This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft File: BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft (raw, json) Hash identifier: kecqycAdbGOEyK8UVGxrHRu2FM+pChtL0HPILtXWIKE= Subject key identifier: D0:CC:24:E4:2F:E5:D2:4C:68:1D:FC:74:0E:4D:9E:9E:62:00:21:0B Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93 Certificate issuer: /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft Manifest number: DE Signing time: Sun 21 Dec 2025 04:51:54 +0000 Manifest this update: Sun 21 Dec 2025 04:51:53 +0000 Manifest next update: Sun 28 Dec 2025 04:51:53 +0000 Files and hashes: 1: BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl (hash: Io53lEvsGHRviqsCEv/TzKwMVMZpL+zvi1l2T3qgqrU=) 2: 408104A8C3E011F0A31AE55EC4F9AE02.roa (hash: mUltdiFtSdwvKJ1/UtAog12GOcFsnhuiRfLmih/4Qqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293 Validity Not Before: Dec 21 04:51:53 2025 GMT Not After : Dec 28 04:51:53 2025 GMT Subject: CN=69477cea-2db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5e:d0:07:57:b5:ad:b2:39:41:c3:b5:1f:0f: 4d:65:79:b1:a7:74:76:a5:7c:2e:4f:e8:26:fe:9a: 2d:2a:35:3c:46:78:ee:00:cf:9f:0f:6a:cd:25:b2: f1:78:92:dd:25:48:c9:62:0b:9f:ab:b8:3e:38:52: 75:3f:c5:2c:fd:7b:9d:fe:3f:f1:f5:fb:cd:51:8f: 91:d5:d5:39:23:05:19:bb:66:30:fd:86:94:3b:0d: b7:58:40:3b:d8:a5:f0:cf:51:27:0d:c6:ff:46:fc: 3c:d9:dc:32:6b:3c:4a:fd:18:67:95:18:d6:ab:eb: cc:10:1b:7e:74:9a:d9:32:08:de:7d:c1:b9:4d:71: 1b:4c:2b:a2:02:2b:2d:d2:a8:a0:c2:e3:37:a2:98: 5e:e3:11:4f:e8:6c:3b:3d:9e:e5:e9:9d:a2:82:be: 8d:b0:3f:d3:34:81:12:9e:c6:fc:fa:9e:46:f3:45: 11:e9:6e:5d:40:a4:ac:cd:15:92:aa:ed:9b:ca:c9: 57:4a:e8:48:ec:90:30:e7:98:e2:35:c8:a2:81:6d: ee:b8:30:76:cc:3a:2f:d2:0d:c3:5f:5c:d8:a1:98: a0:dc:41:10:99:f6:82:f5:71:ea:fb:6a:da:37:9e: 96:a9:db:95:7e:ba:5c:95:65:df:99:0a:bc:99:68: ad:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CC:24:E4:2F:E5:D2:4C:68:1D:FC:74:0E:4D:9E:9E:62:00:21:0B X509v3 Authority Key Identifier: keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:2b:f9:1c:a0:a3:f2:af:5a:b1:24:4d:6a:d3:be:8a:e9:1b: 59:da:da:9b:5f:11:d7:12:fc:75:46:7f:ea:d3:54:bb:18:53: 95:44:7e:51:53:e9:f8:a5:4a:48:5e:d9:15:53:57:95:bd:67: 82:ba:69:66:88:59:be:28:33:f2:78:2d:24:24:b8:de:7f:ef: 00:24:f5:ca:15:49:9e:03:92:80:1d:93:37:9f:eb:df:c0:77: 25:50:21:c0:26:00:9b:01:20:3b:a9:30:af:98:26:8d:2c:7f: 55:2e:d3:a4:28:cc:a2:36:dd:96:f4:04:44:2a:ae:4b:ff:ca: a0:d9:f2:df:36:bd:d0:0c:e8:9f:df:7c:0f:e3:fc:be:d8:e9: 90:7c:51:ee:2d:19:39:e9:40:19:e3:c6:7f:d0:0a:b9:5f:eb: 2e:0a:da:7c:e3:75:58:d1:c6:bc:50:f6:62:8b:19:2f:76:c7: fb:f4:49:81:9a:e2:62:06:e8:57:98:e2:f1:d6:2b:10:e1:79: 60:fe:78:ab:97:47:9f:09:1d:14:7e:ec:a8:8d:18:53:22:25: 2d:3f:75:17:62:0e:34:24:3d:bf:e1:57:c9:90:04:87:a5:9a: 17:02:69:4c:b7:d6:6f:2e:ed:71:a9:1a:5c:85:73:dd:d4:0d: 82:ed:82:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKDA0Qzc5QTRERDI0RkZBMDNGQThGOTI5Njc2NkY4MkEw Mzg1Q0UyOTMwHhcNMjUxMjIxMDQ1MTUzWhcNMjUxMjI4MDQ1MTUzWjAYMRYwFAYD VQQDDA02OTQ3N2NlYS0yZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArF7QB1e1rbI5QcO1Hw9NZXmxp3R2pXwuT+gm/potKjU8RnjuAM+fD2rNJbLx eJLdJUjJYgufq7g+OFJ1P8Us/Xud/j/x9fvNUY+R1dU5IwUZu2Yw/YaUOw23WEA7 2KXwz1EnDcb/Rvw82dwyazxK/RhnlRjWq+vMEBt+dJrZMgjefcG5TXEbTCuiAist 0qigwuM3ophe4xFP6Gw7PZ7l6Z2igr6NsD/TNIESnsb8+p5G80UR6W5dQKSszRWS qu2byslXSuhI7JAw55jiNciigW3uuDB2zDov0g3DX1zYoZig3EEQmfaC9XHq+2ra N56WqduVfrpclWXfmQq8mWitUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDMJOQv 5dJMaB38dA5Nnp5iACELMB8GA1UdIwQYMBaAFATHmk3ST/oD+o+SlnZvgqA4XOKT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS83QzZFREE4Q0Ex Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi9CTWVhVGRKUC1nUDZqNUtXZG0tQ29EaGM0 cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JNZWFUZEpQLWdQNmo1S1dkbS1Db0RoYzRwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS83QzZFREE4Q0ExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi9CTWVhVGRKUC1n UDZqNUtXZG0tQ29EaGM0cE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjK/kcoKPyr1qxJE1q076K6RtZ2tqbXxHXEvx1Rn/q01S7GFOVRH5R U+n4pUpIXtkVU1eVvWeCumlmiFm+KDPyeC0kJLjef+8AJPXKFUmeA5KAHZM3n+vf wHclUCHAJgCbASA7qTCvmCaNLH9VLtOkKMyiNt2W9AREKq5L/8qg2fLfNr3QDOif 33wP4/y+2OmQfFHuLRk56UAZ48Z/0Aq5X+suCtp843VY0ca8UPZiixkvdsf79EmB muJiBuhXmOLx1isQ4Xlg/nirl0efCR0UfuyojRhTIiUtP3UXYg40JD2/4VfJkASH pZoXAmlMt9ZvLu1xqRpchXPd1A2C7YKm -----END CERTIFICATE-----Generated at Sun Dec 21 12:01:24 2025 by rpki-client