This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft File: bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft (raw, json) Hash identifier: h/S1o+/wJcxoQVv3Kwe9fXoel3Wg4WMoOUX0azieHJ8= Subject key identifier: 97:F5:01:B3:4B:81:BD:8C:ED:AF:CD:91:07:87:8E:A5:C2:FB:11:03 Authority key identifier: 6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4 Certificate issuer: /CN=A917983D/serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4 Certificate serial: 0323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft Manifest number: 031E Signing time: Wed 31 Dec 2025 00:10:37 +0000 Manifest this update: Wed 31 Dec 2025 00:10:36 +0000 Manifest next update: Wed 07 Jan 2026 00:10:36 +0000 Files and hashes: 1: bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl (hash: mEvhoKK1Wcih6Zcz/r8rvs1boULu+bcKwOamKKvFnQ8=) 2: 1F59A248F69E11EC947BBC5EC4F9AE02.roa (hash: 2Z67uVkO5VIvy8cXyYQOgy3wzQGOrhac1hYccMZ9uzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 00:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917983D, serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4 Validity Not Before: Dec 31 00:10:36 2025 GMT Not After : Jan 7 00:10:36 2026 GMT Subject: CN=695469fd-467e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c6:51:33:54:41:86:2f:7a:9d:c5:f3:e9:df: 3b:0f:91:8b:c8:25:fb:38:ca:5c:e4:a3:9c:1b:95: 0a:b2:99:39:2c:5d:19:a9:89:6e:f3:94:f7:47:56: 98:79:96:f0:c3:bb:e1:4a:63:7e:29:22:5f:d1:71: c2:cc:75:b9:50:3c:71:d2:46:c5:c9:88:4b:78:ca: 3e:ac:0c:2a:8f:5d:64:88:4c:3d:95:0e:29:bb:7a: 11:ca:10:c0:0a:0c:68:3b:53:d8:44:7f:ac:ad:1f: 67:34:53:91:2b:7e:af:0c:04:07:de:f2:61:27:36: c6:82:0a:81:72:a9:9f:d6:0b:b3:9b:16:d5:85:9f: 27:ea:1e:78:2a:99:79:d3:a0:c6:c5:23:49:eb:f0: c3:39:4c:4b:f9:3b:31:96:50:1a:2a:6a:d7:c2:36: 2a:01:77:e4:b7:1a:d3:aa:79:db:53:3c:e6:00:5d: 43:33:14:4e:50:eb:62:3e:75:92:3c:b7:67:70:be: cb:b1:4e:85:a1:8c:17:27:87:98:24:7d:44:7b:7d: c7:94:11:d0:ba:3c:ba:af:0f:59:13:22:50:ed:c7: a4:b7:d4:dd:48:d0:37:77:aa:bb:b5:dd:db:26:c6: 2b:93:8c:83:b7:2f:57:15:b8:dc:b2:79:64:35:5a: b9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F5:01:B3:4B:81:BD:8C:ED:AF:CD:91:07:87:8E:A5:C2:FB:11:03 X509v3 Authority Key Identifier: keyid:6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:92:da:12:3c:8a:30:6c:e1:4e:3a:96:4a:a0:48:4b:f1:50: 5e:94:5f:e1:b2:31:0d:4f:ca:d0:e9:15:03:c6:b4:2a:0a:50: f2:d5:88:a6:10:9a:b2:dc:61:d7:42:ab:8c:4d:20:ca:9e:69: c3:a7:bb:74:8e:b1:a8:da:5f:07:4e:7e:cf:e5:a7:c7:0c:33: d4:75:bf:1f:79:f1:bf:ee:c1:ba:df:ff:fc:77:40:06:22:08: 33:49:19:cd:1b:6b:46:ef:a8:96:cc:5a:3d:32:0e:b3:63:a5: 23:ff:31:c0:2c:29:2b:21:99:f7:44:c3:db:47:ce:d7:07:bb: c4:ed:ba:06:ea:ed:a7:78:36:cc:2d:b3:28:e5:c7:7c:25:47: f6:cf:fa:87:62:e8:54:d2:4e:72:17:41:ed:52:1a:ce:e1:96: 87:97:b5:b0:de:18:2e:0b:f6:c3:bc:57:c1:0e:38:e7:2d:87: 80:06:97:4a:7e:db:a3:2e:68:50:0d:50:42:e8:f4:4f:95:a1: 87:51:33:77:ae:76:ca:97:81:00:5e:31:84:eb:a2:ed:21:16: ac:b1:cb:80:49:10:7b:05:b1:71:36:81:0c:4f:fd:a5:71:f5: b6:f7:72:9f:41:cd:f8:44:1f:47:1b:32:11:c0:31:70:dd:b3: 68:35:96:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk4M0QxMTAvBgNVBAUTKDZGMDAyNDZBODU4ODg0OEMzQTE3Mjc1MkYzMkFFNEVB MzBDNjgwQTQwHhcNMjUxMjMxMDAxMDM2WhcNMjYwMTA3MDAxMDM2WjAYMRYwFAYD VQQDDA02OTU0NjlmZC00NjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi8ZRM1RBhi96ncXz6d87D5GLyCX7OMpc5KOcG5UKspk5LF0ZqYlu85T3R1aY eZbww7vhSmN+KSJf0XHCzHW5UDxx0kbFyYhLeMo+rAwqj11kiEw9lQ4pu3oRyhDA CgxoO1PYRH+srR9nNFORK36vDAQH3vJhJzbGggqBcqmf1guzmxbVhZ8n6h54Kpl5 06DGxSNJ6/DDOUxL+TsxllAaKmrXwjYqAXfktxrTqnnbUzzmAF1DMxROUOtiPnWS PLdncL7LsU6FoYwXJ4eYJH1Ee33HlBHQujy6rw9ZEyJQ7cekt9TdSNA3d6q7td3b JsYrk4yDty9XFbjcsnlkNVq51QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJf1AbNL gb2M7a/NkQeHjqXC+xEDMB8GA1UdIwQYMBaAFG8AJGqFiISMOhcnUvMq5OowxoCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTgzRC80MTYyRjQ0Q0Y2 OUExMUVDQTc4NTNCNTlDNEY5QUUwMi9id0FrYW9XSWhJdzZGeWRTOHlyazZqREdn S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3QWthb1dJaEl3NkZ5ZFM4eXJrNmpER2dLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTgzRC80MTYyRjQ0Q0Y2OUExMUVDQTc4NTNCNTlDNEY5QUUwMi9id0FrYW9XSWhJ dzZGeWRTOHlyazZqREdnS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0ktoSPIowbOFOOpZKoEhL8VBelF/hsjENT8rQ6RUDxrQqClDy1Yim EJqy3GHXQquMTSDKnmnDp7t0jrGo2l8HTn7P5afHDDPUdb8fefG/7sG63//8d0AG IggzSRnNG2tG76iWzFo9Mg6zY6Uj/zHALCkrIZn3RMPbR87XB7vE7boG6u2neDbM LbMo5cd8JUf2z/qHYuhU0k5yF0HtUhrO4ZaHl7Ww3hguC/bDvFfBDjjnLYeABpdK ftujLmhQDVBC6PRPlaGHUTN3rnbKl4EAXjGE66LtIRasscuASRB7BbFxNoEMT/2l cfW293KfQc34RB9HGzIRwDFw3bNoNZYB -----END CERTIFICATE-----Generated at Wed Dec 31 13:28:20 2025 by rpki-client