This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json) Hash identifier: L18oLowa8uptVcrsSfqN6biaQjWjlKo3DXHA4KjSyBw= Subject key identifier: 27:04:79:F7:C8:F7:65:C4:E9:D6:DE:C7:80:D8:79:C9:C4:DD:91:A9 Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft Manifest number: 8D Signing time: Fri 05 Dec 2025 04:28:51 +0000 Manifest this update: Fri 05 Dec 2025 04:28:51 +0000 Manifest next update: Fri 12 Dec 2025 04:28:51 +0000 Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: FpHMX7mWejNOGtJnpget+kNSa56yRG0xH7XRta7J2WI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Validity Not Before: Dec 5 04:28:51 2025 GMT Not After : Dec 12 04:28:51 2025 GMT Subject: CN=69325f83-996b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:2b:fb:97:c7:56:36:12:d2:28:aa:a6:60: 1f:a4:74:2a:ad:8e:db:1f:71:56:03:e1:ec:e6:4a: cd:0d:4c:e5:20:83:9f:9b:99:b3:b6:15:db:53:19: d8:74:d1:f4:32:69:e7:ba:3e:e6:92:d0:64:ac:a1: 8d:f4:a7:f5:91:45:0f:41:f8:35:39:e1:84:77:15: dc:12:b3:7d:1c:96:83:cb:61:e9:d5:a2:a7:7d:1b: a1:b7:fa:4a:94:e8:bf:06:b5:88:71:db:2a:98:1d: d7:ad:c7:0a:49:0c:fc:db:7a:11:26:32:4f:f4:76: 1b:4f:dc:b8:59:c7:63:ab:10:65:59:57:07:cc:2f: e4:8e:8f:52:1b:b2:94:fa:fb:61:4c:b6:42:b2:de: 17:39:1f:97:20:4f:41:5d:e9:f8:fd:bd:28:a6:ba: a0:6b:7e:fb:c5:70:14:ad:a0:ae:32:68:4b:90:7f: 9e:3c:3a:3f:37:fa:bb:e1:00:89:e8:21:48:fb:aa: 9e:75:16:3f:4b:49:df:2a:54:97:4e:39:77:3b:46: 73:4d:f5:c8:f1:07:36:7c:f9:5f:53:d0:c5:95:d8: 69:58:09:f5:9c:44:7d:f9:44:b8:ba:4f:fe:d4:a9: 24:bd:ad:06:fd:cc:6a:85:6a:b2:55:a5:82:d6:13: d7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:04:79:F7:C8:F7:65:C4:E9:D6:DE:C7:80:D8:79:C9:C4:DD:91:A9 X509v3 Authority Key Identifier: keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:9e:d1:e7:91:a4:2e:16:11:b1:65:53:f5:62:93:d4:8a:e3: 3f:e2:2f:4e:8d:93:50:46:75:28:83:13:07:f1:98:ad:13:c4: d1:93:66:0d:b2:c8:40:f5:7b:4f:e0:db:54:cb:16:84:ed:f8: a1:47:cf:dc:81:d0:2b:e8:d2:95:ed:ee:fd:85:67:fe:79:fe: f2:e4:9b:1b:f0:31:ca:e6:fa:96:94:99:b7:e4:0f:af:56:71: 46:57:fa:bc:84:ac:0b:32:e0:24:37:33:a0:cb:32:fd:c6:66: a6:bb:71:a5:3f:fd:3b:fd:02:bd:be:c4:02:2b:77:14:14:ad: 0d:8a:82:40:6d:fb:d0:9f:69:b9:67:46:c7:4a:be:17:87:33: bc:65:f4:3d:e4:1b:00:e2:02:d2:91:be:b5:c0:b1:e4:a2:c2: 52:cf:6f:ee:0b:a9:8a:6c:0e:2f:07:aa:27:21:ba:d9:eb:9e: 6b:b8:3e:73:92:10:a0:8a:f2:e8:36:36:38:77:1c:d9:1f:b6: e2:6d:ea:f9:cd:7e:1d:0a:bd:9a:bd:ee:57:95:29:f5:b6:00: 50:1f:f8:58:cf:7a:ff:86:de:34:78:af:5f:b3:4f:b4:4a:7f: c5:51:81:8e:3e:62:4a:b9:62:42:7a:92:15:e7:81:7c:c1:5d: 69:9e:f6:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4RDcxMTAvBgNVBAUTKEJEQTNFOEE4MjMxQzc4N0Y2QjdGMThCQzE0NkI5NUZC NUMwMzhFRDkwHhcNMjUxMjA1MDQyODUxWhcNMjUxMjEyMDQyODUxWjAYMRYwFAYD VQQDEw02OTMyNWY4My05OTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFor+5fHVjYS0iiqpmAfpHQqrY7bH3FWA+Hs5krNDUzlIIOfm5mzthXbUxnY dNH0Mmnnuj7mktBkrKGN9Kf1kUUPQfg1OeGEdxXcErN9HJaDy2Hp1aKnfRuht/pK lOi/BrWIcdsqmB3XrccKSQz823oRJjJP9HYbT9y4WcdjqxBlWVcHzC/kjo9SG7KU +vthTLZCst4XOR+XIE9BXen4/b0oprqga377xXAUraCuMmhLkH+ePDo/N/q74QCJ 6CFI+6qedRY/S0nfKlSXTjl3O0ZzTfXI8Qc2fPlfU9DFldhpWAn1nER9+US4uk/+ 1Kkkva0G/cxqhWqyVaWC1hPX+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcEeffI 92XE6dbex4DYecnE3ZGpMB8GA1UdIwQYMBaAFL2j6KgjHHh/a38YvBRrlftcA47Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRThENy80QjAxQzRBNkY5 M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi92YVBvcUNNY2VIOXJmeGk4Rkd1Vi0xd0Rq dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZhUG9xQ01jZUg5cmZ4aThGR3VWLTF3RGp0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RThENy80QjAxQzRBNkY5M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi92YVBvcUNNY2VI OXJmeGk4Rkd1Vi0xd0RqdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAntHnkaQuFhGxZVP1YpPUiuM/4i9OjZNQRnUogxMH8ZitE8TRk2YN sshA9XtP4NtUyxaE7fihR8/cgdAr6NKV7e79hWf+ef7y5Jsb8DHK5vqWlJm35A+v VnFGV/q8hKwLMuAkNzOgyzL9xmamu3GlP/07/QK9vsQCK3cUFK0NioJAbfvQn2m5 Z0bHSr4XhzO8ZfQ95BsA4gLSkb61wLHkosJSz2/uC6mKbA4vB6onIbrZ655ruD5z khCgivLoNjY4dxzZH7biber5zX4dCr2ave5XlSn1tgBQH/hYz3r/ht40eK9fs0+0 Sn/FUYGOPmJKuWJCepIV54F8wV1pnvbJ -----END CERTIFICATE-----Generated at Sat Dec 6 14:14:55 2025 by rpki-client