This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json) Hash identifier: 1aMyP8bWo4aO56VPu6DMrXynawBGPnVWdB+YxFWXljg= Subject key identifier: 4F:54:45:5B:92:C6:ED:A2:95:70:C8:BC:37:AE:B2:05:66:0B:4A:5D Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft Manifest number: 9A Signing time: Fri 05 Dec 2025 04:25:30 +0000 Manifest this update: Fri 05 Dec 2025 04:25:29 +0000 Manifest next update: Fri 12 Dec 2025 04:25:29 +0000 Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: Zsw90NYMKRsd+S2Of7r/UcOxp8mS8sU/nbEMx6Fbep4=) 2: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: WTYmLvNpyq/A5Kbra5mtKRBFCjY1e4fS3rGmshvrNGY=) 3: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: d1zImNClufU6mQa0qsoJOx/6gPAzww6pSPXhwifVLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D Validity Not Before: Dec 5 04:25:29 2025 GMT Not After : Dec 12 04:25:29 2025 GMT Subject: CN=69325eba-832d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9b:dc:30:d0:d8:ab:e9:97:98:c5:e5:00:95: a4:92:75:32:58:7d:90:cc:4e:91:8e:4e:51:3a:af: e8:c5:61:e9:de:4f:ca:7e:3d:8d:04:b1:d3:1f:a3: 3e:cd:1e:6f:fc:21:53:52:ef:27:0f:dd:19:e4:b9: 1e:a3:52:1f:80:57:82:2c:86:95:42:66:4e:95:58: d7:f3:29:6d:0c:99:e0:b9:f8:0c:25:91:72:c5:79: 53:82:6f:33:f3:31:44:9d:33:25:66:8a:3f:5b:ea: ed:f9:f8:84:82:6c:87:f6:db:0b:91:a7:6f:c9:a6: 2f:49:eb:28:15:21:61:bf:df:5e:40:69:3a:79:c2: 08:04:05:fa:83:88:85:f2:f6:97:a9:b8:4b:f2:32: cc:b3:03:a3:b9:aa:49:46:68:98:a9:9a:1b:67:e8: d6:ed:83:ed:d0:5c:ec:90:20:29:88:f3:4d:97:ee: e5:6a:9a:9d:7d:36:88:5a:64:0b:61:8b:b3:63:5e: 31:23:b7:49:00:87:d9:ba:14:e9:f4:01:ad:5a:8b: fb:a7:43:38:a6:e3:a4:5f:df:53:f2:07:ea:1f:ad: fb:30:0f:2a:06:ff:74:ff:e0:2b:c7:9a:e9:80:cd: 05:cc:b6:29:9b:6d:fc:0f:ed:49:30:60:f2:40:73: 01:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:54:45:5B:92:C6:ED:A2:95:70:C8:BC:37:AE:B2:05:66:0B:4A:5D X509v3 Authority Key Identifier: keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d8:9b:f1:b7:f9:b3:0b:3c:2f:be:9a:32:c9:b6:23:38:a8: a7:11:88:93:2a:e3:be:9c:bf:43:e3:9b:1c:14:f4:2c:5d:b1: 2f:05:75:d7:42:88:ff:34:5b:4c:ce:44:18:53:d0:e6:17:28: 21:2f:22:61:86:d1:39:55:36:99:aa:c3:5a:83:da:ed:15:12: 78:1a:78:60:7c:51:0d:dc:42:54:64:15:ef:66:5e:a7:47:6f: 13:3f:e8:46:95:8b:03:57:49:e9:37:58:bc:54:b4:ff:8f:39: 94:57:47:fe:7d:ea:d1:ad:de:ee:ee:8b:47:14:01:9e:b2:f3: 2e:f8:c7:5c:f1:5b:d0:9c:4a:28:ae:ff:cf:70:6b:ac:ec:ed: 38:37:57:f0:84:02:84:9e:14:f2:09:1b:90:4b:f9:e6:4a:64: 0d:58:54:9b:df:74:7d:c4:18:40:ef:0c:8b:d8:38:1f:5c:72: 48:a4:1d:4c:9b:a3:ae:07:0f:95:df:54:05:e9:da:49:13:f4: 68:0d:d1:3e:bc:7c:4d:bd:bb:fd:da:ab:16:c1:07:88:70:24: f3:27:64:9b:37:0e:de:91:a3:4c:f5:59:b3:6f:8a:db:df:dd: c6:f8:62:65:b3:2e:2d:1b:24:32:d5:fd:98:bb:c4:8f:f6:a9: 81:e0:35:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxQ0MxMTAvBgNVBAUTKDQ0NkZBRjkyM0JFQkFGOTYzNTcyODdGRTI1MDk5MUM3 NTQ5MTQ1NEQwHhcNMjUxMjA1MDQyNTI5WhcNMjUxMjEyMDQyNTI5WjAYMRYwFAYD VQQDEw02OTMyNWViYS04MzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05vcMNDYq+mXmMXlAJWkknUyWH2QzE6Rjk5ROq/oxWHp3k/Kfj2NBLHTH6M+ zR5v/CFTUu8nD90Z5Lkeo1IfgFeCLIaVQmZOlVjX8yltDJngufgMJZFyxXlTgm8z 8zFEnTMlZoo/W+rt+fiEgmyH9tsLkadvyaYvSesoFSFhv99eQGk6ecIIBAX6g4iF 8vaXqbhL8jLMswOjuapJRmiYqZobZ+jW7YPt0FzskCApiPNNl+7lapqdfTaIWmQL YYuzY14xI7dJAIfZuhTp9AGtWov7p0M4puOkX99T8gfqH637MA8qBv90/+Arx5rp gM0FzLYpm238D+1JMGDyQHMBAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9URVuS xu2ilXDIvDeusgVmC0pdMB8GA1UdIwQYMBaAFERvr5I766+WNXKH/iUJkcdUkUVN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjFDQy8zQUZDMzNFMkVG NjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9SRy12a2p2cnI1WTFjb2YtSlFtUngxU1JS VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JHLXZranZycjVZMWNvZi1KUW1SeDFTUlJVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjFDQy8zQUZDMzNFMkVGNjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9SRy12a2p2cnI1 WTFjb2YtSlFtUngxU1JSVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj2Jvxt/mzCzwvvpoyybYjOKinEYiTKuO+nL9D45scFPQsXbEvBXXX Qoj/NFtMzkQYU9DmFyghLyJhhtE5VTaZqsNag9rtFRJ4GnhgfFEN3EJUZBXvZl6n R28TP+hGlYsDV0npN1i8VLT/jzmUV0f+ferRrd7u7otHFAGesvMu+Mdc8VvQnEoo rv/PcGus7O04N1fwhAKEnhTyCRuQS/nmSmQNWFSb33R9xBhA7wyL2DgfXHJIpB1M m6OuBw+V31QF6dpJE/RoDdE+vHxNvbv92qsWwQeIcCTzJ2SbNw7ekaNM9Vmzb4rb 393G+GJlsy4tGyQy1f2Yu8SP9qmB4DXo -----END CERTIFICATE-----Generated at Sat Dec 6 19:36:23 2025 by rpki-client