This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft File: bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft (raw, json) Hash identifier: PmrU6gHa4siVC1B+E5xugEjzqOomZV8qCywcNPlZWhM= Subject key identifier: 26:A3:29:6E:CE:55:05:51:3A:8D:03:93:36:92:97:6C:87:4E:BD:71 Authority key identifier: 6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2 Certificate issuer: /CN=A9167C9C/serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2 Certificate serial: 05E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft Manifest number: 05E2 Signing time: Tue 16 Dec 2025 22:25:24 +0000 Manifest this update: Tue 16 Dec 2025 22:25:23 +0000 Manifest next update: Tue 23 Dec 2025 22:25:23 +0000 Files and hashes: 1: bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl (hash: k3Q1eZ+q4odr6zHDksCKhbWrHXUN9hV3Tr0ZdZNWyMQ=) 2: BF811486DC1E11EBB2C72F52C4F9AE02.roa (hash: tkST3vaKxeiP20POIYCSnEB6Q6omsC/qv/TzKr9coAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 22:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1511 (0x5e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167C9C, serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2 Validity Not Before: Dec 16 22:25:23 2025 GMT Not After : Dec 23 22:25:23 2025 GMT Subject: CN=6941dc54-7cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ee:be:dc:fe:2d:eb:4c:c7:e6:4f:35:8c:94: 72:cd:e8:30:f8:1c:96:e2:72:8b:18:db:bd:73:9b: 61:a8:dc:1a:f5:95:68:64:8c:9a:61:42:0a:56:9b: d4:ae:4d:4a:0d:26:9c:5d:85:4c:03:b5:fb:a3:1f: 13:ca:da:94:51:33:8b:26:9f:94:77:49:4c:ae:e4: a6:f5:c2:63:dc:f9:83:f8:53:42:a9:20:e5:32:2f: c5:6d:8b:e5:f2:dd:94:bd:11:ba:3b:a0:1c:d4:39: 7b:a9:9e:4a:33:ff:56:33:a7:33:2f:31:17:84:59: 99:62:7f:5d:ec:4a:a6:af:42:9a:9c:c0:83:31:97: 52:d5:cb:c6:12:85:46:f9:bf:bd:10:9b:f0:48:b2: ee:df:8f:9f:d6:b7:0a:6e:93:13:83:13:2d:26:08: c7:87:ed:f1:09:9e:40:a1:f4:3d:22:a9:44:4c:7c: 91:be:d5:c0:71:f2:24:f2:50:46:11:86:7d:50:c1: 5c:cb:33:02:30:73:2a:fe:e1:14:44:7a:d6:66:ad: 90:e6:0d:0a:32:35:65:a6:bd:56:a2:d6:3a:57:7e: 80:8f:71:29:1f:01:dc:1e:78:3c:07:17:3c:0d:92: be:27:ac:da:d5:21:66:b4:d4:75:0a:c0:80:d5:43: b5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A3:29:6E:CE:55:05:51:3A:8D:03:93:36:92:97:6C:87:4E:BD:71 X509v3 Authority Key Identifier: keyid:6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:f1:f1:61:e0:d5:f6:b2:5a:a2:6c:cf:bd:99:f4:60:e9:30: d8:5f:d8:d8:ab:5e:fb:5f:03:7c:26:d2:9d:8c:57:8d:a5:d5: 4d:b6:10:9d:d4:07:bf:67:c6:b1:66:22:c5:b4:de:c2:c4:b9: 44:0a:e8:58:a2:4a:96:a8:8d:4e:de:d3:03:b4:86:13:ac:e4: e5:60:ea:af:91:b5:b3:32:f4:3a:dc:42:03:e9:a7:52:ef:fa: d9:8b:ec:66:08:bc:7d:cb:c4:28:a4:c6:71:4e:b5:f8:aa:53: e4:49:a4:f2:a7:62:07:56:9b:43:03:00:93:8d:99:17:2e:ef: 11:e0:01:d4:2b:05:bd:e0:26:4b:d6:9d:7d:53:b9:f7:ac:8f: 92:fe:27:47:7f:6a:50:d3:e6:00:b2:5a:b8:bd:e7:b2:ce:cd: 07:d0:0a:55:34:e9:15:7a:93:db:38:52:3e:23:7c:8a:ce:b0: 55:ae:db:90:5b:2a:ef:4b:ef:40:ea:be:a6:3d:74:2d:f6:69: 8c:28:ac:35:3c:f6:37:62:ef:1f:65:da:4f:d3:c8:25:16:9c: 75:0b:e6:fc:b4:ee:f2:52:81:4a:df:4d:27:36:9c:0f:e2:29: a1:39:f9:8f:50:67:6f:9e:90:b1:ae:5d:d0:92:71:d1:bf:f1: 20:05:ea:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDOUMxMTAvBgNVBAUTKDZEREVDNkExNzEyOTIzMEVFRUZFNTA4QUYxMTk2MkZC NEMwRjZGQzIwHhcNMjUxMjE2MjIyNTIzWhcNMjUxMjIzMjIyNTIzWjAYMRYwFAYD VQQDDA02OTQxZGM1NC03Y2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApe6+3P4t60zH5k81jJRyzegw+ByW4nKLGNu9c5thqNwa9ZVoZIyaYUIKVpvU rk1KDSacXYVMA7X7ox8TytqUUTOLJp+Ud0lMruSm9cJj3PmD+FNCqSDlMi/FbYvl 8t2UvRG6O6Ac1Dl7qZ5KM/9WM6czLzEXhFmZYn9d7Eqmr0KanMCDMZdS1cvGEoVG +b+9EJvwSLLu34+f1rcKbpMTgxMtJgjHh+3xCZ5AofQ9IqlETHyRvtXAcfIk8lBG EYZ9UMFcyzMCMHMq/uEURHrWZq2Q5g0KMjVlpr1WotY6V36Aj3EpHwHcHng8Bxc8 DZK+J6za1SFmtNR1CsCA1UO1zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCajKW7O VQVROo0DkzaSl2yHTr1xMB8GA1UdIwQYMBaAFG3exqFxKSMO7v5QivEZYvtMD2/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0M5Qy85QjZDNDI4MERD MUIxMUVCQTYzNTUwNEVDNEY5QUUwMi9iZDdHb1hFcEl3N3VfbENLOFJsaS0wd1Bi OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JkN0dvWEVwSXc3dV9sQ0s4UmxpLTB3UGI4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0M5Qy85QjZDNDI4MERDMUIxMUVCQTYzNTUwNEVDNEY5QUUwMi9iZDdHb1hFcEl3 N3VfbENLOFJsaS0wd1BiOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDg8fFh4NX2slqibM+9mfRg6TDYX9jYq177XwN8JtKdjFeNpdVNthCd 1Ae/Z8axZiLFtN7CxLlECuhYokqWqI1O3tMDtIYTrOTlYOqvkbWzMvQ63EID6adS 7/rZi+xmCLx9y8QopMZxTrX4qlPkSaTyp2IHVptDAwCTjZkXLu8R4AHUKwW94CZL 1p19U7n3rI+S/idHf2pQ0+YAslq4veeyzs0H0ApVNOkVepPbOFI+I3yKzrBVrtuQ WyrvS+9A6r6mPXQt9mmMKKw1PPY3Yu8fZdpP08glFpx1C+b8tO7yUoFK300nNpwP 4imhOfmPUGdvnpCxrl3QknHRv/EgBerR -----END CERTIFICATE-----Generated at Wed Dec 17 22:00:42 2025 by rpki-client