This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft File: vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json) Hash identifier: R0Ztcc+53EGx69Jdsrsg8xeZerLcH7GVlkOw4QTZJmg= Subject key identifier: E2:7B:17:D4:60:9D:07:1C:BD:D5:70:BB:4A:DE:53:4F:13:EA:B2:9D Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft Manifest number: 01B5 Signing time: Fri 05 Dec 2025 01:35:27 +0000 Manifest this update: Fri 05 Dec 2025 01:35:26 +0000 Manifest next update: Fri 12 Dec 2025 01:35:26 +0000 Files and hashes: 1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: x2Z8BSjs3EgWrlU8G4Zx9LsoQYs8e98Ad3XhQSCeRJc=) 2: AC9A49A6B79811EF9C8DF330C4F9AE02.roa (hash: 6w/eNGnMRBFxF3lxYXbCN76SObHIvEqHFHmSQNDP46c=) 3: 975A513293B011EF9203EA6BC4F9AE02.roa (hash: 76T6waaCBWZUDZYyDyVRZsP5QTsxmG4f8kyM/bGetlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Validity Not Before: Dec 5 01:35:26 2025 GMT Not After : Dec 12 01:35:26 2025 GMT Subject: CN=693236de-3783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5c:75:78:9c:ff:98:50:ec:48:73:e0:4e:f8: 79:32:76:16:84:cf:49:22:8b:e0:04:22:84:aa:6d: c6:dd:4c:ae:e6:68:ab:57:3f:2f:a4:d0:1b:c6:25: 16:25:f4:45:bd:0d:69:55:65:95:d6:38:39:dc:45: ae:cd:d4:35:95:fc:ca:9e:32:47:64:28:1e:d1:5c: ec:57:04:a4:11:59:70:51:a6:9a:38:99:64:33:cd: 81:45:44:c3:1a:f3:69:50:b8:30:fd:ce:f0:b4:3a: 99:c6:d0:a3:1c:fc:e0:4c:8a:a2:8a:74:01:1e:c5: 31:a0:0e:53:66:dd:80:2a:03:a5:82:05:46:cf:bb: c4:ad:ed:f7:28:31:8f:13:94:81:79:5f:86:e2:a2: a0:05:83:dc:76:ae:cb:2f:6f:f9:75:b5:49:27:fe: d6:b1:89:c4:e3:68:b7:39:19:44:40:5b:0e:be:8f: cc:2b:e9:7f:e9:68:a6:a6:0f:00:f7:82:2d:0b:67: b3:27:99:85:b9:2d:dc:34:ba:1d:7b:e3:bb:79:f6: 4e:c4:25:e4:43:ed:93:d3:6e:d6:25:a2:24:cf:c2: 9c:92:15:95:c9:f2:cf:79:4d:9a:ac:7b:33:40:a8: d1:16:43:53:9b:4e:05:d4:4a:2d:a4:cd:52:ad:29: 68:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7B:17:D4:60:9D:07:1C:BD:D5:70:BB:4A:DE:53:4F:13:EA:B2:9D X509v3 Authority Key Identifier: keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:77:29:eb:43:06:ff:f1:a5:23:1d:e3:36:13:54:fe:46:59: 95:bc:45:98:da:f1:31:89:67:67:1d:5d:1f:f6:01:46:b0:ed: e9:c8:3a:27:b7:fa:f5:0d:61:84:d3:26:2e:89:14:5b:bc:93: d5:b6:a2:7b:a1:e9:ac:e0:0a:c6:30:81:77:0f:37:f7:5e:bd: 76:1d:36:8d:af:8a:10:13:78:d5:64:d0:11:48:b1:f4:b7:85: 6c:cf:dc:a6:33:77:e9:04:34:c9:11:d2:9c:6f:f9:c7:5c:5c: 7c:24:3f:ce:e5:88:f9:88:dc:53:bd:22:27:20:68:34:36:6f: 7c:e8:87:cb:5a:2f:fc:5a:9b:a4:5f:8d:49:22:8e:82:7b:57: 70:b6:a0:ed:5c:56:53:fd:9b:82:26:0d:64:d5:7a:14:da:5a: 45:28:0d:93:a9:b7:12:68:af:72:1d:a9:45:39:35:6a:0a:5d: 95:94:ef:76:54:82:9f:09:ee:8d:3f:e0:bc:84:da:05:cb:2d: 00:c7:1e:d7:46:2c:5d:ba:31:27:8b:48:6b:b5:37:73:b9:4d: a3:b3:39:5d:42:69:16:a2:02:09:da:f5:38:b6:6c:ff:87:1d: 65:e8:10:39:0e:b3:d7:f8:2b:9c:75:ad:bd:6c:c8:7f:d7:b1: 6a:ae:39:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFOEIxMTAvBgNVBAUTKEJEOUQ2Njg3N0Q4NjZFN0M5MDQxNTZCRTA4Q0I0Mzcx QUFFMDAxQkQwHhcNMjUxMjA1MDEzNTI2WhcNMjUxMjEyMDEzNTI2WjAYMRYwFAYD VQQDEw02OTMyMzZkZS0zNzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVx1eJz/mFDsSHPgTvh5MnYWhM9JIovgBCKEqm3G3Uyu5mirVz8vpNAbxiUW JfRFvQ1pVWWV1jg53EWuzdQ1lfzKnjJHZCge0VzsVwSkEVlwUaaaOJlkM82BRUTD GvNpULgw/c7wtDqZxtCjHPzgTIqiinQBHsUxoA5TZt2AKgOlggVGz7vEre33KDGP E5SBeV+G4qKgBYPcdq7LL2/5dbVJJ/7WsYnE42i3ORlEQFsOvo/MK+l/6Wimpg8A 94ItC2ezJ5mFuS3cNLode+O7efZOxCXkQ+2T027WJaIkz8KckhWVyfLPeU2arHsz QKjRFkNTm04F1EotpM1SrSloswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJ7F9Rg nQccvdVwu0reU08T6rKdMB8GA1UdIwQYMBaAFL2dZod9hm58kEFWvgjLQ3Gq4AG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUU4Qi9ERUMzQkQ3QzVB RDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2JueVFRVmEtQ010RGNhcmdB YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaMW1oMzJHYm55UVFWYS1DTXREY2FyZ0FiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUU4Qi9ERUMzQkQ3QzVBRDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2Ju eVFRVmEtQ010RGNhcmdBYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACdynrQwb/8aUjHeM2E1T+RlmVvEWY2vExiWdnHV0f9gFGsO3pyDon t/r1DWGE0yYuiRRbvJPVtqJ7oems4ArGMIF3Dzf3Xr12HTaNr4oQE3jVZNARSLH0 t4Vsz9ymM3fpBDTJEdKcb/nHXFx8JD/O5Yj5iNxTvSInIGg0Nm986IfLWi/8Wpuk X41JIo6Ce1dwtqDtXFZT/ZuCJg1k1XoU2lpFKA2TqbcSaK9yHalFOTVqCl2VlO92 VIKfCe6NP+C8hNoFyy0Axx7XRixdujEni0hrtTdzuU2jszldQmkWogIJ2vU4tmz/ hx1l6BA5DrPX+Cucda29bMh/17Fqrjlx -----END CERTIFICATE-----Generated at Sun Dec 7 02:41:11 2025 by rpki-client