This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft File: BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json) Hash identifier: SU7AZUX3TfUHKY4AcjxMpJqrQfHoIRBirjl97wxTX3Q= Subject key identifier: 06:A1:D6:67:6E:8E:F0:93:16:8B:89:68:2C:57:CD:49:77:18:3F:84 Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Certificate serial: 0843 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft Manifest number: 0833 Signing time: Mon 22 Dec 2025 20:10:50 +0000 Manifest this update: Mon 22 Dec 2025 20:10:50 +0000 Manifest next update: Mon 29 Dec 2025 20:10:50 +0000 Files and hashes: 1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: u7W5n4rTZcY8qEeA7RqZQrIS6eZa7kEPsu6zKo3Sw1Y=) 2: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: HmCUmLVw28r2IcR7zzOMBoMlcQpH+3WxtRZQvA+31cE=) 3: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: M4ZsvutOyCk2s1KYcKAwaMHyjjGJAz91GGFqruJgJoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2115 (0x843) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Validity Not Before: Dec 22 20:10:50 2025 GMT Not After : Dec 29 20:10:50 2025 GMT Subject: CN=6949a5ca-f152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4d:06:e8:58:34:8c:de:53:5f:4c:f9:10:31: bb:92:27:1d:ed:d1:d2:2e:db:9c:71:1a:ec:fa:79: f6:76:a3:d1:5f:1d:7f:fb:58:86:f0:06:0b:25:7e: 55:1b:2f:fe:df:8f:9c:ba:a1:d6:1b:ea:12:19:ce: ea:a7:d5:07:5b:14:00:f1:c3:bf:a7:b7:ea:22:fc: 9d:d9:21:71:f9:75:93:e8:57:fb:4d:16:16:44:8c: d6:60:41:c2:4f:cc:ff:4e:5f:79:6c:29:d7:18:a2: 11:f0:7a:ea:9e:df:e8:96:dc:ff:17:31:86:2d:3d: 1c:e1:83:b6:60:78:4b:ff:f7:67:54:83:0b:70:fd: bf:7c:29:ed:d2:cd:61:c5:04:1e:a3:52:eb:2b:5c: 63:d4:09:be:61:6a:59:be:25:aa:ce:18:d0:0b:34: 51:6d:47:84:29:b8:0c:a2:cd:c8:fd:41:6a:83:28: 0d:43:f5:63:ec:1b:d3:fd:01:8c:c3:5a:11:4e:48: e4:c2:72:44:98:84:bf:16:29:5e:54:08:bf:82:d8: 71:46:bf:dd:28:49:13:92:7d:d9:bd:c4:b5:dc:f7: d0:dc:a6:c5:ba:43:26:ca:e8:da:15:19:81:11:45: df:11:06:56:b4:b0:e7:c3:0f:eb:71:2f:06:b1:ed: ff:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A1:D6:67:6E:8E:F0:93:16:8B:89:68:2C:57:CD:49:77:18:3F:84 X509v3 Authority Key Identifier: keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:aa:66:cc:c9:48:95:f7:31:40:37:b9:5f:ff:23:12:e7:9b: a3:9d:70:ba:d7:ad:55:43:ca:85:49:9d:98:d8:c6:da:79:70: 02:8a:14:0f:b7:6e:dc:db:07:02:70:76:7d:2a:7b:15:10:77: 80:8a:76:21:0b:9f:90:0e:45:af:ba:9c:78:33:e1:76:cb:58: 48:d5:d6:ae:65:fb:47:ae:0f:af:53:1d:8a:57:2c:6c:21:51: c4:6c:22:5e:bf:b7:e4:ed:ec:40:23:3d:23:32:33:58:43:9f: d3:1d:a9:8f:20:e8:9d:d5:b6:91:4f:08:b6:b8:a5:26:4a:82: 4f:10:47:1d:ff:ee:22:b5:e1:cf:50:6d:e7:27:4c:a1:3c:c8: 0b:24:50:d1:69:67:f6:06:50:e1:40:19:f6:ad:e8:20:79:6b: a6:d0:50:9d:66:da:30:3d:95:53:98:3b:e1:dd:00:52:47:40: 87:7a:5b:e2:4c:85:04:7f:73:43:81:8b:99:af:28:83:9e:ed: c3:a6:5a:66:04:62:17:00:55:ff:47:46:dd:d9:3f:00:c6:85: e7:39:cd:08:62:ac:c2:d2:dd:85:fa:b2:79:63:5c:2b:04:3e: 6c:cb:35:a5:b3:4b:85:5d:b7:0c:44:28:76:b4:4b:3b:c3:8f: 7b:cc:36:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYzMTYxMTAvBgNVBAUTKDA0MjkwQ0IyNEVFRUYwQTNBNzg3MTg3Q0I0RkZDNzQ3 REU4NjE3MzEwHhcNMjUxMjIyMjAxMDUwWhcNMjUxMjI5MjAxMDUwWjAYMRYwFAYD VQQDDA02OTQ5YTVjYS1mMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkk0G6Fg0jN5TX0z5EDG7kicd7dHSLtuccRrs+nn2dqPRXx1/+1iG8AYLJX5V Gy/+34+cuqHWG+oSGc7qp9UHWxQA8cO/p7fqIvyd2SFx+XWT6Ff7TRYWRIzWYEHC T8z/Tl95bCnXGKIR8Hrqnt/oltz/FzGGLT0c4YO2YHhL//dnVIMLcP2/fCnt0s1h xQQeo1LrK1xj1Am+YWpZviWqzhjQCzRRbUeEKbgMos3I/UFqgygNQ/Vj7BvT/QGM w1oRTkjkwnJEmIS/FileVAi/gthxRr/dKEkTkn3ZvcS13PfQ3KbFukMmyujaFRmB EUXfEQZWtLDnww/rcS8Gse3/JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAah1mdu jvCTFouJaCxXzUl3GD+EMB8GA1UdIwQYMBaAFAQpDLJO7vCjp4cYfLT/x0fehhcx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjMxNi8yODFCOUQ2MEY2 RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThLT25oeGg4dFBfSFI5NkdG ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JDa01zazd1OEtPbmh4aDh0UF9IUjk2R0Z6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjMxNi8yODFCOUQ2MEY2RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThL T25oeGg4dFBfSFI5NkdGekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIqmbMyUiV9zFAN7lf/yMS55ujnXC6161VQ8qFSZ2Y2MbaeXACihQP t27c2wcCcHZ9KnsVEHeAinYhC5+QDkWvupx4M+F2y1hI1dauZftHrg+vUx2KVyxs IVHEbCJev7fk7exAIz0jMjNYQ5/THamPIOid1baRTwi2uKUmSoJPEEcd/+4iteHP UG3nJ0yhPMgLJFDRaWf2BlDhQBn2reggeWum0FCdZtowPZVTmDvh3QBSR0CHelvi TIUEf3NDgYuZryiDnu3DplpmBGIXAFX/R0bd2T8AxoXnOc0IYqzC0t2F+rJ5Y1wr BD5syzWls0uFXbcMRCh2tEs7w497zDax -----END CERTIFICATE-----Generated at Tue Dec 23 05:37:20 2025 by rpki-client