This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft File: vHENBWM8XhGwdEtxrruIriskRuM.mft (raw, json) Hash identifier: XVDBkix4bu3Cuqj1Wn46yFPl+38kqKwRkg2A68Ex6/Q= Subject key identifier: 79:75:5C:25:DF:E0:63:D8:CC:1F:50:8D:3A:3F:E1:2B:AC:FE:41:A9 Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Certificate serial: 13A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft Manifest number: 139E Signing time: Sat 06 Dec 2025 16:31:02 +0000 Manifest this update: Sat 06 Dec 2025 16:31:02 +0000 Manifest next update: Sat 13 Dec 2025 16:31:02 +0000 Files and hashes: 1: vHENBWM8XhGwdEtxrruIriskRuM.crl (hash: EvBHUJ6UzqwQDBMwNyvlatbJhvWNr1QsTx8aW0InHE8=) 2: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (hash: c/V3Stz0hBoC77cDsx2sOFkExhPVs+UBbA7TaA5YseQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5030 (0x13a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Validity Not Before: Dec 6 16:31:02 2025 GMT Not After : Dec 13 16:31:02 2025 GMT Subject: CN=69345a46-176b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2f:5c:43:d8:b9:75:d4:72:4d:7b:bd:96:b0: 74:51:d4:a0:d1:21:7f:6a:22:0b:ca:1e:ba:9f:df: 0b:b4:b5:8f:55:fc:88:19:3d:37:2e:e1:ee:f5:0f: cb:c0:8e:7f:96:43:04:d4:1e:47:48:85:82:ba:7b: 89:3d:0a:c8:7f:04:b6:66:c9:c2:10:f2:7c:17:38: 72:80:6a:83:af:f8:f3:b1:a5:6c:52:65:65:ba:17: c1:de:78:6c:80:df:a8:02:14:84:85:b2:35:bd:49: f9:c0:5a:c7:55:4d:4d:5b:62:35:a3:7c:b4:11:2c: b0:2a:7f:85:62:90:d4:c9:84:d9:bc:86:05:65:31: b4:b5:75:60:31:52:da:69:ee:6d:2a:1d:ac:b9:bb: 0a:78:ad:98:ae:30:47:40:f1:66:19:5b:dd:45:5a: dd:e5:91:d3:14:c2:fd:8e:6f:de:59:ea:08:6a:29: cc:32:a7:6b:1f:b4:54:d8:f4:dd:3b:ec:21:11:02: 81:37:06:8e:59:2f:cf:d9:32:11:3d:ff:c0:1b:c9: 8f:3b:24:ec:a2:45:56:9c:3d:2a:15:03:de:cb:1d: 40:12:ea:2b:11:84:cd:a0:a8:0d:72:25:85:27:04: 44:31:56:fd:08:5e:c8:60:08:49:ab:99:6b:65:5b: 27:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:75:5C:25:DF:E0:63:D8:CC:1F:50:8D:3A:3F:E1:2B:AC:FE:41:A9 X509v3 Authority Key Identifier: keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:1b:81:30:09:d8:60:fa:e8:f8:44:6e:74:97:8e:f8:e2:ef: b6:bc:e5:09:6d:5f:d9:24:91:c7:9f:63:ce:35:75:f2:bc:50: cd:67:eb:78:38:2b:85:6b:26:5c:13:e7:e9:f4:9e:07:68:ec: 8e:6d:20:23:34:12:e4:6c:cf:3f:5b:e3:66:d6:25:4d:8d:dc: f3:92:a5:78:4b:7d:60:f3:fc:52:6b:bc:98:f8:d3:d9:3d:ed: 92:80:9e:56:6b:5a:de:72:08:db:7b:db:a6:62:b9:18:e6:fe: 58:95:91:3f:36:56:a1:d2:2b:34:28:61:48:eb:1a:82:da:c2: 44:e7:f4:b6:ce:70:b0:5d:ef:19:3f:d8:db:eb:6a:1a:e7:01: cf:3a:fb:15:11:a7:f2:54:b5:30:76:51:62:6e:48:61:7f:5f: ac:72:29:81:70:54:ab:90:87:f6:bf:1a:20:9b:47:6e:a5:09: 87:db:77:26:af:41:0b:0c:73:67:b4:87:6e:8c:f3:34:5c:94: cf:6a:e3:38:22:9f:d3:66:ee:d9:54:91:20:61:f2:bf:93:94: 1a:00:63:79:fa:45:f7:20:89:c3:83:b1:de:6f:df:6b:cd:41: 39:11:43:5d:6a:16:ac:7c:07:12:aa:a7:61:5d:f6:25:2e:11: df:d1:ef:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDYxMTAvBgNVBAUTKEJDNzEwRDA1NjMzQzVFMTFCMDc0NEI3MUFFQkI4OEFF MkIyNDQ2RTMwHhcNMjUxMjA2MTYzMTAyWhcNMjUxMjEzMTYzMTAyWjAYMRYwFAYD VQQDEw02OTM0NWE0Ni0xNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvC9cQ9i5ddRyTXu9lrB0UdSg0SF/aiILyh66n98LtLWPVfyIGT03LuHu9Q/L wI5/lkME1B5HSIWCunuJPQrIfwS2ZsnCEPJ8FzhygGqDr/jzsaVsUmVluhfB3nhs gN+oAhSEhbI1vUn5wFrHVU1NW2I1o3y0ESywKn+FYpDUyYTZvIYFZTG0tXVgMVLa ae5tKh2subsKeK2YrjBHQPFmGVvdRVrd5ZHTFML9jm/eWeoIainMMqdrH7RU2PTd O+whEQKBNwaOWS/P2TIRPf/AG8mPOyTsokVWnD0qFQPeyx1AEuorEYTNoKgNciWF JwREMVb9CF7IYAhJq5lrZVsnswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHl1XCXf 4GPYzB9QjTo/4Sus/kGpMB8GA1UdIwQYMBaAFLxxDQVjPF4RsHRLca67iK4rJEbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNi8zRjY3MEMwQ0E1 RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFhoR3dkRXR4cnJ1SXJpc2tS dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZIRU5CV004WGhHd2RFdHhycnVJcmlza1J1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNi8zRjY3MEMwQ0E1RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFho R3dkRXR4cnJ1SXJpc2tSdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2G4EwCdhg+uj4RG50l4744u+2vOUJbV/ZJJHHn2PONXXyvFDNZ+t4 OCuFayZcE+fp9J4HaOyObSAjNBLkbM8/W+Nm1iVNjdzzkqV4S31g8/xSa7yY+NPZ Pe2SgJ5Wa1recgjbe9umYrkY5v5YlZE/Nlah0is0KGFI6xqC2sJE5/S2znCwXe8Z P9jb62oa5wHPOvsVEafyVLUwdlFibkhhf1+scimBcFSrkIf2vxogm0dupQmH23cm r0ELDHNntIdujPM0XJTPauM4Ip/TZu7ZVJEgYfK/k5QaAGN5+kX3IInDg7Heb99r zUE5EUNdahasfAcSqqdhXfYlLhHf0e9U -----END CERTIFICATE-----Generated at Sat Dec 6 20:04:30 2025 by rpki-client