This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft File: bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json) Hash identifier: QNPnGPmpiT1yk2PLAuc4/oiUBODJUJGlBlk1RYBULbs= Subject key identifier: 78:89:EF:0E:E0:51:44:A4:1C:B2:03:A5:44:33:31:2C:33:52:B1:A7 Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft Manifest number: F3 Signing time: Wed 31 Dec 2025 04:31:03 +0000 Manifest this update: Wed 31 Dec 2025 04:31:02 +0000 Manifest next update: Wed 07 Jan 2026 04:31:02 +0000 Files and hashes: 1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: cdPXb6dxZIaFX2TId5kSQjTtHtLhJCLxpuVo2XFKHds=) 2: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: mbFfYSX+BdjEnhF4lUo27j9bjQ0kInCW9ZTNXOQrp2Q=) 3: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: bYiGlJTSCLhia07K1lJYXHC5JgOu+61a9mLQrwhq6HI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 04:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Validity Not Before: Dec 31 04:31:02 2025 GMT Not After : Jan 7 04:31:02 2026 GMT Subject: CN=6954a707-14fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:38:44:dd:de:c0:3a:0f:ab:0a:42:ed:b0:a6: c7:e2:71:6a:ef:5f:bd:31:a8:62:bc:d9:40:3e:d4: 77:d5:5c:08:5f:b8:66:4e:ce:73:7e:06:0c:b6:5d: 08:3c:ff:64:43:56:de:27:f2:14:4d:0a:e3:54:ef: 2a:54:40:1b:8b:65:df:77:da:ec:60:62:b0:30:78: f4:36:ac:ac:49:9a:48:42:34:0e:d9:24:a1:35:d1: d6:e6:0d:55:90:14:ec:04:01:5b:85:da:d5:87:57: 62:9e:6c:ed:76:88:1a:fd:49:39:a3:19:aa:7f:10: 30:b6:5e:74:c2:14:fd:8f:c7:a7:41:0a:5a:71:aa: 56:44:3a:fc:41:3a:19:d9:5b:6c:4b:44:46:88:20: 97:2e:f4:5b:7e:e7:33:d0:92:1d:89:26:03:49:8e: 22:52:d3:62:f0:91:27:d2:f4:c6:2d:65:69:91:ed: 0b:23:38:59:9e:ef:ad:fc:d7:99:2e:df:4a:f0:0e: cc:42:66:03:eb:f0:fc:1d:ad:5f:ad:b9:6b:9b:f2: 73:80:33:a0:6c:95:2d:73:f9:67:af:0d:83:79:57: 1e:f4:78:85:24:dc:8c:b4:e9:85:01:ec:6b:8c:38: 2a:02:3f:a6:03:f8:ae:2f:ce:41:ef:04:97:b6:d5: 52:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:89:EF:0E:E0:51:44:A4:1C:B2:03:A5:44:33:31:2C:33:52:B1:A7 X509v3 Authority Key Identifier: keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b9:19:ff:39:0f:1c:98:9f:c4:23:17:ea:4e:54:af:a5:7c: 43:35:ef:da:8b:8a:1b:4b:bd:da:ef:17:5d:6e:6a:8f:d6:f0: e6:a2:2b:2a:e8:8d:b8:d4:2d:64:95:b9:e5:2e:4f:08:4c:67: 3b:1c:aa:f9:27:b3:84:88:b5:a0:33:94:99:72:5f:f8:27:fc: 7f:4d:81:79:4e:87:ef:e6:6f:74:ae:c3:93:a9:b9:3f:97:ee: 54:27:b9:29:11:82:d9:c9:f6:06:53:19:a8:7c:e2:3a:b0:5a: c8:41:8c:c3:2a:11:84:84:bb:73:f7:6b:65:2f:41:14:93:fa: 6d:19:0e:b9:0c:a4:e7:43:ac:25:eb:68:14:bf:ab:4f:b1:1e: 13:c2:ae:80:25:19:58:72:63:76:83:a7:bd:1d:c0:4d:71:3a: 71:ba:f2:a5:e4:24:5b:3c:06:1e:65:f5:35:fb:dd:c9:32:b6: 53:52:53:bb:03:65:bb:75:75:d7:25:1a:7f:cc:19:f8:0a:9a: a4:e3:52:05:f3:5e:65:b0:70:5a:c1:1d:68:90:81:f0:c7:65: a0:d9:18:44:47:1a:1b:7b:a0:a3:98:82:f0:0a:df:4b:09:f6: e9:cd:c4:7d:51:f3:3e:b2:a9:c5:9e:9f:33:06:8b:6e:e2:55: 0d:e9:09:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDZDMkM3QzE0Mjg5RTZCQjVCNzI3NUIxQUE2QkZERkEw MjI3QjkwODYwHhcNMjUxMjMxMDQzMTAyWhcNMjYwMTA3MDQzMTAyWjAYMRYwFAYD VQQDDA02OTU0YTcwNy0xNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7jhE3d7AOg+rCkLtsKbH4nFq71+9MahivNlAPtR31VwIX7hmTs5zfgYMtl0I PP9kQ1beJ/IUTQrjVO8qVEAbi2Xfd9rsYGKwMHj0NqysSZpIQjQO2SShNdHW5g1V kBTsBAFbhdrVh1dinmztdoga/Uk5oxmqfxAwtl50whT9j8enQQpacapWRDr8QToZ 2VtsS0RGiCCXLvRbfucz0JIdiSYDSY4iUtNi8JEn0vTGLWVpke0LIzhZnu+t/NeZ Lt9K8A7MQmYD6/D8Ha1frblrm/JzgDOgbJUtc/lnrw2DeVce9HiFJNyMtOmFAexr jDgqAj+mA/iuL85B7wSXttVSyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiJ7w7g UUSkHLIDpUQzMSwzUrGnMB8GA1UdIwQYMBaAFGwsfBQonmu1tydbGqa/36Aie5CG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS9EQUY4MUM0NDg2 RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3VzNKMXNhcHJfZm9DSjdr SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS9EQUY4MUM0NDg2RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3 VzNKMXNhcHJfZm9DSjdrSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8uRn/OQ8cmJ/EIxfqTlSvpXxDNe/ai4obS73a7xddbmqP1vDmoisq 6I241C1klbnlLk8ITGc7HKr5J7OEiLWgM5SZcl/4J/x/TYF5Tofv5m90rsOTqbk/ l+5UJ7kpEYLZyfYGUxmofOI6sFrIQYzDKhGEhLtz92tlL0EUk/ptGQ65DKTnQ6wl 62gUv6tPsR4Twq6AJRlYcmN2g6e9HcBNcTpxuvKl5CRbPAYeZfU1+93JMrZTUlO7 A2W7dXXXJRp/zBn4Cpqk41IF815lsHBawR1okIHwx2Wg2RhERxobe6CjmILwCt9L CfbpzcR9UfM+sqnFnp8zBotu4lUN6Qmf -----END CERTIFICATE-----Generated at Wed Dec 31 19:34:56 2025 by rpki-client