This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: p7csTo372Z2BQXLdK6UCbeDuVq5cWIXio6LGmRl3bC4= Subject key identifier: 3A:7A:F9:78:B5:F9:3C:23:83:FF:95:F9:75:29:55:59:4E:38:A2:C3 Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 3547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 351A Signing time: Thu 04 Dec 2025 14:33:57 +0000 Manifest this update: Thu 04 Dec 2025 14:33:57 +0000 Manifest next update: Thu 11 Dec 2025 14:33:57 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: ibidpL/BaWrPcVxbpI7sUoEd7mi7hmWwYncF3Pvfpxk=) 2: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: tRzHmoCM5bp0eiCAe2WTWAhqYkb98p9OjQpa6ZuzTto=) 3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: YTAhLYofQ5bGqpN1MRJJdGJjIa93aOaav1SZOkx9D70=) 4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: 2sM6dqjwFaWvanKsFaRgJilTOFHKXatSdEC+MoptC6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 14:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13639 (0x3547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Dec 4 14:33:57 2025 GMT Not After : Dec 11 14:33:57 2025 GMT Subject: CN=69319bd5-7cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:5c:0d:d8:97:f7:18:81:fb:e8:f2:f3:3c: 4a:e8:b2:e1:94:72:02:a3:e9:34:4d:cb:c7:56:63: 84:0b:02:23:2a:a8:78:95:b1:28:aa:ca:bf:aa:7c: 49:5f:e6:54:ac:4b:5f:61:57:94:21:17:b0:e3:c6: fb:50:3f:c2:20:b0:42:82:ae:cc:51:21:63:8f:3c: db:f5:98:5a:cf:71:d7:e4:db:bf:ac:12:80:4d:3a: 91:9a:f5:4d:9e:bf:5d:19:82:ee:52:e1:07:d4:ee: b1:80:da:ad:af:3e:1a:3f:f8:62:7b:12:34:a5:d1: a3:fc:e1:ef:4f:1f:f2:2e:37:5f:9f:76:a7:ab:70: ee:74:0c:8b:a1:7d:59:24:a6:c7:e4:66:eb:0b:1a: bb:3a:48:63:bf:81:5e:07:c2:87:12:27:e9:d0:26: 52:ea:01:48:bb:fd:d0:ae:ea:75:63:a8:2b:91:8c: 8c:af:cd:11:31:93:cb:60:49:77:2d:a4:26:81:21: 30:c6:d7:4a:ff:a9:e6:0c:8c:5a:97:a3:f2:be:86: d2:2a:65:06:6a:30:be:43:4a:b7:8b:c7:74:fd:17: b3:c3:7a:dd:85:96:bf:97:83:3b:0c:80:ae:77:95: d3:5a:e2:39:f3:c2:48:df:8a:6b:43:e7:7f:c7:8f: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7A:F9:78:B5:F9:3C:23:83:FF:95:F9:75:29:55:59:4E:38:A2:C3 X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:65:81:c2:10:84:da:30:66:50:43:7e:e8:28:7a:2b:a1:46: c4:f2:37:53:62:c0:1a:7d:18:63:72:36:fe:82:15:5b:d3:d6: 03:66:13:f2:83:1b:65:b7:be:6c:4d:ce:e6:55:50:f5:ee:b8: cf:38:6d:65:a0:b4:9b:84:10:57:56:88:be:e9:73:a9:a6:32: 05:8c:b7:77:7f:ed:44:59:57:c8:7e:9c:8c:e7:e1:2f:c2:92: ff:41:14:45:00:9a:42:68:08:2d:bb:06:11:b9:18:d0:7e:57: ae:14:4e:ae:8d:a2:7e:2a:9d:64:12:6f:91:c6:84:47:b2:94: be:ec:be:86:1b:6d:61:ec:12:ae:41:c4:95:27:8c:2b:ec:d6: ad:2d:1c:eb:d7:de:43:9c:c6:2b:48:22:77:29:68:b6:f6:54: da:8a:f1:4a:e6:ec:93:fa:80:df:55:44:9c:c0:ef:75:0a:df: 14:b5:2e:6e:29:90:48:41:06:7e:44:a5:b8:8c:c6:cf:6f:be: 22:11:39:94:b3:2f:b8:4c:b4:62:8a:de:cd:42:16:a4:de:cd: be:af:8d:55:9e:09:87:c9:96:7c:54:c7:53:14:8b:52:a4:b0: d9:2b:4c:cd:04:0a:75:8d:f9:38:c7:60:97:de:11:17:22:69: 8a:01:0c:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjUxMjA0MTQzMzU3WhcNMjUxMjExMTQzMzU3WjAYMRYwFAYD VQQDEw02OTMxOWJkNS03Y2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwutcDdiX9xiB++jy8zxK6LLhlHICo+k0TcvHVmOECwIjKqh4lbEoqsq/qnxJ X+ZUrEtfYVeUIRew48b7UD/CILBCgq7MUSFjjzzb9Zhaz3HX5Nu/rBKATTqRmvVN nr9dGYLuUuEH1O6xgNqtrz4aP/hiexI0pdGj/OHvTx/yLjdfn3anq3DudAyLoX1Z JKbH5GbrCxq7Okhjv4FeB8KHEifp0CZS6gFIu/3Qrup1Y6grkYyMr80RMZPLYEl3 LaQmgSEwxtdK/6nmDIxal6PyvobSKmUGajC+Q0q3i8d0/Rezw3rdhZa/l4M7DICu d5XTWuI588JI34prQ+d/x4+tawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDp6+Xi1 +Twjg/+V+XUpVVlOOKLDMB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpZYHCEITaMGZQQ37oKHoroUbE8jdTYsAafRhjcjb+ghVb09YDZhPy gxtlt75sTc7mVVD17rjPOG1loLSbhBBXVoi+6XOppjIFjLd3f+1EWVfIfpyM5+Ev wpL/QRRFAJpCaAgtuwYRuRjQfleuFE6ujaJ+Kp1kEm+RxoRHspS+7L6GG21h7BKu QcSVJ4wr7NatLRzr195DnMYrSCJ3KWi29lTaivFK5uyT+oDfVUScwO91Ct8UtS5u KZBIQQZ+RKW4jMbPb74iETmUsy+4TLRiit7NQhak3s2+r41VngmHyZZ8VMdTFItS pLDZK0zNBAp1jfk4x2CX3hEXImmKAQxs -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:22 2025 by rpki-client