This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json) Hash identifier: 8VgmzLsumib5B/YPTjo5DWdWmAUnn5cupAj3CQSMvXc= Subject key identifier: 68:29:7D:D0:82:59:65:21:C4:6F:70:23:1E:BE:6C:CE:E3:6D:CE:AC Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Certificate serial: 12DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft Manifest number: 12CA Signing time: Sat 20 Dec 2025 16:48:07 +0000 Manifest this update: Sat 20 Dec 2025 16:48:06 +0000 Manifest next update: Sat 27 Dec 2025 16:48:06 +0000 Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: AXBdZ/PQrJ2NjM7aArSyZqMgR6vHCkCLT+pj9ibDbmU=) 2: 3489528EC84511ED90A61540C4F9AE02.roa (hash: Xp+CN4LqcT/0Y+vEkAwmxb+Nkk14BBORVU2fsmUOWF4=) 3: 35615A30C84511ED90A61540C4F9AE02.roa (hash: S7qopPNPvDDhohJ5GF/e64A8sjKuyyCv3KgOWSOnrzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4830 (0x12de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Validity Not Before: Dec 20 16:48:06 2025 GMT Not After : Dec 27 16:48:06 2025 GMT Subject: CN=6946d347-212b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:14:c9:04:ae:a3:e6:79:52:97:d3:fa:fb: 66:31:b1:9a:e2:da:d2:97:79:21:ea:7a:29:71:26: 4a:a1:14:05:c0:e8:ea:7b:e5:ef:1e:76:e5:75:10: b3:c9:92:12:b7:43:2e:72:95:6a:66:d8:21:52:57: 86:72:e5:88:84:4d:99:65:28:63:e4:99:f2:22:5c: b8:05:ca:57:e2:3f:47:ba:25:5c:30:1a:a6:ff:7e: 13:7a:72:bb:df:b0:ad:bc:7f:75:b1:22:bc:df:10: 1d:69:25:be:7e:f1:af:01:0b:ae:ea:29:3d:ef:7e: c0:54:a5:2b:ad:fe:4c:ca:36:c0:19:dd:c8:e5:69: b7:0b:cf:a3:66:51:c0:f9:cd:e5:43:2a:56:33:0d: be:98:ae:3c:69:98:be:0e:f1:3e:26:ea:69:0f:1d: b3:14:be:5c:04:0e:2f:56:91:27:ab:65:da:a5:59: c9:fc:37:e2:59:62:80:b1:12:90:2f:12:4d:59:34: dc:e9:73:8e:04:36:d1:15:3c:4c:4f:da:32:98:c7: 42:1d:3d:88:64:4c:f3:c2:5f:1d:42:28:92:89:09: 07:5c:c5:6d:82:82:a0:0f:29:bd:4f:fa:87:d2:7a: af:62:a3:ad:95:5b:66:13:af:c3:34:ab:a0:94:bd: 9e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:29:7D:D0:82:59:65:21:C4:6F:70:23:1E:BE:6C:CE:E3:6D:CE:AC X509v3 Authority Key Identifier: keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:98:8f:d3:46:d9:ec:1e:80:59:7f:27:d5:49:2c:0b:0c:ad: 27:cd:5e:2b:31:80:15:13:81:e2:fa:f7:06:0c:9a:a4:d3:76: 71:f1:e7:c8:9f:bf:06:5c:be:3c:e1:93:5e:85:db:e4:35:b6: e0:d1:b8:ea:1b:fe:b7:ab:d5:20:e6:bf:66:e2:fd:dd:b5:c8: 52:3a:f8:ee:69:ae:03:93:86:7c:06:45:db:f2:7d:34:66:0e: ec:82:9e:46:e6:5d:a1:ea:af:f5:2b:e4:3d:1d:7c:58:d9:86: ad:7a:eb:4c:c4:4f:0a:db:ec:9a:bc:b2:69:0e:de:11:a1:5c: 0e:92:e8:90:2f:6d:d0:f1:40:b0:e0:47:32:a8:07:c7:de:f3: b7:da:3a:d8:33:1f:fb:0e:87:40:57:05:ae:a0:e4:7f:e9:00: 25:d7:aa:ad:32:e1:e2:55:7d:83:37:04:65:a0:75:e4:a6:92: e5:00:b7:48:ea:e6:8d:2a:73:0a:b1:82:c6:6e:60:00:9d:d5: ba:42:f8:b3:40:f3:9f:0b:fb:d0:03:b8:6c:a1:a3:52:87:ff: 93:d1:2e:26:21:06:bd:28:1a:d8:10:3e:e3:00:08:7d:33:8c: b9:db:77:f1:16:49:bb:95:31:2e:72:f5:fb:56:46:cf:da:fe: d5:ae:f8:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5 Mzk3N0M1QUYwHhcNMjUxMjIwMTY0ODA2WhcNMjUxMjI3MTY0ODA2WjAYMRYwFAYD VQQDDA02OTQ2ZDM0Ny0yMTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryAUyQSuo+Z5UpfT+vtmMbGa4trSl3kh6nopcSZKoRQFwOjqe+XvHnbldRCz yZISt0MucpVqZtghUleGcuWIhE2ZZShj5JnyIly4BcpX4j9HuiVcMBqm/34TenK7 37CtvH91sSK83xAdaSW+fvGvAQuu6ik9737AVKUrrf5MyjbAGd3I5Wm3C8+jZlHA +c3lQypWMw2+mK48aZi+DvE+JuppDx2zFL5cBA4vVpEnq2XapVnJ/DfiWWKAsRKQ LxJNWTTc6XOOBDbRFTxMT9oymMdCHT2IZEzzwl8dQiiSiQkHXMVtgoKgDym9T/qH 0nqvYqOtlVtmE6/DNKuglL2eFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgpfdCC WWUhxG9wIx6+bM7jbc6sMB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RThFQi9EMDM5RjhENkQxQkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVy RmNWMWh0MEFUcmlUbDN4YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAemI/TRtnsHoBZfyfVSSwLDK0nzV4rMYAVE4Hi+vcGDJqk03Zx8efI n78GXL484ZNehdvkNbbg0bjqG/63q9Ug5r9m4v3dtchSOvjuaa4Dk4Z8BkXb8n00 Zg7sgp5G5l2h6q/1K+Q9HXxY2YateutMxE8K2+yavLJpDt4RoVwOkuiQL23Q8UCw 4EcyqAfH3vO32jrYMx/7DodAVwWuoOR/6QAl16qtMuHiVX2DNwRloHXkppLlALdI 6uaNKnMKsYLGbmAAndW6QvizQPOfC/vQA7hsoaNSh/+T0S4mIQa9KBrYED7jAAh9 M4y523fxFkm7lTEucvX7VkbP2v7Vrvgl -----END CERTIFICATE-----Generated at Sun Dec 21 06:44:57 2025 by rpki-client