This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft File: Bats53QFyQRH8nu2EgCypDHeStw.mft (raw, json) Hash identifier: HG3bzd58oKfSgwb3lTOdQfiF/dgW4jg8eJKhPP/rVSg= Subject key identifier: 28:4C:58:11:6B:E1:2C:93:FB:EB:2B:11:F7:B2:E3:11:66:64:B6:07 Authority key identifier: 05:AB:6C:E7:74:05:C9:04:47:F2:7B:B6:12:00:B2:A4:31:DE:4A:DC Certificate issuer: /CN=A9131589/serialNumber=05AB6CE77405C90447F27BB61200B2A431DE4ADC Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft Manifest number: 02DE Signing time: Fri 19 Dec 2025 00:32:37 +0000 Manifest this update: Fri 19 Dec 2025 00:32:37 +0000 Manifest next update: Fri 26 Dec 2025 00:32:37 +0000 Files and hashes: 1: Bats53QFyQRH8nu2EgCypDHeStw.crl (hash: pqKSZ9BH+oY1F7YqhJ0UoqWnr1AsMavHpIrPd+xOTmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.crl rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=05AB6CE77405C90447F27BB61200B2A431DE4ADC Validity Not Before: Dec 19 00:32:37 2025 GMT Not After : Dec 26 00:32:37 2025 GMT Subject: CN=69449d25-64d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:0f:81:a0:db:70:d0:4c:27:18:12:45:b7: 41:83:f5:1c:32:96:f5:25:9e:1f:ef:e5:e6:33:ea: 3e:84:d0:f4:a9:38:e2:6a:58:f6:45:7a:6b:30:3b: fc:91:0e:eb:cc:9c:c6:c1:42:22:6e:92:dd:db:8c: 17:54:5d:39:fa:7d:16:04:ef:1f:ff:8a:83:4a:c1: 89:60:e3:8f:90:48:ab:fe:d4:2d:0a:b3:cd:8c:d7: b4:89:9d:bb:50:7e:9b:38:10:71:85:6f:e2:0a:f8: bd:92:e0:0b:d4:0a:f7:4f:0d:74:c1:cf:80:f3:d9: 6f:e9:c1:98:a0:77:b6:74:e7:44:39:71:6c:77:6f: 68:20:e8:60:9c:c4:f7:06:f8:f9:31:58:c0:08:71: 28:6a:15:39:35:5c:aa:2b:eb:2a:94:cd:35:8e:6d: a5:82:81:42:e0:b2:b8:e2:db:ab:aa:9f:58:34:64: 1d:05:3a:62:da:1c:f3:83:88:87:6d:1b:73:30:bb: 14:af:48:e3:9c:5e:11:0d:71:65:1f:52:40:e4:f8: 88:52:c1:cc:9a:79:c3:be:1a:0a:89:2e:fb:29:ae: c9:c7:f2:a7:d5:25:dd:11:2b:5a:04:75:40:ea:dd: 3c:f4:e2:81:b5:a8:80:6d:03:b6:01:ef:76:0b:d7: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4C:58:11:6B:E1:2C:93:FB:EB:2B:11:F7:B2:E3:11:66:64:B6:07 X509v3 Authority Key Identifier: keyid:05:AB:6C:E7:74:05:C9:04:47:F2:7B:B6:12:00:B2:A4:31:DE:4A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:72:96:f6:e4:6f:65:ed:fe:f5:4b:90:f4:c3:45:c1:99:e8: 33:a9:6e:19:13:24:29:8f:45:ed:80:ee:3d:20:99:5e:09:20: 2f:dd:0f:d5:c3:b3:7f:a0:4b:2c:ec:db:f5:32:87:52:ac:0e: f4:b6:0d:4e:7f:ce:be:84:39:46:61:4e:c8:b7:ad:b0:6c:1f: a1:25:54:e7:64:07:96:e2:0c:0a:fa:b9:00:f0:0a:c5:e6:9d: 87:c1:29:dc:f6:35:00:56:80:d9:15:91:98:50:81:97:73:49: 50:51:57:4a:e6:9d:0e:e6:6d:3f:3a:b0:33:36:8f:08:6e:25: b0:17:47:01:6b:61:8f:37:0c:f3:93:e9:05:23:8b:a1:5f:24: c2:b2:a5:7f:37:d8:53:0c:21:fc:f1:d1:be:69:83:5a:07:d1: 5a:8e:b9:bf:e6:56:53:1a:4a:4f:af:f4:55:be:8d:55:b6:a3: 48:8a:36:8f:19:ab:32:af:38:42:e1:c6:d1:c6:ef:84:a5:b4: 0f:95:5a:51:c2:21:4b:99:22:ae:13:5e:0c:f2:9a:32:e5:67: 97:e7:0f:46:61:51:e7:a5:2a:90:b5:63:c1:0a:f4:46:3e:ed: 18:ab:22:56:25:09:e6:4d:e2:7b:b5:29:d9:74:6d:5e:7b:6a: 5c:89:29:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKDA1QUI2Q0U3NzQwNUM5MDQ0N0YyN0JCNjEyMDBCMkE0 MzFERTRBREMwHhcNMjUxMjE5MDAzMjM3WhcNMjUxMjI2MDAzMjM3WjAYMRYwFAYD VQQDDA02OTQ0OWQyNS02NGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn18PgaDbcNBMJxgSRbdBg/UcMpb1JZ4f7+XmM+o+hND0qTjialj2RXprMDv8 kQ7rzJzGwUIibpLd24wXVF05+n0WBO8f/4qDSsGJYOOPkEir/tQtCrPNjNe0iZ27 UH6bOBBxhW/iCvi9kuAL1Ar3Tw10wc+A89lv6cGYoHe2dOdEOXFsd29oIOhgnMT3 Bvj5MVjACHEoahU5NVyqK+sqlM01jm2lgoFC4LK44turqp9YNGQdBTpi2hzzg4iH bRtzMLsUr0jjnF4RDXFlH1JA5PiIUsHMmnnDvhoKiS77Ka7Jx/Kn1SXdEStaBHVA 6t089OKBtaiAbQO2Ae92C9eOEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChMWBFr 4SyT++srEfey4xFmZLYHMB8GA1UdIwQYMBaAFAWrbOd0BckER/J7thIAsqQx3krc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS80MTU4NDYzQTBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi9CYXRzNTNRRnlRUkg4bnUyRWdDeXBESGVT dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhdHM1M1FGeVFSSDhudTJFZ0N5cERIZVN0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS80MTU4NDYzQTBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi9CYXRzNTNRRnlR Ukg4bnUyRWdDeXBESGVTdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGcpb25G9l7f71S5D0w0XBmegzqW4ZEyQpj0XtgO49IJleCSAv3Q/V w7N/oEss7Nv1ModSrA70tg1Of86+hDlGYU7It62wbB+hJVTnZAeW4gwK+rkA8ArF 5p2HwSnc9jUAVoDZFZGYUIGXc0lQUVdK5p0O5m0/OrAzNo8IbiWwF0cBa2GPNwzz k+kFI4uhXyTCsqV/N9hTDCH88dG+aYNaB9Fajrm/5lZTGkpPr/RVvo1VtqNIijaP GasyrzhC4cbRxu+EpbQPlVpRwiFLmSKuE14M8poy5WeX5w9GYVHnpSqQtWPBCvRG Pu0YqyJWJQnmTeJ7tSnZdG1ee2pciSnH -----END CERTIFICATE-----Generated at Fri Dec 19 23:59:11 2025 by rpki-client