This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json) Hash identifier: KeG6ln/tfLBR4LLn492ZHSys+EO400sF2hptSWcktVM= Subject key identifier: A3:48:67:0E:87:A9:F5:66:82:8C:96:2D:2E:66:A8:5C:CB:F2:2C:03 Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft Manifest number: 0371 Signing time: Fri 05 Dec 2025 00:22:45 +0000 Manifest this update: Fri 05 Dec 2025 00:22:45 +0000 Manifest next update: Fri 12 Dec 2025 00:22:45 +0000 Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: Q7LnYDRVbJ/2uDaVDEMDfptF3vI9W6Qk54B8ApO8c5E=) 2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: Ds7R3+sBBZEG01JWJaEnAvs9QgVWz9hGRIlkayRqHKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Validity Not Before: Dec 5 00:22:45 2025 GMT Not After : Dec 12 00:22:45 2025 GMT Subject: CN=693225d5-2264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:58:7b:1b:9f:00:47:0c:36:1e:b9:16:60:16: 6c:cb:52:af:6b:e9:6b:58:20:27:5f:2c:46:69:70: ee:79:18:9d:fe:ab:63:68:d8:60:52:2a:78:27:71: 90:ea:dd:01:55:88:1e:fe:f8:a9:7e:e1:cc:21:bd: 27:cc:98:80:40:da:27:6e:97:78:31:51:1d:33:b4: f3:4d:10:b3:93:79:53:56:e0:9e:21:b7:65:a7:b9: 35:28:5a:33:a8:41:6d:c7:f8:39:f5:51:3c:3c:b8: b7:5c:c4:d1:9d:b1:2b:b6:01:da:c9:91:c3:25:77: 4e:fb:66:f4:8d:ed:9a:8e:93:51:b9:2e:0b:7e:76: ee:c7:36:88:83:fc:7c:42:34:42:b4:f9:a1:77:82: b9:57:bd:59:d2:79:71:8b:07:55:77:e8:52:7e:01: 9b:90:79:d3:1b:12:f5:6e:1e:be:6e:0d:0c:a3:50: b8:15:e6:67:63:9d:64:9b:65:d4:37:97:09:29:bb: 2c:46:d4:9b:cf:c6:f3:39:de:80:6c:64:1b:e0:b8: d2:8e:af:39:64:22:54:6d:a4:98:0c:56:b9:2c:61: 0f:05:18:40:bd:cf:93:9d:14:07:63:c0:4f:75:51: 7d:52:92:a1:a6:14:47:d4:c4:3c:02:d4:78:de:ec: dd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:48:67:0E:87:A9:F5:66:82:8C:96:2D:2E:66:A8:5C:CB:F2:2C:03 X509v3 Authority Key Identifier: keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:08:0d:02:03:99:50:84:0c:1c:0f:b0:a2:9f:45:df:b0:65: 29:ab:41:c0:ff:51:fd:a1:70:40:df:64:cd:a4:5b:dd:e9:54: 64:f4:2b:09:2a:0d:03:95:c5:cd:1c:17:0a:28:77:ec:28:d8: 56:8b:7d:24:09:06:6f:24:bc:94:8c:d2:9f:86:af:8b:88:a1: 08:db:48:09:8d:06:3a:b0:4f:a4:55:70:7a:60:49:f9:1c:9c: 1d:ed:b5:2d:c8:8b:52:77:c3:f0:b6:94:06:4d:de:61:9f:11: c2:f3:0b:28:74:a4:42:b2:6d:1d:66:f5:0b:4c:5f:b1:11:92: 49:0e:cd:b3:2e:e6:ca:7a:26:8c:ce:1c:fd:a0:9f:c8:bd:af: 04:39:57:0d:f3:d6:14:79:d7:34:01:53:35:5e:3e:cb:3f:fb: 43:25:90:71:fa:98:6b:68:fe:5d:62:04:d8:76:fb:2f:fb:5f: 36:5c:3d:b4:5c:2b:7c:e5:cc:62:d8:f1:5a:1b:2d:d8:2d:0e: 9c:35:16:7a:4c:bd:d3:84:af:b5:b2:42:d3:1d:e5:08:c4:fc: 3b:ab:dd:6d:d9:3d:25:15:dc:8b:c0:de:e6:60:d1:82:41:53: a9:b2:cb:c2:74:fb:20:f1:a8:01:24:2b:10:6d:6b:84:f8:5d: e7:fa:75:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU4QUMxMTAvBgNVBAUTKEJFRjMyMUIwM0Q4MjQ1REU3N0VDODBERDAzMzFCRkJB OEQwODU5RDgwHhcNMjUxMjA1MDAyMjQ1WhcNMjUxMjEyMDAyMjQ1WjAYMRYwFAYD VQQDEw02OTMyMjVkNS0yMjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlh7G58ARww2HrkWYBZsy1Kva+lrWCAnXyxGaXDueRid/qtjaNhgUip4J3GQ 6t0BVYge/vipfuHMIb0nzJiAQNonbpd4MVEdM7TzTRCzk3lTVuCeIbdlp7k1KFoz qEFtx/g59VE8PLi3XMTRnbErtgHayZHDJXdO+2b0je2ajpNRuS4LfnbuxzaIg/x8 QjRCtPmhd4K5V71Z0nlxiwdVd+hSfgGbkHnTGxL1bh6+bg0Mo1C4FeZnY51km2XU N5cJKbssRtSbz8bzOd6AbGQb4LjSjq85ZCJUbaSYDFa5LGEPBRhAvc+TnRQHY8BP dVF9UpKhphRH1MQ8AtR43uzdLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNIZw6H qfVmgoyWLS5mqFzL8iwDMB8GA1UdIwQYMBaAFL7zIbA9gkXed+yA3QMxv7qNCFnY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRThBQy81MDM4RUM4QzdE RUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1JkNTM3SURkQXpHX3VvMElX ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z2TWhzRDJDUmQ1MzdJRGRBekdfdW8wSVdkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RThBQy81MDM4RUM4QzdERUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1Jk NTM3SURkQXpHX3VvMElXZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChCA0CA5lQhAwcD7Cin0XfsGUpq0HA/1H9oXBA32TNpFvd6VRk9CsJ Kg0DlcXNHBcKKHfsKNhWi30kCQZvJLyUjNKfhq+LiKEI20gJjQY6sE+kVXB6YEn5 HJwd7bUtyItSd8PwtpQGTd5hnxHC8wsodKRCsm0dZvULTF+xEZJJDs2zLubKeiaM zhz9oJ/Iva8EOVcN89YUedc0AVM1Xj7LP/tDJZBx+phraP5dYgTYdvsv+182XD20 XCt85cxi2PFaGy3YLQ6cNRZ6TL3ThK+1skLTHeUIxPw7q91t2T0lFdyLwN7mYNGC QVOpssvCdPsg8agBJCsQbWuE+F3n+nWj -----END CERTIFICATE-----Generated at Sat Dec 6 23:38:02 2025 by rpki-client