This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft File: ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft (raw, json) Hash identifier: G4goNeNRqJiPIQ5BKnEOdasqQJc4tIKWP2PxlJqbRLQ= Subject key identifier: 79:51:A4:86:E7:5F:5C:2C:BF:63:12:16:1A:16:A9:B6:A1:C2:1F:E4 Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7 Certificate issuer: /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7 Certificate serial: 08AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft Manifest number: 087A Signing time: Thu 18 Dec 2025 20:09:45 +0000 Manifest this update: Thu 18 Dec 2025 20:09:44 +0000 Manifest next update: Thu 25 Dec 2025 20:09:44 +0000 Files and hashes: 1: ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl (hash: YKH0Fd2qfRewP5CPfhJYfYEdrp9FGwM/YG4d2yexNL0=) 2: E0A4E5182A6011EB8DEF2641C4F9AE02.roa (hash: LmiT/78vJYPXtCg/vYC5cyA6e51c5z/fGkAk3TxGErM=) 3: 9EA66A9E737D11ECA0A3A018C4F9AE02.roa (hash: 6MugAT5WUA7wa54QdXsUcpbkyeNKtczQJ8hnMQYoyDw=) 4: 67591AB22FC911EBA360EC1CC4F9AE02.roa (hash: esocmtJlq7HlcotlDHp6Mez+z9Rl0fTX+KzbKTLXFms=) 5: E1582B782A6011EB8DEF2641C4F9AE02.roa (hash: g9vu6FJuOGiHVWjvlUrnr/lO98Du1rwPNicgo4vRrvk=) 6: 1D2381425E5F11EC870D9676C4F9AE02.roa (hash: ZUd4QbCdB3E4EQBK+nU5VmSSyQaDu0ItsbLfbY5xMOQ=) 7: 653B503C5C3C11ED9B4FAB0BC4F9AE02.roa (hash: 1mD7CDJ8DRk+lM8vtNVrHgkyHQbdyBW6ydIVEiLBivE=) 8: E1E4F9902A6011EB8DEF2641C4F9AE02.roa (hash: GxNJ1GJyLCfG1wd+tTkjUWqW3q5g76ObJBXzG7SEDaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2222 (0x8ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B, serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7 Validity Not Before: Dec 18 20:09:44 2025 GMT Not After : Dec 25 20:09:44 2025 GMT Subject: CN=69445f88-b0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b9:e7:17:a3:61:b9:13:72:d5:6f:6d:21:aa: 08:34:55:20:6d:44:8e:4c:37:5a:75:08:48:61:37: 4c:e8:4c:bb:4e:b7:89:43:03:8e:16:4d:d4:c1:c0: 2e:87:cc:47:4b:99:6b:ef:3e:80:37:1b:97:0c:f0: a4:33:d8:cc:a0:d6:79:ee:98:64:84:e8:4e:e8:9e: b4:0c:9e:b2:1f:b4:d2:11:9f:12:1e:10:af:de:03: f0:c5:17:27:ee:fb:e1:96:9d:39:0b:dc:6a:3c:22: 6a:22:4b:d6:0e:9c:1c:37:85:03:e2:6f:f6:25:81: d1:8c:16:f6:91:22:ca:72:16:de:fc:0b:11:a2:5b: ba:75:d2:6d:ca:10:4a:da:95:13:0e:2f:02:ab:f1: e4:5e:0e:3a:b3:c4:60:d0:35:9d:3a:32:6f:5b:5a: b4:c4:9f:1e:9d:0c:79:bb:02:f7:62:fa:8f:2b:77: 92:f2:b8:a9:38:cf:db:45:27:da:1a:b1:96:d0:e0: 89:cb:8c:4d:0e:ab:73:3f:65:98:e1:22:6e:43:09: 8f:12:9b:f5:f6:a4:95:40:c3:09:95:3e:90:50:58: 6e:31:34:5d:3f:d3:41:6b:f2:df:a6:15:07:7e:9c: 03:99:49:bb:9c:28:94:90:00:c0:49:ba:88:bb:40: