This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json) Hash identifier: nKiFAqWyq2NTVtpgDhzIOgWcZyDxc9f+i/LLRfAdePk= Subject key identifier: BC:EE:9B:4E:0F:A2:5E:9E:2E:E6:78:39:EA:00:5C:D0:BA:8E:FE:20 Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 0561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft Manifest number: 054D Signing time: Sat 06 Dec 2025 22:16:45 +0000 Manifest this update: Sat 06 Dec 2025 22:16:44 +0000 Manifest next update: Sat 13 Dec 2025 22:16:44 +0000 Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: 3foNtWrl3iekGtWtv1Fxwk1eX7e4BnNe7yVzgNOcp0I=) 2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: dmJCq+TfcdKcTzpkdOc2Oy+/xUlQZgSzYrK0BxujDDA=) 3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: klkni3QfAoaIepGFi9OaOnNpBqMIdWLlo8tnHjdjSxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1377 (0x561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Validity Not Before: Dec 6 22:16:44 2025 GMT Not After : Dec 13 22:16:44 2025 GMT Subject: CN=6934ab4c-0112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2f:e8:9e:1a:0b:31:5d:9d:23:4a:09:4e:26: 0f:2d:2f:40:c0:57:68:63:6d:46:91:f0:08:fe:41: 8d:2b:75:88:ce:5a:17:ad:23:f0:9e:75:0f:ea:07: 1a:37:08:61:3e:5d:20:04:80:8f:80:ac:41:76:42: d5:30:1f:90:76:ca:3f:57:8e:aa:a4:3e:e9:62:e6: f2:8e:7c:16:f8:82:d4:f1:7e:e6:d1:f6:63:d3:54: 77:b6:2d:dc:99:ca:e4:99:bf:de:68:6c:d0:56:a8: a9:51:36:24:c0:76:4e:58:84:49:c9:6a:cc:c6:97: 58:e6:3e:2e:b3:70:c7:34:9b:1e:28:63:c0:cc:16: aa:50:a7:09:cc:bb:e3:3f:0c:9f:b8:03:60:4f:89: dd:32:61:7f:3e:eb:46:27:2f:48:13:fa:60:6e:67: 2d:ea:42:10:ec:b4:da:da:a1:b8:41:af:6e:b4:16: e8:71:37:17:d9:68:d1:18:d3:cd:16:db:01:62:5b: 51:40:75:90:bd:0d:fc:2c:cf:4d:05:38:25:a0:9e: 7a:d5:b0:68:57:f0:90:2c:af:e1:64:4e:26:08:0a: c1:16:67:7e:a2:cb:3f:85:52:6f:33:35:62:05:28: 71:2f:1f:bd:89:56:81:5a:29:95:fb:9d:1c:e8:39: e0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EE:9B:4E:0F:A2:5E:9E:2E:E6:78:39:EA:00:5C:D0:BA:8E:FE:20 X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:6e:0b:71:e5:00:20:1e:d2:aa:95:60:cc:1e:69:f0:7d:03: 5f:50:86:1a:fb:b2:86:c3:a7:bd:51:6b:88:e4:88:dc:57:b9: d4:89:ba:9e:1e:d6:c4:20:22:ca:d0:bd:2b:8c:c5:25:50:86: ea:f6:5a:d5:2a:87:05:68:8b:e4:32:28:9d:5b:4f:b6:95:b1: d3:02:31:3a:ec:bb:19:09:b7:0e:31:5f:7d:34:2c:28:96:84: 60:d5:37:1a:3a:ca:ce:df:ab:0d:d4:ff:3d:d2:00:f3:11:08: 15:75:35:22:5f:d4:ca:de:74:28:4c:9f:bb:7b:5f:4a:db:f2: 2d:4b:ef:c8:e2:a6:c2:2c:15:c9:62:cf:ea:45:c8:69:15:6d: ee:55:a6:7b:68:5c:58:02:94:b8:e2:9d:07:c0:13:64:c9:26: cc:7d:1d:d3:7d:20:f7:50:d0:40:16:d3:90:6a:01:0d:11:1f: f2:3e:d5:24:1a:53:09:59:82:59:eb:f0:7f:d6:9a:80:0e:63: 88:75:3f:31:0b:89:ef:6d:22:c3:f0:cc:8b:8e:a3:29:e1:40: e0:35:d7:26:55:e5:cb:a7:68:67:e8:ce:c5:de:d5:ad:0c:2f: f3:93:9c:5d:bc:f5:12:56:0b:e1:ed:ea:f2:ef:3f:dd:18:e0: 60:e2:94:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjUxMjA2MjIxNjQ0WhcNMjUxMjEzMjIxNjQ0WjAYMRYwFAYD VQQDEw02OTM0YWI0Yy0wMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3i/onhoLMV2dI0oJTiYPLS9AwFdoY21GkfAI/kGNK3WIzloXrSPwnnUP6gca NwhhPl0gBICPgKxBdkLVMB+Qdso/V46qpD7pYubyjnwW+ILU8X7m0fZj01R3ti3c mcrkmb/eaGzQVqipUTYkwHZOWIRJyWrMxpdY5j4us3DHNJseKGPAzBaqUKcJzLvj PwyfuANgT4ndMmF/PutGJy9IE/pgbmct6kIQ7LTa2qG4Qa9utBbocTcX2WjRGNPN FtsBYltRQHWQvQ38LM9NBTgloJ561bBoV/CQLK/hZE4mCArBFmd+oss/hVJvMzVi BShxLx+9iVaBWimV+50c6DngcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzum04P ol6eLuZ4OeoAXNC6jv4gMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkU3MC9CRUM1Q0E3MjIxMUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3Bp SXRfTGtNSzBDa3Q1S1Rkbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHbgtx5QAgHtKqlWDMHmnwfQNfUIYa+7KGw6e9UWuI5IjcV7nUibqe HtbEICLK0L0rjMUlUIbq9lrVKocFaIvkMiidW0+2lbHTAjE67LsZCbcOMV99NCwo loRg1TcaOsrO36sN1P890gDzEQgVdTUiX9TK3nQoTJ+7e19K2/ItS+/I4qbCLBXJ Ys/qRchpFW3uVaZ7aFxYApS44p0HwBNkySbMfR3TfSD3UNBAFtOQagENER/yPtUk GlMJWYJZ6/B/1pqADmOIdT8xC4nvbSLD8MyLjqMp4UDgNdcmVeXLp2hn6M7F3tWt DC/zk5xdvPUSVgvh7ery7z/dGOBg4pQ6 -----END CERTIFICATE-----Generated at Sun Dec 7 02:59:25 2025 by rpki-client