This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json) Hash identifier: a5JC4m3S0EkujHH9BaQEnJg5lPpLCOJy0UObLOpSrV8= Subject key identifier: 0B:F5:4B:7B:80:0B:53:1A:44:A3:02:FD:5A:C2:B4:CB:33:50:0E:C1 Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Certificate serial: 07CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft Manifest number: 07B5 Signing time: Sat 06 Dec 2025 20:32:13 +0000 Manifest this update: Sat 06 Dec 2025 20:32:12 +0000 Manifest next update: Sat 13 Dec 2025 20:32:12 +0000 Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: YK8aj9DM1Q3Ojckzh2nAsBwUU571djTmDg7l9Kyut7M=) 2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: TcpChTsBYQR53TAci1Cu49H66zJAUKzrxZhCpAIeCNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1994 (0x7ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Validity Not Before: Dec 6 20:32:12 2025 GMT Not After : Dec 13 20:32:12 2025 GMT Subject: CN=693492cd-db89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:d9:1c:f6:67:1d:31:ee:50:73:a9:47:40: 03:9b:7d:c5:c5:64:54:22:25:07:5c:4a:17:76:55: 7f:89:6c:cc:99:5d:be:14:f0:82:75:3a:1d:58:88: 72:1c:5a:03:02:f5:6b:24:2c:54:af:d4:95:8d:07: 26:f3:cb:5c:b7:57:cd:a6:b5:8c:2e:a8:ed:e3:d0: 9d:d4:8f:bb:fd:db:15:13:01:b5:4a:0b:9a:16:0c: 93:79:36:1d:64:cf:7f:4c:43:86:bf:65:a8:b5:21: bc:2e:5f:da:9d:ba:5d:77:25:15:5c:20:92:f2:33: 4e:66:19:c7:5e:a5:f5:0b:95:9b:2a:1e:57:f8:2c: c0:03:1f:42:7a:86:73:c7:42:04:bb:a8:06:ce:eb: 5b:7d:2e:46:04:05:47:cd:4d:05:49:fd:dd:0e:cf: 53:5a:ca:f8:61:dc:1d:13:60:bb:55:84:fa:22:bf: 26:e8:7e:9b:0f:be:26:6a:22:15:59:78:ae:90:3d: 61:15:d3:18:a3:1c:85:1e:39:39:0b:08:f9:78:09: 8e:d6:94:1b:20:89:0b:eb:48:82:77:d1:f2:c7:40: e3:36:78:52:ba:eb:2e:f4:97:66:f2:df:ae:d2:b4: 0b:e6:dd:aa:ad:f2:02:37:c0:64:0a:14:63:75:b7: a9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F5:4B:7B:80:0B:53:1A:44:A3:02:FD:5A:C2:B4:CB:33:50:0E:C1 X509v3 Authority Key Identifier: keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b7:98:c6:f3:7f:87:d1:30:69:93:dd:28:8d:0e:94:6e:96: 0a:58:67:60:cb:8a:26:22:be:f9:3e:47:f7:1c:02:d3:81:3a: 48:84:b1:60:d4:c4:20:ec:9f:49:9f:1a:dd:1e:d0:35:53:ac: 9a:7e:72:6a:81:6f:2a:da:72:22:dd:04:f4:7d:4d:0b:01:07: 86:a0:d0:38:37:e1:9d:12:80:6e:8c:cd:87:4b:ab:fe:19:e4: bc:b4:f5:0a:00:ae:3c:32:19:fe:c4:0a:d9:e1:aa:be:26:d8: d3:cc:f1:27:1c:69:a7:3d:1c:95:34:80:25:9e:90:64:5d:27: 26:e7:f1:21:02:c8:9c:88:e5:2a:8d:c2:12:89:6e:62:de:70: 58:92:06:f4:78:86:91:07:f2:a9:55:12:9e:ab:d8:38:a4:0f: 54:28:c0:72:a2:09:3b:46:6e:9b:3c:c8:3c:8b:32:b8:db:29: e1:46:fd:68:1c:90:36:88:b1:23:54:28:e7:4b:c0:77:fb:4f: c6:95:9d:43:d5:89:9f:03:67:10:40:2e:6f:8a:c3:4b:c0:97: 06:f6:d8:7e:71:3b:ab:d6:53:d7:bb:c7:1e:b5:58:92:3b:f7: 7a:9e:5b:b4:9a:f8:95:32:a7:db:a0:79:63:7c:5c:7d:8a:2a: 84:9e:0c:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDU0MEREQUM2NjhEOEI1MEM5NjYwNTcxMjE5NUE5ODhB MUNBRDlFM0YwHhcNMjUxMjA2MjAzMjEyWhcNMjUxMjEzMjAzMjEyWjAYMRYwFAYD VQQDEw02OTM0OTJjZC1kYjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwPZHPZnHTHuUHOpR0ADm33FxWRUIiUHXEoXdlV/iWzMmV2+FPCCdTodWIhy HFoDAvVrJCxUr9SVjQcm88tct1fNprWMLqjt49Cd1I+7/dsVEwG1SguaFgyTeTYd ZM9/TEOGv2WotSG8Ll/anbpddyUVXCCS8jNOZhnHXqX1C5WbKh5X+CzAAx9CeoZz x0IEu6gGzutbfS5GBAVHzU0FSf3dDs9TWsr4YdwdE2C7VYT6Ir8m6H6bD74maiIV WXiukD1hFdMYoxyFHjk5Cwj5eAmO1pQbIIkL60iCd9Hyx0DjNnhSuusu9Jdm8t+u 0rQL5t2qrfICN8BkChRjdbephQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAv1S3uA C1MaRKMC/VrCtMszUA7BMB8GA1UdIwQYMBaAFFQN2sZo2LUMlmBXEhlamIocrZ4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi8wOTQ0ODlGRTMy Q0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRReVdZRmNTR1ZxWWloeXRu ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBM2F4bWpZdFF5V1lGY1NHVnFZaWh5dG5qOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi8wOTQ0ODlGRTMyQ0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRR eVdZRmNTR1ZxWWloeXRuajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAat5jG83+H0TBpk90ojQ6UbpYKWGdgy4omIr75Pkf3HALTgTpIhLFg 1MQg7J9JnxrdHtA1U6yafnJqgW8q2nIi3QT0fU0LAQeGoNA4N+GdEoBujM2HS6v+ GeS8tPUKAK48Mhn+xArZ4aq+JtjTzPEnHGmnPRyVNIAlnpBkXScm5/EhAsiciOUq jcISiW5i3nBYkgb0eIaRB/KpVRKeq9g4pA9UKMByogk7Rm6bPMg8izK42ynhRv1o HJA2iLEjVCjnS8B3+0/GlZ1D1YmfA2cQQC5visNLwJcG9th+cTur1lPXu8cetViS O/d6nlu0mviVMqfboHljfFx9iiqEngwW -----END CERTIFICATE-----Generated at Sun Dec 7 05:53:20 2025 by rpki-client