f5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:51:A4:86:E7:5F:5C:2C:BF:63:12:16:1A:16:A9:B6:A1:C2:1F:E4 X509v3 Authority Key Identifier: keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:70:4f:74:14:02:f0:f5:a5:2c:e9:0b:24:48:6b:2f:5b:04: c3:7e:14:6d:cc:fa:e4:b6:6d:b2:b5:57:f9:66:1c:40:85:3a: 8c:cc:99:78:be:18:02:fc:8f:f0:85:4c:16:9e:54:ee:b1:9c: 79:64:73:bb:76:9b:8f:54:09:d8:d5:85:78:f0:d2:5e:20:db: f1:b1:6f:a6:fd:8c:70:b2:59:33:03:b3:a8:d0:99:88:e6:0b: d9:57:4c:b2:8d:d3:cc:7c:ec:5b:9f:f1:8a:15:36:45:76:fe: 5a:7e:db:e5:c4:c0:72:2d:3e:77:50:5e:9d:0a:0e:b6:2b:e7: e5:6e:6f:85:6b:13:df:28:b3:36:2d:b8:db:98:9f:3f:48:36: 86:e4:62:d0:1a:75:fd:b9:72:c1:80:e1:b1:ed:65:59:8f:48: 6f:bf:60:ec:4e:fa:18:50:2e:ff:72:ae:5e:5d:dd:17:3a:a2: 24:2e:d6:21:b9:f8:07:6b:a6:3c:d6:c9:59:f2:01:bb:9c:9a: f7:a9:b2:af:2e:7e:89:59:af:0d:90:2b:b0:7e:9a:00:ef:b2: f7:93:1d:08:e9:07:08:30:d7:c5:d7:4c:81:04:9f:ad:61:7a: 6d:5a:c6:72:0c:aa:c9:d6:28:76:92:ae:8f:07:57:d9:1b:e0: 4f:20:1b:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDA3MjdBQUM1QjhDRjdGRTY4Q0NENkRFNzdGNkM4QjQ2 RDU3NEZBQTcwHhcNMjUxMjE4MjAwOTQ0WhcNMjUxMjI1MjAwOTQ0WjAYMRYwFAYD VQQDDA02OTQ0NWY4OC1iMGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbnnF6NhuRNy1W9tIaoINFUgbUSOTDdadQhIYTdM6Ey7TreJQwOOFk3UwcAu h8xHS5lr7z6ANxuXDPCkM9jMoNZ57phkhOhO6J60DJ6yH7TSEZ8SHhCv3gPwxRcn 7vvhlp05C9xqPCJqIkvWDpwcN4UD4m/2JYHRjBb2kSLKchbe/AsRolu6ddJtyhBK 2pUTDi8Cq/HkXg46s8Rg0DWdOjJvW1q0xJ8enQx5uwL3YvqPK3eS8ripOM/bRSfa GrGW0OCJy4xNDqtzP2WY4SJuQwmPEpv19qSVQMMJlT6QUFhuMTRdP9NBa/LfphUH fpwDmUm7nCiUkADASbqIu0D1TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlRpIbn X1wsv2MSFhoWqbahwh/kMB8GA1UdIwQYMBaAFAcnqsW4z3/mjM1t539si0bVdPqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GNEJENTAwOEUw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9CeWVxeGJqUGYtYU16VzNuZjJ5TFJ0VjAt cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J5ZXF4YmpQZi1hTXpXM25mMnlMUnRWMC1xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GNEJENTAwOEUwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9CeWVxeGJqUGYt YU16VzNuZjJ5TFJ0VjAtcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqcE90FALw9aUs6QskSGsvWwTDfhRtzPrktm2ytVf5ZhxAhTqMzJl4 vhgC/I/whUwWnlTusZx5ZHO7dpuPVAnY1YV48NJeINvxsW+m/YxwslkzA7Oo0JmI 5gvZV0yyjdPMfOxbn/GKFTZFdv5aftvlxMByLT53UF6dCg62K+flbm+FaxPfKLM2 LbjbmJ8/SDaG5GLQGnX9uXLBgOGx7WVZj0hvv2DsTvoYUC7/cq5eXd0XOqIkLtYh ufgHa6Y81slZ8gG7nJr3qbKvLn6JWa8NkCuwfpoA77L3kx0I6QcIMNfF10yBBJ+t YXptWsZyDKrJ1ih2kq6PB1fZG+BPIBul -----END CERTIFICATE-----Generated at Sat Dec 20 00:56:49 2025 by rpki-client