This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft File: BXOVtIePsaZ_y61YJhe3uq8sMf8.mft (raw, json) Hash identifier: L8c4DecGI4yBx3Dnw1kVeN7xBZlWYRkwty6zWF4xrgM= Subject key identifier: D0:26:8D:D3:1F:68:57:B4:AA:2E:97:ED:AB:1D:0B:8B:64:0F:77:16 Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft Manifest number: 0124 Signing time: Fri 19 Dec 2025 04:25:34 +0000 Manifest this update: Fri 19 Dec 2025 04:25:33 +0000 Manifest next update: Fri 26 Dec 2025 04:25:33 +0000 Files and hashes: 1: BXOVtIePsaZ_y61YJhe3uq8sMf8.crl (hash: /AS8/6OogV6f7m6hPnLLMH4W7+02Au4JApZsTsX+WuE=) 2: 7EFD7D08A10211EFBF75467FC4F9AE02.roa (hash: vsSxWPv3xEP3XML1AoQ7xUsTBNpQ7V7GqfC2jYKkI8o=) 3: E0CDA376596E11F0B19AF24BC4F9AE02.roa (hash: FJSeI7xu3Suas48K0kKSfoAbigbE/yhUfYxCE1a9B6A=) 4: B0D3DA64107B11F097717C77C4F9AE02.roa (hash: 1d9wCsU9aWCRZr3QZQY+xUb1UN+Bs6Q6ncyy7XvW10Q=) 5: FA414880107B11F09A6AF277C4F9AE02.roa (hash: Wy+W7yleCCjdnmkiTTzTQjidmhHRdCgVI8wgnocThQA=) 6: A8F83B2E202911F08EABDC87C4F9AE02.roa (hash: CPH/9LGGv2Qb1QUYpywLXh/H9jmUzaUp17YNcG9enxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Validity Not Before: Dec 19 04:25:33 2025 GMT Not After : Dec 26 04:25:33 2025 GMT Subject: CN=6944d3be-d3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:de:39:80:5e:04:64:bd:b3:dd:ae:0c:af: 27:7f:b5:76:2e:45:b5:81:d2:14:85:4b:08:e6:9b: 6f:66:d4:7e:bb:3b:90:58:d3:1d:cb:35:f7:bf:36: d7:33:9d:4f:8e:82:25:fe:08:29:ef:a5:3d:e1:0a: 7a:7f:7f:0a:e1:40:4a:cc:68:e8:b3:81:61:50:9b: cf:25:d5:de:51:94:35:61:5a:b1:1a:06:c4:a6:e2: 09:8d:da:a8:e1:99:05:c8:b1:2c:f7:bc:3f:91:f2: e7:bc:e1:6e:39:3c:2c:58:9b:03:5b:07:6e:c6:c7: e4:f5:13:1c:8a:f4:8d:63:1e:98:70:54:9a:b0:c5: 52:f3:83:46:85:1f:a7:85:af:30:f6:fb:5f:28:79: eb:7c:40:95:05:7f:04:5c:13:57:01:20:27:95:08: 0f:f5:a6:da:b6:18:ac:4a:e4:67:ef:ef:0c:eb:76: d4:bd:6f:33:d9:28:9b:2d:8e:35:b0:46:07:89:b6: 9c:eb:2d:47:fa:93:cd:53:94:41:e3:94:e5:2a:c0: c2:83:90:c8:7b:30:92:4a:21:65:b3:bd:e8:dd:2e: 8b:5b:c8:c9:df:7e:91:09:97:b2:d0:11:6a:b3:57: cb:d4:40:99:09:85:5b:e5:b1:5d:d5:4e:a0:6c:0c: ec:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:26:8D:D3:1F:68:57:B4:AA:2E:97:ED:AB:1D:0B:8B:64:0F:77:16 X509v3 Authority Key Identifier: keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c5:f0:f8:d0:14:08:65:f9:de:29:7a:4b:26:60:08:b7:c0: 