This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft File: bycituUTNGUloqmUZBtOJ_BNU1Y.mft (raw, json) Hash identifier: a19qDiRzZNKJHa+GckSnlspoCUpW76RstIqGesDj1wY= Subject key identifier: A3:05:2D:3E:A0:23:87:34:3B:69:78:24:9E:28:62:1B:E6:C0:D2:64 Authority key identifier: 6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56 Certificate issuer: /CN=A91870B9/serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356 Certificate serial: 02F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft Manifest number: 02EE Signing time: Fri 19 Dec 2025 00:28:26 +0000 Manifest this update: Fri 19 Dec 2025 00:28:26 +0000 Manifest next update: Fri 26 Dec 2025 00:28:26 +0000 Files and hashes: 1: bycituUTNGUloqmUZBtOJ_BNU1Y.crl (hash: bUolc/463jpx0iD46fHPhCgc7kjCCRHYGKSkQU0+fBY=) 2: A48AD700072111ED91EABE39C4F9AE02.roa (hash: tggayaLto8CAWEhkFDTMAXvd1HSZb+GtdD7dZmQyKpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 754 (0x2f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870B9, serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356 Validity Not Before: Dec 19 00:28:26 2025 GMT Not After : Dec 26 00:28:26 2025 GMT Subject: CN=69449c2a-d335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f7:df:53:d7:f0:3b:3e:98:99:7e:2a:2c:31: 61:7c:75:9f:30:a0:55:e1:44:5d:3e:b9:77:32:f0: 2a:6b:0a:a8:f7:87:bf:31:a4:34:a7:e4:b5:b8:0e: d4:52:da:77:3d:f3:fe:d8:74:d6:d0:9c:5f:e7:37: 4b:21:07:3d:1f:c8:89:ff:8c:73:2e:0c:7b:8b:9a: 18:3d:bf:7c:fa:d9:60:32:07:30:41:92:37:46:ab: 05:a1:82:00:0f:78:df:d5:28:01:a7:94:9b:1c:25: 3f:84:2a:f6:8c:0c:a9:04:3f:a7:ba:36:d5:ee:dc: 39:cd:d0:2e:e6:45:82:02:72:4f:66:7d:21:ff:8a: 3a:84:05:f0:41:82:62:a0:3f:cc:7b:ca:4e:f4:4b: d1:3a:fe:71:c4:56:84:22:1b:cb:df:d1:c9:f0:4a: f8:fb:70:aa:60:62:5b:21:c6:13:a4:08:d5:a4:8d: 70:94:a3:19:e8:82:6a:2d:d2:3b:dd:4e:ac:7f:93: 34:ad:cb:18:6e:e8:55:9e:d0:53:2b:b5:73:5b:9e: eb:d4:5f:00:f6:5a:13:53:5c:fc:60:3a:98:1a:e7: fe:d7:c3:95:2c:d6:b2:9e:4c:df:33:98:d7:89:d7: 9d:cb:79:be:fb:c2:17:a8:f7:ff:57:70:de:4d:2a: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:05:2D:3E:A0:23:87:34:3B:69:78:24:9E:28:62:1B:E6:C0:D2:64 X509v3 Authority Key Identifier: keyid:6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:88:4d:c2:c8:1b:e9:11:90:0e:b1:3f:03:3c:6e:0d:87:1d: 6b:b2:a6:98:b6:53:94:5b:58:3e:71:4d:a4:bd:b2:4c:da:0c: 76:24:05:ff:6c:a2:80:e2:bf:07:fa:36:be:85:b5:d4:46:bb: 6f:fb:10:7c:04:d1:9c:b0:ca:1f:b7:26:00:56:95:fb:a7:1a: 79:4b:2d:eb:fa:7a:94:76:3e:96:df:a1:92:e6:10:db:d4:da: 77:e6:d9:af:1b:c7:4f:7b:07:56:e3:c4:59:82:af:87:26:76: 3f:57:5b:07:29:a0:e1:df:e5:ea:37:dc:f5:c9:6a:12:7d:ca: 65:57:fc:c7:15:02:60:3a:f8:3c:9f:c7:90:33:5a:78:8e:34: 0f:0c:11:5d:1e:af:2a:eb:b5:cd:dd:bf:ec:1c:aa:e7:29:c6: 8b:68:c1:6d:ce:55:42:9e:54:90:2d:e8:83:0c:76:11:89:5d: cd:70:2b:2d:b7:06:8d:b2:b0:08:1b:d8:d8:c1:39:70:42:b6: 77:1e:24:46:98:3e:bb:48:2b:1f:e8:a2:f6:37:6e:7f:a7:4e: c0:d7:87:f6:59:39:60:39:93:36:7c:f0:4b:f1:ac:f5:cf:da: fe:6e:b2:b0:89:3d:22:01:e0:25:6e:a2:5b:47:07:bd:33:57: e0:85:63:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQjkxMTAvBgNVBAUTKDZGMjcyMkI2RTUxMzM0NjUyNUEyQTk5NDY0MUI0RTI3 RjA0RDUzNTYwHhcNMjUxMjE5MDAyODI2WhcNMjUxMjI2MDAyODI2WjAYMRYwFAYD VQQDDA02OTQ0OWMyYS1kMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PffU9fwOz6YmX4qLDFhfHWfMKBV4URdPrl3MvAqawqo94e/MaQ0p+S1uA7U Utp3PfP+2HTW0Jxf5zdLIQc9H8iJ/4xzLgx7i5oYPb98+tlgMgcwQZI3RqsFoYIA D3jf1SgBp5SbHCU/hCr2jAypBD+nujbV7tw5zdAu5kWCAnJPZn0h/4o6hAXwQYJi oD/Me8pO9EvROv5xxFaEIhvL39HJ8Er4+3CqYGJbIcYTpAjVpI1wlKMZ6IJqLdI7 3U6sf5M0rcsYbuhVntBTK7VzW57r1F8A9loTU1z8YDqYGuf+18OVLNaynkzfM5jX idedy3m++8IXqPf/V3DeTSpaJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMFLT6g I4c0O2l4JJ4oYhvmwNJkMB8GA1UdIwQYMBaAFG8nIrblEzRlJaKplGQbTifwTVNW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBCOS83QzhDODkwRTA3 MUUxMUVEQTJFM0YxMzJDNEY5QUUwMi9ieWNpdHVVVE5HVWxvcW1VWkJ0T0pfQk5V MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5Y2l0dVVUTkdVbG9xbVVaQnRPSl9CTlUxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBCOS83QzhDODkwRTA3MUUxMUVEQTJFM0YxMzJDNEY5QUUwMi9ieWNpdHVVVE5H VWxvcW1VWkJ0T0pfQk5VMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiiE3CyBvpEZAOsT8DPG4Nhx1rsqaYtlOUW1g+cU2kvbJM2gx2JAX/ bKKA4r8H+ja+hbXURrtv+xB8BNGcsMoftyYAVpX7pxp5Sy3r+nqUdj6W36GS5hDb 1Np35tmvG8dPewdW48RZgq+HJnY/V1sHKaDh3+XqN9z1yWoSfcplV/zHFQJgOvg8 n8eQM1p4jjQPDBFdHq8q67XN3b/sHKrnKcaLaMFtzlVCnlSQLeiDDHYRiV3NcCst twaNsrAIG9jYwTlwQrZ3HiRGmD67SCsf6KL2N25/p07A14f2WTlgOZM2fPBL8az1 z9r+brKwiT0iAeAlbqJbRwe9M1fghWN8 -----END CERTIFICATE-----Generated at Fri Dec 19 20:53:47 2025 by rpki-client