This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft File: BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json) Hash identifier: 2Bom5zFu75pbLnXeAb5dwP/udeAjJMG/nnPJrzMtqQk= Subject key identifier: B2:3F:18:D5:5D:21:25:8F:03:D1:D1:63:A7:1B:2E:3F:A3:F3:41:CD Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Certificate serial: 083B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft Manifest number: 082B Signing time: Sat 06 Dec 2025 19:57:40 +0000 Manifest this update: Sat 06 Dec 2025 19:57:39 +0000 Manifest next update: Sat 13 Dec 2025 19:57:39 +0000 Files and hashes: 1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: 9RfZTD9Hfj4zy7FVACrDj0ame01wnhO7q3vQKjID6B4=) 2: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: M4ZsvutOyCk2s1KYcKAwaMHyjjGJAz91GGFqruJgJoU=) 3: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: HmCUmLVw28r2IcR7zzOMBoMlcQpH+3WxtRZQvA+31cE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2107 (0x83b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Validity Not Before: Dec 6 19:57:39 2025 GMT Not After : Dec 13 19:57:39 2025 GMT Subject: CN=69348ab4-9fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d9:d0:83:0d:6e:fe:38:df:4d:cd:66:b1:d4: bb:da:da:af:1a:ee:98:b4:4a:c2:a6:fc:34:c4:ba: 61:10:c9:e5:e8:cf:78:b8:60:80:e2:a1:6a:bb:5b: b2:f1:99:54:fb:8f:f3:1c:f1:02:53:55:3c:26:ef: 32:bd:a6:36:f5:2e:90:60:fa:d1:df:5d:72:4e:79: f8:f6:f3:4f:41:82:1c:67:a8:d4:5d:01:c2:2f:80: de:bf:03:71:44:11:17:ae:d8:cb:12:5c:47:fb:a4: 27:59:a8:48:42:30:53:88:11:f0:57:73:41:7c:5e: ce:0c:48:12:46:df:15:0e:d4:35:dc:12:fe:c5:4c: da:b2:88:11:72:d7:7f:ca:4f:fb:78:38:23:f3:e7: 19:e3:f2:08:c0:6a:71:18:8b:57:24:0c:aa:c0:42: b5:b0:1c:b5:24:fb:5e:af:5e:00:6f:a2:cf:67:27: c3:8f:14:cd:5d:1f:12:30:1b:6f:85:af:a1:83:47: 9f:56:aa:40:b6:aa:0c:3f:9e:28:fc:19:03:80:fb: fa:a5:80:dd:db:42:db:ea:8c:39:ef:a7:27:9b:d2: ef:60:08:0b:8b:d8:58:9c:8e:6c:0c:e3:fb:9d:20: be:f6:a5:23:37:d6:48:81:3b:64:01:3d:83:0f:0d: fe:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3F:18:D5:5D:21:25:8F:03:D1:D1:63:A7:1B:2E:3F:A3:F3:41:CD X509v3 Authority Key Identifier: keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:fe:58:10:99:de:3a:eb:54:d6:82:ee:a5:b6:20:07:95:8c: 00:67:38:01:d3:38:f9:54:07:b6:b4:a6:50:54:3e:b2:c4:22: 57:3d:93:a4:af:be:c1:0b:08:55:ac:e3:49:14:99:33:ee:29: 20:c2:60:66:45:60:b9:57:e1:67:eb:ab:cf:ab:cb:ea:0e:2e: 61:00:69:f7:1c:1e:e0:7a:2e:18:a0:7e:4f:46:44:e3:1e:01: 8f:33:36:ea:d2:22:61:ac:06:15:d8:80:11:0e:99:43:48:50: 33:3d:58:8e:85:61:d3:65:fa:1d:a1:0d:71:98:60:2c:01:f1: 5f:78:f2:4c:63:f3:d7:f3:44:db:9f:11:07:dc:7e:6a:59:72: d5:77:21:4c:7d:26:2f:ff:24:5a:e9:67:c1:06:b3:98:33:df: d1:a5:98:0f:a4:a2:ab:c6:f8:50:09:04:e9:2f:e4:16:51:2a: a3:c7:52:7f:93:15:5e:d6:44:d5:48:5f:22:4f:0e:fa:a8:ab: 30:70:6e:f3:6f:cc:68:f5:73:22:6f:27:cc:90:54:65:0e:60: 7d:f3:d8:de:18:2e:a7:15:1e:2a:42:0d:fb:c8:23:5a:d1:b2: 92:f5:b1:1c:ab:b9:f4:9e:c5:ed:f1:ce:99:7a:61:06:04:ab: 93:21:4e:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYzMTYxMTAvBgNVBAUTKDA0MjkwQ0IyNEVFRUYwQTNBNzg3MTg3Q0I0RkZDNzQ3 REU4NjE3MzEwHhcNMjUxMjA2MTk1NzM5WhcNMjUxMjEzMTk1NzM5WjAYMRYwFAYD VQQDEw02OTM0OGFiNC05ZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdnQgw1u/jjfTc1msdS72tqvGu6YtErCpvw0xLphEMnl6M94uGCA4qFqu1uy 8ZlU+4/zHPECU1U8Ju8yvaY29S6QYPrR311yTnn49vNPQYIcZ6jUXQHCL4DevwNx RBEXrtjLElxH+6QnWahIQjBTiBHwV3NBfF7ODEgSRt8VDtQ13BL+xUzasogRctd/ yk/7eDgj8+cZ4/IIwGpxGItXJAyqwEK1sBy1JPter14Ab6LPZyfDjxTNXR8SMBtv ha+hg0efVqpAtqoMP54o/BkDgPv6pYDd20Lb6ow576cnm9LvYAgLi9hYnI5sDOP7 nSC+9qUjN9ZIgTtkAT2DDw3+HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLI/GNVd ISWPA9HRY6cbLj+j80HNMB8GA1UdIwQYMBaAFAQpDLJO7vCjp4cYfLT/x0fehhcx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjMxNi8yODFCOUQ2MEY2 RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThLT25oeGg4dFBfSFI5NkdG ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JDa01zazd1OEtPbmh4aDh0UF9IUjk2R0Z6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjMxNi8yODFCOUQ2MEY2RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThL T25oeGg4dFBfSFI5NkdGekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh/lgQmd4661TWgu6ltiAHlYwAZzgB0zj5VAe2tKZQVD6yxCJXPZOk r77BCwhVrONJFJkz7ikgwmBmRWC5V+Fn66vPq8vqDi5hAGn3HB7gei4YoH5PRkTj HgGPMzbq0iJhrAYV2IARDplDSFAzPViOhWHTZfodoQ1xmGAsAfFfePJMY/PX80Tb nxEH3H5qWXLVdyFMfSYv/yRa6WfBBrOYM9/RpZgPpKKrxvhQCQTpL+QWUSqjx1J/ kxVe1kTVSF8iTw76qKswcG7zb8xo9XMibyfMkFRlDmB989jeGC6nFR4qQg37yCNa 0bKS9bEcq7n0nsXt8c6ZemEGBKuTIU48 -----END CERTIFICATE-----Generated at Sun Dec 7 00:22:42 2025 by rpki-client