This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft File: bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json) Hash identifier: O6j3rOB2IRxuuuaGLacg5x2bdoMoPHKMQTSvAbNv/Sc= Subject key identifier: DA:DC:8B:15:8D:0A:56:80:2C:05:62:F8:93:C2:20:78:7D:52:2A:28 Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Certificate serial: 037F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft Manifest number: 0379 Signing time: Fri 19 Dec 2025 00:06:21 +0000 Manifest this update: Fri 19 Dec 2025 00:06:21 +0000 Manifest next update: Fri 26 Dec 2025 00:06:21 +0000 Files and hashes: 1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: qtxAjw/NPcP0GfhpXowYvrPEkNhvQqGYKIae8qMoniU=) 2: 57883938B4E411F0AEF0381FC4F9AE02.roa (hash: R/0WxMD8Q6vIMFXXnsYNu7dECptwTIT57sR8jvzLLpQ=) 3: 58699F5EB4E411F0AEF0381FC4F9AE02.roa (hash: h2ID8hdDjbhE6AZgWr8n/8IjjT8UJR98H8a09uyii/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 895 (0x37f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Validity Not Before: Dec 19 00:06:21 2025 GMT Not After : Dec 26 00:06:21 2025 GMT Subject: CN=694496fd-d1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1c:5f:16:1d:b0:9d:c0:0f:25:fb:8d:5b:10: ec:8a:25:6d:6b:28:e9:39:84:33:64:2e:bd:20:e6: 10:1e:50:a2:ea:4e:36:32:4f:da:fb:9b:e7:a4:ff: 88:cf:bb:14:2e:b8:91:6b:d1:38:2e:a0:f0:0f:16: 74:5e:25:c3:6a:0b:00:c0:03:ff:ee:29:8a:92:14: 31:96:0c:d2:66:f2:c6:18:a4:0c:c6:56:99:1e:ee: e1:56:ea:d5:15:80:62:90:22:ed:88:b3:17:30:4f: 4f:04:71:a6:61:b7:89:59:fa:b0:0c:a9:62:52:15: 3a:f8:71:6a:41:27:f7:99:8d:5f:d7:e8:c7:df:d7: f3:6f:df:06:dd:88:f5:00:22:d1:8c:ba:c8:f8:85: 08:9d:b8:3b:9e:d9:a1:eb:e8:d4:fe:8e:5f:af:0b: c3:72:99:b5:4b:5e:82:08:5b:71:db:18:06:7a:16: c7:fb:7b:06:df:01:32:7b:33:50:f3:ff:29:9a:15: 69:8d:8b:bc:92:6c:8c:5a:4e:bf:ce:a7:99:a5:f9: 91:87:e8:fd:6b:c1:b5:19:cb:bf:ee:93:98:e8:73: 33:20:51:83:36:d1:9b:e9:54:37:e8:11:97:b2:5c: ee:c9:3f:b5:ec:69:b7:db:ee:b6:37:d2:dd:e4:31: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DC:8B:15:8D:0A:56:80:2C:05:62:F8:93:C2:20:78:7D:52:2A:28 X509v3 Authority Key Identifier: keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:da:45:6a:07:18:f0:d9:2c:00:fc:43:6a:a5:01:c7:59:13: cb:be:4a:61:29:13:c7:ff:83:63:73:82:25:79:8b:e6:b6:7e: a8:c6:5c:42:45:ba:d8:0c:ba:cb:9a:d4:8a:54:c9:df:f2:59: c6:f3:ee:d1:82:24:5b:31:8e:cb:b4:40:0f:c3:a8:dc:ac:4d: 99:f9:1e:f0:4f:f3:04:e4:a8:8d:ff:01:2a:14:a7:cd:ab:ae: 12:7e:cb:8c:1e:1a:08:6f:49:56:c8:ee:5d:ed:66:6d:5f:ca: e5:2b:d2:c7:c1:d4:a0:c4:6a:93:6d:a2:4d:d8:ca:b5:a3:96: 32:0a:58:b6:5b:fc:1e:56:6f:85:20:a0:5f:f9:02:4d:f3:5e: 29:43:33:90:07:f8:1f:c6:f0:fe:e5:63:13:22:24:9f:fa:d0: 6f:5b:cd:29:0e:dc:2b:e3:ad:34:10:8c:17:48:49:71:f1:38: fd:7b:59:e5:06:aa:9f:22:f5:12:d0:d5:75:0c:f2:aa:04:02: bb:90:93:32:55:b0:a1:2c:ea:ea:e2:f3:0f:87:95:5d:54:b2: 52:3a:38:5a:a9:f3:b6:0a:3c:42:66:5a:22:3d:08:a9:21:53: 7a:da:51:1c:59:b6:f2:77:fe:d2:c6:48:5e:67:3d:6c:b1:4e: a5:a2:be:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYyNEMxMTAvBgNVBAUTKDZEODBGRUI1MTc4MEY3RjEwNkU2MTkwREMzRTJFRTdD RTc0RUVGQkIwHhcNMjUxMjE5MDAwNjIxWhcNMjUxMjI2MDAwNjIxWjAYMRYwFAYD VQQDDA02OTQ0OTZmZC1kMWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkxxfFh2wncAPJfuNWxDsiiVtayjpOYQzZC69IOYQHlCi6k42Mk/a+5vnpP+I z7sULriRa9E4LqDwDxZ0XiXDagsAwAP/7imKkhQxlgzSZvLGGKQMxlaZHu7hVurV FYBikCLtiLMXME9PBHGmYbeJWfqwDKliUhU6+HFqQSf3mY1f1+jH39fzb98G3Yj1 ACLRjLrI+IUInbg7ntmh6+jU/o5frwvDcpm1S16CCFtx2xgGehbH+3sG3wEyezNQ 8/8pmhVpjYu8kmyMWk6/zqeZpfmRh+j9a8G1Gcu/7pOY6HMzIFGDNtGb6VQ36BGX slzuyT+17Gm32+62N9Ld5DErZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrcixWN ClaALAVi+JPCIHh9UiooMB8GA1UdIwQYMBaAFG2A/rUXgPfxBuYZDcPi7nznTu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjI0Qy9CQjUwRDlEMEQw NkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlfRUc1aGtOdy1MdWZPZE83 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JZRC10UmVBOV9FRzVoa053LUx1Zk9kTzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjI0Qy9CQjUwRDlEMEQwNkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlf RUc1aGtOdy1MdWZPZE83N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO2kVqBxjw2SwA/ENqpQHHWRPLvkphKRPH/4Njc4IleYvmtn6oxlxC RbrYDLrLmtSKVMnf8lnG8+7RgiRbMY7LtEAPw6jcrE2Z+R7wT/ME5KiN/wEqFKfN q64SfsuMHhoIb0lWyO5d7WZtX8rlK9LHwdSgxGqTbaJN2Mq1o5YyCli2W/weVm+F IKBf+QJN814pQzOQB/gfxvD+5WMTIiSf+tBvW80pDtwr4600EIwXSElx8Tj9e1nl BqqfIvUS0NV1DPKqBAK7kJMyVbChLOrq4vMPh5VdVLJSOjhaqfO2CjxCZloiPQip IVN62lEcWbbyd/7SxkheZz1ssU6lor44 -----END CERTIFICATE-----Generated at Fri Dec 19 23:50:44 2025 by rpki-client