This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json) Hash identifier: V5C+96U3hYFbTxkzuqVyb7RBuHOuTKQzah79NU9Tt1A= Subject key identifier: 23:93:91:CA:CA:36:69:DB:F4:12:BA:5C:48:09:A4:54:B2:79:15:D0 Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Certificate serial: 0E05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft Manifest number: 0DEE Signing time: Thu 04 Dec 2025 17:23:53 +0000 Manifest this update: Thu 04 Dec 2025 17:23:52 +0000 Manifest next update: Thu 11 Dec 2025 17:23:52 +0000 Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: os5U1m+IX3Z/QIsbWfIsnZLkGYghCrn8JOC00KxOanM=) 2: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: QRiQWTuHs2N0n4uouzBGjUh3RsRbuch8nwIeKPyOutw=) 3: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: ETp781o8T+wZdwMPTqGeE3MpSkYl74AAxIyGewKtm10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3589 (0xe05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Validity Not Before: Dec 4 17:23:52 2025 GMT Not After : Dec 11 17:23:52 2025 GMT Subject: CN=6931c3a8-6bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:75:22:9a:c6:4d:02:00:2a:4c:3b:79:13: 12:73:22:e9:4c:07:18:32:4c:f3:b2:6d:44:90:8c: c3:42:bc:df:c7:27:50:d8:e5:3e:cb:67:e2:70:70: f3:e9:95:05:98:da:6a:06:3e:cb:d9:c7:03:74:0f: 27:76:02:99:61:3d:ff:c3:c6:3c:7b:75:23:35:1b: ff:4b:6d:d1:b9:03:97:f8:f2:04:f8:bd:55:62:f7: 16:2e:22:bd:3c:9c:fa:06:79:9b:0d:73:f2:e2:02: 54:04:88:f0:76:dd:98:81:05:2b:3a:23:ff:ca:a8: ce:4a:4e:ba:b1:2a:f8:73:bc:98:7d:b1:14:4c:0f: 1c:9e:59:91:ca:8e:c7:ca:2a:16:65:9d:ea:f9:74: 52:73:97:9b:34:7e:85:ce:65:8b:f5:29:fb:05:cd: a9:c0:08:f3:dc:11:c6:9d:5d:a6:a0:94:bf:0f:ec: 33:fa:9f:14:0f:f0:ef:ef:d2:7e:70:f2:4f:70:7a: aa:0f:09:bd:cf:7b:9a:4d:12:32:0d:98:34:fd:3d: f7:ab:e9:ce:e5:f6:ab:25:78:ce:b7:00:c0:72:0c: db:a0:b8:fa:ba:d5:d9:75:9a:13:88:9a:d7:67:1c: 50:72:d1:17:b9:66:bc:61:b1:34:79:10:73:f4:05: d7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:93:91:CA:CA:36:69:DB:F4:12:BA:5C:48:09:A4:54:B2:79:15:D0 X509v3 Authority Key Identifier: keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:5a:95:d9:a3:94:6f:e8:72:70:a0:e7:ac:ad:67:83:c5:d3: 20:65:b6:eb:f4:fd:04:f2:ad:e0:4e:a3:09:e8:9a:66:1a:1c: 33:39:8d:a0:ff:f1:55:b3:03:70:b3:f8:a5:37:83:13:5d:29: 08:3e:5b:36:5c:d1:de:6a:1f:1a:6f:86:16:86:64:02:81:70: 9f:32:0f:a4:0c:dc:6c:06:c3:71:6c:bc:81:ee:d7:af:b0:1d: 41:83:12:14:b6:f2:68:69:ac:76:df:cc:70:da:44:26:49:60: 3b:5c:f9:9f:52:ea:08:1d:83:86:86:51:3e:f8:d9:23:9e:d0: d1:f1:7c:77:e6:2a:3a:13:c3:cd:43:ba:0e:cf:32:e3:2a:aa: f1:e7:d8:e5:d0:a1:e4:8d:ce:d5:29:15:0c:da:44:4e:37:6f: 55:ce:99:9a:79:65:db:44:ac:7e:f4:27:44:1b:94:c8:0c:9b: a5:b0:60:3d:e8:21:82:cb:3c:8e:ac:2f:d9:f9:3c:1f:22:52: 0f:06:d2:f6:c0:55:49:f3:4e:6f:17:e3:2c:25:01:71:6f:09: d8:d3:bc:ad:36:d7:9e:9d:ea:5c:88:05:31:e4:b3:b3:bf:4f: 3d:f2:ca:10:3a:82:62:e8:0e:c7:72:3d:56:89:55:5b:b9:d6: b2:14:48:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1 NTJCNERFODUwHhcNMjUxMjA0MTcyMzUyWhcNMjUxMjExMTcyMzUyWjAYMRYwFAYD VQQDEw02OTMxYzNhOC02YmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4Z1IprGTQIAKkw7eRMScyLpTAcYMkzzsm1EkIzDQrzfxydQ2OU+y2ficHDz 6ZUFmNpqBj7L2ccDdA8ndgKZYT3/w8Y8e3UjNRv/S23RuQOX+PIE+L1VYvcWLiK9 PJz6BnmbDXPy4gJUBIjwdt2YgQUrOiP/yqjOSk66sSr4c7yYfbEUTA8cnlmRyo7H yioWZZ3q+XRSc5ebNH6FzmWL9Sn7Bc2pwAjz3BHGnV2moJS/D+wz+p8UD/Dv79J+ cPJPcHqqDwm9z3uaTRIyDZg0/T33q+nO5farJXjOtwDAcgzboLj6utXZdZoTiJrX ZxxQctEXuWa8YbE0eRBz9AXXPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOTkcrK Nmnb9BK6XEgJpFSyeRXQMB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2 OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEJEMy8wRTREODY3QUM2OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4 UlhZS0EwTGtPNzlWSzAzb1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2WpXZo5Rv6HJwoOesrWeDxdMgZbbr9P0E8q3gTqMJ6JpmGhwzOY2g //FVswNws/ilN4MTXSkIPls2XNHeah8ab4YWhmQCgXCfMg+kDNxsBsNxbLyB7tev sB1BgxIUtvJoaax238xw2kQmSWA7XPmfUuoIHYOGhlE++NkjntDR8Xx35io6E8PN Q7oOzzLjKqrx59jl0KHkjc7VKRUM2kRON29VzpmaeWXbRKx+9CdEG5TIDJulsGA9 6CGCyzyOrC/Z+TwfIlIPBtL2wFVJ805vF+MsJQFxbwnY07ytNteenepciAUx5LOz v0898soQOoJi6A7Hcj1WiVVbudayFEi8 -----END CERTIFICATE-----Generated at Sat Dec 6 17:05:14 2025 by rpki-client