This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft File: bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft (raw, json) Hash identifier: BS+RV4tzABFwh2zONLFpeR+BMcOfRaWQp/Kshp3YCDA= Subject key identifier: 70:93:67:F5:C8:AD:E8:47:74:42:95:96:24:22:3A:5A:C6:34:CC:61 Authority key identifier: 6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2 Certificate issuer: /CN=A912781D/serialNumber=6C2297F82E218374941392652C9C8B3055C863A2 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft Manifest number: 20 Signing time: Fri 05 Dec 2025 05:35:42 +0000 Manifest this update: Fri 05 Dec 2025 05:35:41 +0000 Manifest next update: Fri 12 Dec 2025 05:35:41 +0000 Files and hashes: 1: bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl (hash: 980o3UBMEKVdXRUxUz+kPiH/Ygzb7Yg+WHOpyAgZAPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912781D, serialNumber=6C2297F82E218374941392652C9C8B3055C863A2 Validity Not Before: Dec 5 05:35:41 2025 GMT Not After : Dec 12 05:35:41 2025 GMT Subject: CN=69326f2e-fa0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:c7:61:5e:5d:db:a1:5b:a5:6a:2b:b6:2c: e0:78:b1:11:e6:75:43:1b:fb:b3:63:50:18:d4:93: 32:44:e4:f9:4b:3b:00:3e:de:3f:12:dc:bf:8f:05: 92:51:e0:5d:e7:a1:55:31:cb:31:09:43:7a:5a:8f: b6:36:b2:fb:d3:46:5d:6d:74:f3:e2:12:bb:c3:a4: 25:43:9f:06:9f:bf:8e:47:24:90:c0:05:94:1f:2c: bb:a2:8a:2b:22:ff:35:d8:c3:c8:7a:cf:b4:e5:1d: 13:bd:1d:66:62:19:3d:71:7d:da:1b:0d:f7:77:20: c0:9b:f5:19:f6:6f:6d:c3:6d:74:2d:4b:ec:70:8c: 3a:17:d3:ed:ca:ac:00:42:c1:8b:20:51:68:79:ad: 44:72:20:0d:cc:3e:4b:47:ab:78:9f:ec:cd:2c:37: bb:d2:0e:a7:c5:13:6a:19:55:05:31:8c:e5:72:1e: 0d:e8:78:ac:cc:a4:58:7c:30:2e:b8:d2:50:b8:c3: e5:61:63:fe:cd:87:19:cb:3c:46:e1:ee:be:e6:2c: 21:21:00:d7:b6:a7:9c:67:fb:7a:4e:84:a1:17:4f: 3f:2b:a4:8e:02:8d:62:8a:5a:69:9c:33:f1:19:c7: 77:1e:5c:99:3f:8a:a2:41:05:80:07:3f:66:09:30: 4f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:93:67:F5:C8:AD:E8:47:74:42:95:96:24:22:3A:5A:C6:34:CC:61 X509v3 Authority Key Identifier: keyid:6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:e1:86:63:ae:ec:a7:b1:c0:3c:db:f2:42:58:f6:88:4c:1b: 36:12:f5:86:68:95:2c:69:fa:7f:da:81:83:91:61:78:e9:a9: a9:7f:e0:02:02:6c:b5:41:fa:2f:1c:c1:fb:6a:8d:4a:04:af: 7d:31:37:f7:52:54:a0:59:aa:7b:1a:02:12:90:f2:b2:19:4e: a5:4e:47:86:b8:97:cc:98:c3:94:f1:94:43:06:04:d4:e6:f9: 13:02:ec:f8:9f:17:27:bd:ba:6c:c6:80:7b:8d:6f:31:73:ae: 76:c3:45:65:d7:94:19:98:03:42:57:67:d5:41:0e:d5:67:98: b0:b8:3e:99:b1:49:4f:a0:15:72:f6:cb:51:e1:0f:02:9b:18: ec:95:09:91:de:02:75:22:b8:47:3e:e3:9b:fb:bf:c3:59:fa: f7:57:63:b7:c9:0d:76:37:90:07:01:9a:9e:66:c0:66:5a:08: ba:ca:15:26:39:1d:07:06:35:17:7b:b0:82:aa:91:45:8e:5a: 71:9a:21:08:ce:57:df:f2:d6:00:36:39:7b:fc:b8:b2:f6:53: 97:94:99:fe:95:fe:e7:6d:4c:39:bc:06:bd:f5:f8:ca:ac:02: c1:d2:60:a3:9c:27:f6:07:14:a7:91:bc:30:c5:ef:e6:78:b4: 9d:14:b8:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NzgxRDExMC8GA1UEBRMoNkMyMjk3RjgyRTIxODM3NDk0MTM5MjY1MkM5QzhCMzA1 NUM4NjNBMjAeFw0yNTEyMDUwNTM1NDFaFw0yNTEyMTIwNTM1NDFaMBgxFjAUBgNV BAMTDTY5MzI2ZjJlLWZhMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCldMdhXl3boVulaiu2LOB4sRHmdUMb+7NjUBjUkzJE5PlLOwA+3j8S3L+PBZJR 4F3noVUxyzEJQ3paj7Y2svvTRl1tdPPiErvDpCVDnwafv45HJJDABZQfLLuiiisi /zXYw8h6z7TlHRO9HWZiGT1xfdobDfd3IMCb9Rn2b23DbXQtS+xwjDoX0+3KrABC wYsgUWh5rURyIA3MPktHq3if7M0sN7vSDqfFE2oZVQUxjOVyHg3oeKzMpFh8MC64 0lC4w+VhY/7NhxnLPEbh7r7mLCEhANe2p5xn+3pOhKEXTz8rpI4CjWKKWmmcM/EZ x3ceXJk/iqJBBYAHP2YJME99AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcJNn9cit 6Ed0QpWWJCI6WsY0zGEwHwYDVR0jBBgwFoAUbCKX+C4hg3SUE5JlLJyLMFXIY6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3ODFELzI3NjY3NjNFQTM2 NDExRjBCRDEzNjczQ0M0RjlBRTAyL2JDS1gtQzRoZzNTVUU1SmxMSnlMTUZYSVk2 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkNLWC1DNGhnM1NVRTVKbExKeUxNRlhJWTZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 ODFELzI3NjY3NjNFQTM2NDExRjBCRDEzNjczQ0M0RjlBRTAyL2JDS1gtQzRoZzNT VUU1SmxMSnlMTUZYSVk2SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM3hhmOu7KexwDzb8kJY9ohMGzYS9YZolSxp+n/agYORYXjpqal/4AIC bLVB+i8cwftqjUoEr30xN/dSVKBZqnsaAhKQ8rIZTqVOR4a4l8yYw5TxlEMGBNTm +RMC7PifFye9umzGgHuNbzFzrnbDRWXXlBmYA0JXZ9VBDtVnmLC4PpmxSU+gFXL2 y1HhDwKbGOyVCZHeAnUiuEc+45v7v8NZ+vdXY7fJDXY3kAcBmp5mwGZaCLrKFSY5 HQcGNRd7sIKqkUWOWnGaIQjOV9/y1gA2OXv8uLL2U5eUmf6V/udtTDm8Br31+Mqs AsHSYKOcJ/YHFKeRvDDF7+Z4tJ0UuGs= -----END CERTIFICATE-----Generated at Sat Dec 6 18:30:57 2025 by rpki-client