This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft File: ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json) Hash identifier: kIzcNL6Q4lEfFbPi+LmNHY+W8DyLzAWtuaIzL1drznw= Subject key identifier: 73:A4:85:70:4A:58:50:9B:78:1E:EE:50:5E:65:ED:21:B8:FC:2F:4F Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17 Certificate issuer: /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517 Certificate serial: 095D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft Manifest number: 0934 Signing time: Fri 19 Dec 2025 01:16:44 +0000 Manifest this update: Fri 19 Dec 2025 01:16:44 +0000 Manifest next update: Fri 26 Dec 2025 01:16:44 +0000 Files and hashes: 1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: tSSIBYXJnvGHma5nLxvFvwMlWIdQUXAQlB6OzEwojlo=) 2: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: LK9G1J83bi3BUz0/qqWD4cotPJRvK4iVMh7A+P/u8DA=) 3: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: jqFz3U7Y3jCz0qKu2eSK+/FBQRd4npoRB1g4Atfczgs=) 4: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: oM6Sf/6xTPeOvH01knFGEFzZ6mpJcGKCSF9Jna1G/cw=) 5: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: rHm1B/MSNJeVi9UgfBbJLqo7QtD6an1CT3aEkcYwbOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2397 (0x95d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517 Validity Not Before: Dec 19 01:16:44 2025 GMT Not After : Dec 26 01:16:44 2025 GMT Subject: CN=6944a77c-f3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:eb:3b:d8:ad:2b:62:14:44:2a:7d:da:0e:43: f1:69:6f:b8:a1:76:96:44:b2:fc:19:43:1e:4d:1d: 22:ee:a4:1a:1a:53:97:ee:be:5a:d6:e5:43:0d:60: 6e:90:42:23:47:78:af:7f:99:60:30:f2:3f:bd:f7: 2d:d4:0e:a7:ee:33:13:6a:b8:1f:03:f5:52:82:b0: 6a:65:e0:e0:ff:ea:77:67:fd:bd:aa:5c:83:12:fb: b4:65:74:df:6c:a1:40:e7:6e:4a:36:0d:78:1d:21: db:46:6b:a1:ae:a2:76:a7:7e:53:90:b5:6a:fe:77: 68:b3:d8:19:a1:00:69:ea:74:b3:34:e8:b3:85:2a: f9:6b:e6:eb:9a:84:54:45:4f:30:79:4c:16:e8:05: c8:da:c9:05:da:3f:87:f2:3e:31:44:eb:05:c3:06: a2:a1:c2:86:86:19:f3:cf:89:1c:43:ec:20:40:4f: 50:07:cb:37:41:14:02:b5:33:7d:ee:6d:db:91:06: 57:57:1f:c7:bb:da:be:7d:3b:cf:9d:cf:f8:d9:70: 54:6a:61:b1:af:c9:f2:9d:94:c1:78:ed:2b:15:1e: a9:ca:5f:15:eb:d9:62:1c:e8:ff:de:91:aa:62:51: de:bf:bb:ff:ed:fe:9c:1d:3c:fb:55:52:d4:8c:a0: 00:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A4:85:70:4A:58:50:9B:78:1E:EE:50:5E:65:ED:21:B8:FC:2F:4F X509v3 Authority Key Identifier: keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:3a:cf:ed:60:dc:3c:25:9b:09:86:50:d9:03:dd:30:b2:27: 0d:84:d4:11:e2:ed:84:90:a6:ef:22:47:ff:35:8f:b4:ca:00: 8c:03:8b:3c:67:2f:8b:b3:ee:d2:79:31:8f:75:eb:b2:41:6b: 1a:13:5c:bb:b7:9c:53:01:d8:c2:b6:c0:88:3a:46:41:0c:ea: d9:92:b8:a2:44:71:a4:c5:9a:27:2d:90:fe:36:f0:61:3a:23: 23:58:7e:7a:a6:cf:a4:02:b0:e8:56:41:cc:f2:de:b2:d8:7a: c7:8a:f2:bc:c4:03:72:6c:27:42:70:00:01:47:21:96:12:43: ab:33:22:5f:7c:49:b7:a9:53:71:9d:2b:20:52:d6:3f:30:7a: cc:8c:cf:f4:56:94:7d:83:43:e3:51:70:91:d6:92:a9:58:ed: db:34:78:07:2c:e7:85:92:f5:73:09:d0:47:1c:25:b3:2f:8a: 1e:ca:c8:06:2a:7a:7a:87:16:ae:21:f0:b6:a7:ef:c8:ac:24: 66:fe:e6:10:80:81:1a:a3:e6:bd:53:09:be:90:2f:17:3b:7e: 34:6e:90:59:96:f4:5b:cb:3a:2d:c5:86:94:a2:63:60:01:a3: 5d:93:a8:d3:ef:00:04:2e:10:14:ce:ea:2d:25:dc:6a:0c:7c: fe:48:0d:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDQjExMTAvBgNVBAUTKDA3MkNERjY1MUIzMTJDQUZCREIwNDlBMzM1NjlGRUE2 RUY2Qzk1MTcwHhcNMjUxMjE5MDExNjQ0WhcNMjUxMjI2MDExNjQ0WjAYMRYwFAYD VQQDDA02OTQ0YTc3Yy1mM2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyus72K0rYhREKn3aDkPxaW+4oXaWRLL8GUMeTR0i7qQaGlOX7r5a1uVDDWBu kEIjR3ivf5lgMPI/vfct1A6n7jMTargfA/VSgrBqZeDg/+p3Z/29qlyDEvu0ZXTf bKFA525KNg14HSHbRmuhrqJ2p35TkLVq/ndos9gZoQBp6nSzNOizhSr5a+brmoRU RU8weUwW6AXI2skF2j+H8j4xROsFwwaiocKGhhnzz4kcQ+wgQE9QB8s3QRQCtTN9 7m3bkQZXVx/Hu9q+fTvPnc/42XBUamGxr8nynZTBeO0rFR6pyl8V69liHOj/3pGq YlHev7v/7f6cHTz7VVLUjKAADQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOkhXBK WFCbeB7uUF5l7SG4/C9PMB8GA1UdIwQYMBaAFAcs32UbMSyvvbBJozVp/qbvbJUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNCMS9EMDBERDQ5OEJD MDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExLLTlzRW1qTlduLXB1OXNs UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J5emZaUnN4TEstOXNFbWpOV24tcHU5c2xSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkNCMS9EMDBERDQ5OEJDMDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExL LTlzRW1qTlduLXB1OXNsUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjOs/tYNw8JZsJhlDZA90wsicNhNQR4u2EkKbvIkf/NY+0ygCMA4s8 Zy+Ls+7SeTGPdeuyQWsaE1y7t5xTAdjCtsCIOkZBDOrZkriiRHGkxZonLZD+NvBh OiMjWH56ps+kArDoVkHM8t6y2HrHivK8xANybCdCcAABRyGWEkOrMyJffEm3qVNx nSsgUtY/MHrMjM/0VpR9g0PjUXCR1pKpWO3bNHgHLOeFkvVzCdBHHCWzL4oeysgG Knp6hxauIfC2p+/IrCRm/uYQgIEao+a9Uwm+kC8XO340bpBZlvRbyzotxYaUomNg AaNdk6jT7wAELhAUzuotJdxqDHz+SA0E -----END CERTIFICATE-----Generated at Sat Dec 20 07:41:25 2025 by rpki-client