98:cf:69:a5:e0:b9:63:bb:7a:43:2e:7d:0d:2a:f9:1e:13:6c: 57:3d:75:3e:da:a3:10:b2:1b:26:fd:5d:b6:fc:0d:ef:b5:0b: 9d:c5:8a:cf:ff:16:cd:4f:ab:06:38:8c:e5:d7:5a:96:86:ab: 87:cd:3c:5a:25:04:79:a5:23:44:82:64:f3:fa:a5:49:1d:b5: 69:54:17:7f:15:c3:95:fb:7b:53:93:7f:1d:ba:9d:f0:8b:ff: 23:62:15:ed:ad:cb:fa:3e:84:e1:16:26:e4:d9:d7:08:a5:12: 71:23:40:7f:92:c3:b2:3e:18:11:67:42:82:64:b5:42:c1:33: a2:b4:36:ee:5e:b8:bc:03:79:dc:fa:7f:3e:f0:9d:93:f3:02: ab:4b:76:cf:20:7c:d3:76:6a:5d:96:e8:75:96:86:36:1e:46: ae:f6:8b:ff:f3:bc:84:fe:44:c9:67:96:7d:71:70:ea:20:79: 16:2c:0c:00:b8:f0:9b:6c:42:10:65:2d:78:5e:7a:ea:22:bb: 56:c5:cd:69:bc:2a:aa:07:60:92:db:65:18:0f:02:7e:66:81: 61:c7:4d:8a:82:14:5d:02:f7:ab:81:29:ee:10:d0:72:13:fd: 6d:8a:4a:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDA1NzM5NUI0ODc4RkIxQTY3RkNCQUQ1ODI2MTdCN0JB QUYyQzMxRkYwHhcNMjUxMjE5MDQyNTMzWhcNMjUxMjI2MDQyNTMzWjAYMRYwFAYD VQQDDA02OTQ0ZDNiZS1kM2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyDeOYBeBGS9s92uDK8nf7V2LkW1gdIUhUsI5ptvZtR+uzuQWNMdyzX3vzbX M51PjoIl/ggp76U94Qp6f38K4UBKzGjos4FhUJvPJdXeUZQ1YVqxGgbEpuIJjdqo 4ZkFyLEs97w/kfLnvOFuOTwsWJsDWwduxsfk9RMcivSNYx6YcFSasMVS84NGhR+n ha8w9vtfKHnrfECVBX8EXBNXASAnlQgP9abathisSuRn7+8M63bUvW8z2SibLY41 sEYHibac6y1H+pPNU5RB45TlKsDCg5DIezCSSiFls73o3S6LW8jJ336RCZey0BFq s1fL1ECZCYVb5bFd1U6gbAzsgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAmjdMf aFe0qi6X7asdC4tkD3cWMB8GA1UdIwQYMBaAFAVzlbSHj7Gmf8utWCYXt7qvLDH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GQTBFMDVBNDZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNhWl95NjFZSmhlM3VxOHNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JYT1Z0SWVQc2FaX3k2MVlKaGUzdXE4c01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkM4Ri9GQTBFMDVBNDZCNUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNh Wl95NjFZSmhlM3VxOHNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHxfD40BQIZfneKXpLJmAIt8CYz2ml4Llju3pDLn0NKvkeE2xXPXU+ 2qMQshsm/V22/A3vtQudxYrP/xbNT6sGOIzl11qWhquHzTxaJQR5pSNEgmTz+qVJ HbVpVBd/FcOV+3tTk38dup3wi/8jYhXtrcv6PoThFibk2dcIpRJxI0B/ksOyPhgR Z0KCZLVCwTOitDbuXri8A3nc+n8+8J2T8wKrS3bPIHzTdmpdluh1loY2Hkau9ov/ 87yE/kTJZ5Z9cXDqIHkWLAwAuPCbbEIQZS14XnrqIrtWxc1pvCqqB2CS22UYDwJ+ ZoFhx02KghRdAvergSnuENByE/1tikrE -----END CERTIFICATE-----Generated at Sat Dec 20 08:23:33 2025 by rpki-client