d:9c:fa:38:25:80:09:9a:d3:87:88: 50:a2:5e:e2:4d:da:62:68:c0:58:b2:4d:87:7a:cf: e5:d7:9c:28:d5:9b:48:41:27:ce:b2:2d:77:61:8e: 1d:bd:62:66:02:a1:7f:2c:c9:6f:c7:fd:27:4c:8c: 5e:15:fb:50:3f:07:61:05:84:3d:4d:40:fb:86:2a: b1:83:2f:e9:cd:e0:7b:9d:56:b1:63:3b:02:f8:6f: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9D:9D:42:6C:9D:8E:00:05:D5:97:18:A6:61:1D:DB:FB:01:D1:CD X509v3 Authority Key Identifier: keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:62:e7:cb:2b:28:85:83:30:e3:de:8f:84:a3:9f:30:30:94: 92:50:12:d1:92:48:aa:c4:b7:67:ed:62:7f:50:4a:97:53:a5: 6a:46:04:f1:30:3d:95:ef:49:86:f8:44:ca:2e:4d:0d:79:a7: 33:d0:84:51:23:ab:98:64:f3:46:a7:df:16:d8:47:24:c8:70: de:83:8a:14:45:05:4b:03:73:ba:08:02:de:e4:06:2f:24:ec: db:33:8f:be:51:7e:cb:a1:18:3a:92:50:1e:9c:61:ab:40:82: 93:17:11:c4:2e:5c:52:97:44:9f:36:55:06:e3:bd:d1:1f:a7: 6f:60:10:ed:5f:fa:7c:5a:e0:99:0b:2c:3a:85:3f:94:93:f9: 85:c0:9b:1e:50:ee:71:b6:10:e3:b8:51:70:52:3a:34:1a:52: 65:25:fc:54:45:79:4a:3e:5e:55:6b:10:06:36:ea:07:1d:f2: 42:29:99:3e:43:98:00:71:c3:36:52:ef:03:84:75:d9:02:71: 0f:4c:83:6c:1a:f8:65:5a:8e:d4:8b:cf:e5:70:b2:aa:26:1e: 49:78:6d:96:72:ea:79:2e:d8:1c:65:8b:ae:03:7f:e9:3a:45: 1c:fc:45:8b:cc:f1:a0:b3:c9:35:b9:0a:1b:9a:6f:fe:8a:8c: 10:a1:4a:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwMjYxMTAvBgNVBAUTKEJENzlBQzc2NDBDOTU1QzQzNUM4Q0Y1NUMyOTFGMTIy QjcwRTJGOTkwHhcNMjUxMjA1MDQzMDE3WhcNMjUxMjEyMDQzMDE3WjAYMRYwFAYD VQQDEw02OTMyNWZkOS03ZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlMS05mLn99GWgQb0bDk5H1xaF9H0XF69uJrlEWLyiOaRqQjqScuI7zWhzgj5 p8ntSkM7xLHAY+UNy6DcDSGoR4CfPNZp/qL6jJqfJ7H/BUe64BdPxIxpvPH3Gbya 0yBqxyiw+HPE4w6/q97TRe77vEv0pgElI7QUlOoOWJ9tHd6smzACsrLeeLBmHv8X TmvFxQuaQmK9QVccEbZOQFp6KvxGtHuy2V9BnZz6OCWACZrTh4hQol7iTdpiaMBY sk2Hes/l15wo1ZtIQSfOsi13YY4dvWJmAqF/LMlvx/0nTIxeFftQPwdhBYQ9TUD7 hiqxgy/pzeB7nVaxYzsC+G+BTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBydnUJs nY4ABdWXGKZhHdv7AdHNMB8GA1UdIwQYMBaAFL15rHZAyVXENcjPVcKR8SK3Di+Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjAyNi8zQkFBQUM0NEZC MjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZjUTF5TTlWd3BIeElyY09M NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYbXNka0RKVmNRMXlNOVZ3cEh4SXJjT0w1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjAyNi8zQkFBQUM0NEZCMjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZj UTF5TTlWd3BIeElyY09MNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIYufLKyiFgzDj3o+Eo58wMJSSUBLRkkiqxLdn7WJ/UEqXU6VqRgTx MD2V70mG+ETKLk0Neacz0IRRI6uYZPNGp98W2EckyHDeg4oURQVLA3O6CALe5AYv JOzbM4++UX7LoRg6klAenGGrQIKTFxHELlxSl0SfNlUG473RH6dvYBDtX/p8WuCZ Cyw6hT+Uk/mFwJseUO5xthDjuFFwUjo0GlJlJfxURXlKPl5VaxAGNuoHHfJCKZk+ Q5gAccM2Uu8DhHXZAnEPTINsGvhlWo7Ui8/lcLKqJh5JeG2Wcup5LtgcZYuuA3/p OkUc/EWLzPGgs8k1uQobmm/+iowQoUoe -----END CERTIFICATE-----Generated at Sun Dec 7 02:47:24 2025 by rpki-client