This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft File: vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json) Hash identifier: iU3f+Iu1YbP1FUEJWc7kQSEUo801ex6/iF0rNRBYQQ8= Subject key identifier: FF:50:C4:4A:7B:AE:C2:CD:E4:13:05:25:EB:94:26:79:F2:C6:A8:75 Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F Certificate issuer: /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft Manifest number: 0167 Signing time: Fri 05 Dec 2025 02:06:36 +0000 Manifest this update: Fri 05 Dec 2025 02:06:36 +0000 Manifest next update: Fri 12 Dec 2025 02:06:36 +0000 Files and hashes: 1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: pRH0PsH8oLAnvLChldgJ72XIoB5iYf4oWk1eiTxE0RY=) 2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: KyJCsFenYj6fuJ23jzQVPwAa2Ss88E8BW4syF1uzypU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED35E, serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Validity Not Before: Dec 5 02:06:36 2025 GMT Not After : Dec 12 02:06:36 2025 GMT Subject: CN=69323e2c-1d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:87:be:48:a6:4e:51:a9:a4:e1:78:a5:dc:85: 49:c4:96:de:ef:e3:ba:a8:2f:83:c9:c3:1d:3b:d2: a1:fd:73:76:f3:67:6e:f2:b7:17:68:aa:13:7d:b9: 1d:c4:b6:9a:66:77:85:16:1f:2f:6f:cb:1f:a1:28: d0:c9:64:0c:6d:5a:b0:1c:6e:1b:3d:5f:f2:96:e2: d9:03:0a:83:07:e5:d6:c0:cd:39:73:21:12:2e:e2: 1f:c5:04:12:c5:33:85:16:33:03:9d:c9:4b:5b:02: 74:fb:eb:27:31:7f:72:55:83:1f:82:a3:3d:6c:ad: f1:71:e3:3b:b2:91:64:db:e2:c4:a6:c8:9c:07:d9: 0a:7c:ca:8b:41:68:d2:bc:23:cb:aa:2a:ce:84:d8: ea:94:dc:00:17:ff:33:6e:b7:eb:fd:3a:81:1c:8d: 61:ee:5e:2b:16:39:6e:2a:09:8d:e3:08:9b:81:1c: 8c:2b:2d:e7:27:d9:72:2f:44:81:9d:68:16:6f:22: 64:4d:74:8e:fc:20:81:30:12:01:60:b8:b9:3b:a6: 6b:9e:eb:1b:b3:a9:cd:46:75:cd:e3:14:b0:22:01: c9:8f:4c:f8:07:12:b8:1c:f7:dc:8d:dd:3e:93:cd: 89:5b:24:8e:bd:f3:b1:67:66:33:4e:c9:51:56:31: 85:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:50:C4:4A:7B:AE:C2:CD:E4:13:05:25:EB:94:26:79:F2:C6:A8:75 X509v3 Authority Key Identifier: keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:24:40:55:15:00:4b:2d:f9:56:e8:2f:db:41:a0:6f:ef:55: a4:1a:68:3e:2a:7c:50:99:5c:f1:aa:20:fc:b4:14:ac:1c:7e: 2a:72:33:c7:27:14:50:82:f4:0b:33:49:95:e2:e4:3c:14:aa: 92:d1:45:45:bc:da:71:fc:09:ff:2e:97:fd:72:46:13:7c:09: ed:07:78:bc:de:f9:ad:8e:44:ef:d7:59:7a:cb:3a:b4:de:d9: 24:2b:c8:05:b0:b3:65:f0:1c:85:ee:e2:54:ea:3f:ef:99:22: 23:f0:f9:c4:48:c6:d6:7d:06:47:11:69:01:e2:8a:23:86:33: 48:b3:60:6f:c7:ce:2d:d3:43:85:7c:50:4c:83:9b:14:a0:10: 8e:e1:f9:d9:50:d2:53:d4:70:45:5d:d8:54:20:83:94:dc:f2: ee:ef:43:d2:bb:4a:ba:02:ca:7c:3f:4e:da:be:63:98:b0:bd: a3:e5:91:0b:5a:05:78:7a:bb:df:73:94:c3:80:63:c1:4c:56: 4c:c2:6d:c1:a3:2f:49:dc:86:d0:a5:3e:58:2a:1e:0c:d1:bb: 08:19:a3:7e:4f:7c:f5:63:45:77:79:d5:bd:02:05:50:bd:1b: 68:b7:65:ed:b9:99:42:fc:41:e9:6c:70:04:20:97:16:55:15: 74:f8:2d:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzNUUxMTAvBgNVBAUTKEJFNkQ3NzI2RjlENzM5RTZFQzlBRjkzNDdFQ0VDQjQy MTdBRjdBM0YwHhcNMjUxMjA1MDIwNjM2WhcNMjUxMjEyMDIwNjM2WjAYMRYwFAYD VQQDEw02OTMyM2UyYy0xZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Ye+SKZOUamk4Xil3IVJxJbe7+O6qC+DycMdO9Kh/XN282du8rcXaKoTfbkd xLaaZneFFh8vb8sfoSjQyWQMbVqwHG4bPV/yluLZAwqDB+XWwM05cyESLuIfxQQS xTOFFjMDnclLWwJ0++snMX9yVYMfgqM9bK3xceM7spFk2+LEpsicB9kKfMqLQWjS vCPLqirOhNjqlNwAF/8zbrfr/TqBHI1h7l4rFjluKgmN4wibgRyMKy3nJ9lyL0SB nWgWbyJkTXSO/CCBMBIBYLi5O6Zrnusbs6nNRnXN4xSwIgHJj0z4BxK4HPfcjd0+ k82JWySOvfOxZ2YzTslRVjGF2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9QxEp7 rsLN5BMFJeuUJnnyxqh1MB8GA1UdIwQYMBaAFL5tdyb51znm7Jr5NH7Oy0IXr3o/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDM1RS8yMDhERkMzNkFD NDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9lYnNtdmswZnM3TFFoZXZl ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtMTNKdm5YT2Vic212azBmczdMUWhldmVqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDM1RS8yMDhERkMzNkFDNDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9l YnNtdmswZnM3TFFoZXZlajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6JEBVFQBLLflW6C/bQaBv71WkGmg+KnxQmVzxqiD8tBSsHH4qcjPH JxRQgvQLM0mV4uQ8FKqS0UVFvNpx/An/Lpf9ckYTfAntB3i83vmtjkTv11l6yzq0 3tkkK8gFsLNl8ByF7uJU6j/vmSIj8PnESMbWfQZHEWkB4oojhjNIs2Bvx84t00OF fFBMg5sUoBCO4fnZUNJT1HBFXdhUIIOU3PLu70PSu0q6Asp8P07avmOYsL2j5ZEL WgV4ervfc5TDgGPBTFZMwm3Boy9J3IbQpT5YKh4M0bsIGaN+T3z1Y0V3edW9AgVQ vRtot2XtuZlC/EHpbHAEIJcWVRV0+C1V -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:14 2025 by rpki-client