This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft File: b2dYEDhTTU2848gbXy2IYcU2tnw.mft (raw, json) Hash identifier: tzbilpg7A4QWDT5wUZUtlxg/oxun79u8ZncZT4j0dLI= Subject key identifier: 51:E3:C1:4A:FB:5E:D9:5A:9F:E1:03:DB:16:3A:06:7D:C0:40:AC:B6 Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C Certificate issuer: /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft Manifest number: 01BD Signing time: Fri 19 Dec 2025 02:19:30 +0000 Manifest this update: Fri 19 Dec 2025 02:19:29 +0000 Manifest next update: Fri 26 Dec 2025 02:19:29 +0000 Files and hashes: 1: b2dYEDhTTU2848gbXy2IYcU2tnw.crl (hash: KuGD1+ESJo6q0eYszAuSPWaO2IdQARpDagnCI6TP/Rc=) 2: D1B29B22765011F0BCBD414BC4F9AE02.roa (hash: TpQVJHA6sSxFaciFmuBU1DFAl38Xh8Nn5sF6lcXLIuM=) 3: EAA5793C367411EF98F49F1CC4F9AE02.roa (hash: 1hUCax5WiGiWQgbYzegA6fFS1jIG16Os9zx/NpFktvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117836, serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Validity Not Before: Dec 19 02:19:29 2025 GMT Not After : Dec 26 02:19:29 2025 GMT Subject: CN=6944b631-f2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bf:3a:6b:7a:ab:59:37:12:28:68:a4:72:23: e0:e0:47:02:9e:5a:21:d6:a1:22:32:4f:f9:0a:d3: 11:4f:20:05:dc:62:36:7d:f8:61:9c:2a:cf:d5:74: 08:c8:68:1a:5c:99:65:99:ec:46:cd:a0:3e:24:e6: 41:77:98:e3:8d:9b:fa:55:59:4f:4c:c8:2f:df:20: c4:16:9e:0c:61:f0:dc:dd:3f:67:f4:c2:cc:34:9a: 76:91:ab:8e:49:43:9a:3f:fa:5f:28:14:bc:47:b2: 28:4f:99:01:f3:84:aa:4c:68:6b:43:90:90:d1:99: 2f:f4:d7:16:6d:b9:fb:35:cc:46:30:88:f4:2f:69: 25:02:49:93:04:22:93:b1:49:c1:03:c5:4b:e4:a6: e7:5b:d7:ab:ef:00:bd:07:57:87:9e:45:2c:56:18: 41:21:44:3f:81:89:09:7c:e8:1c:d3:02:10:1e:65: f7:ec:c7:af:00:83:db:ae:99:e2:5a:74:b0:ee:d1: 99:ce:38:d1:fd:ec:cd:e7:0f:d6:cd:cd:ae:fb:6b: 84:fe:2d:ac:84:38:a4:0b:9f:c7:b3:fe:da:23:4e: 27:85:0f:50:e6:05:ab:3f:76:32:f5:09:af:24:f4: 69:44:e1:98:23:56:eb:2a:03:b7:e2:4a:ca:79:ab: 57:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E3:C1:4A:FB:5E:D9:5A:9F:E1:03:DB:16:3A:06:7D:C0:40:AC:B6 X509v3 Authority Key Identifier: keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:92:3b:db:ee:bc:4a:c6:79:ac:ef:47:6b:8a:8c:3d:04:90: ec:00:10:59:7d:53:51:53:74:eb:6e:7a:5c:b8:48:38:96:4f: bd:37:87:ed:73:9e:f7:88:36:10:5f:f3:a3:73:2e:7e:d7:56: b0:82:eb:72:d8:a4:ed:bb:a8:90:85:6a:a2:1f:46:bc:0e:0d: 2c:36:b0:7d:c7:7a:4b:8d:17:1e:93:0e:fc:06:5d:cd:80:7b: 1e:a7:10:2f:77:05:83:f1:62:22:b6:04:86:c0:18:e8:b1:bd: 21:df:14:f6:b1:46:72:13:34:81:2b:50:7c:dc:72:7c:3f:96: 9b:60:95:ed:28:5e:3b:7c:50:64:36:45:43:07:e2:2d:cb:43: 10:98:52:d7:8d:64:2d:2d:fe:e8:2f:80:02:36:14:bc:31:c4: f6:9a:e3:8c:ce:43:68:5f:a5:e0:96:bf:5d:e6:e9:9c:b7:99: 70:93:8a:3a:73:77:52:07:93:22:52:b1:96:c4:b5:75:ad:ab: 7a:eb:d1:9d:60:7c:8a:ac:ad:c8:e6:d9:cc:ee:9f:cb:3b:b7: 8f:9b:06:64:42:8b:4e:e7:1e:8d:6c:68:35:8c:f6:a5:a6:87: e0:ce:f9:e7:02:8a:cd:3b:a6:08:9e:a5:ea:7d:39:f4:38:24: 27:48:06:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4MzYxMTAvBgNVBAUTKDZGNjc1ODEwMzg1MzRENERCQ0UzQzgxQjVGMkQ4ODYx QzUzNkI2N0MwHhcNMjUxMjE5MDIxOTI5WhcNMjUxMjI2MDIxOTI5WjAYMRYwFAYD VQQDDA02OTQ0YjYzMS1mMmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj786a3qrWTcSKGikciPg4EcCnloh1qEiMk/5CtMRTyAF3GI2ffhhnCrP1XQI yGgaXJllmexGzaA+JOZBd5jjjZv6VVlPTMgv3yDEFp4MYfDc3T9n9MLMNJp2kauO SUOaP/pfKBS8R7IoT5kB84SqTGhrQ5CQ0Zkv9NcWbbn7NcxGMIj0L2klAkmTBCKT sUnBA8VL5KbnW9er7wC9B1eHnkUsVhhBIUQ/gYkJfOgc0wIQHmX37MevAIPbrpni WnSw7tGZzjjR/ezN5w/Wzc2u+2uE/i2shDikC5/Hs/7aI04nhQ9Q5gWrP3Yy9Qmv JPRpROGYI1brKgO34krKeatX+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHjwUr7 Xtlan+ED2xY6Bn3AQKy2MB8GA1UdIwQYMBaAFG9nWBA4U01NvOPIG18tiGHFNrZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzgzNi9GQTI1RURFMjQz MUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRVMjg0OGdiWHkySVljVTJ0 bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyZFlFRGhUVFUyODQ4Z2JYeTJJWWNVMnRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzgzNi9GQTI1RURFMjQzMUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRV Mjg0OGdiWHkySVljVTJ0bncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWkjvb7rxKxnms70driow9BJDsABBZfVNRU3TrbnpcuEg4lk+9N4ft c573iDYQX/Ojcy5+11awguty2KTtu6iQhWqiH0a8Dg0sNrB9x3pLjRcekw78Bl3N gHsepxAvdwWD8WIitgSGwBjosb0h3xT2sUZyEzSBK1B83HJ8P5abYJXtKF47fFBk NkVDB+Ity0MQmFLXjWQtLf7oL4ACNhS8McT2muOMzkNoX6Xglr9d5umct5lwk4o6 c3dSB5MiUrGWxLV1rat669GdYHyKrK3I5tnM7p/LO7ePmwZkQotO5x6NbGg1jPal pofgzvnnAorNO6YInqXqfTn0OCQnSAYH -----END CERTIFICATE-----Generated at Fri Dec 19 18:57:28 2025 by rpki-client