This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft File: BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft (raw, json) Hash identifier: AeiLAdW047giLB1yArd/eOcxDpBcuCYze4IxSZHmGzQ= Subject key identifier: 08:E1:3D:DB:52:27:1B:3F:C4:A2:91:DB:81:A2:27:CF:71:8E:5A:91 Authority key identifier: 04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 Certificate issuer: /CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Certificate serial: 0632 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft Manifest number: 062D Signing time: Sat 06 Dec 2025 21:37:37 +0000 Manifest this update: Sat 06 Dec 2025 21:37:37 +0000 Manifest next update: Sat 13 Dec 2025 21:37:37 +0000 Files and hashes: 1: BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl (hash: gf6hLTmRBu4pQtP0HG0Fahvnoy8zIgIxVSq3o74uo5M=) 2: CEEBA382BD1511EB9E873260C4F9AE02.roa (hash: SXzW5vEmVU+GCJ/5C4H8HxVaw63CXUsgN+mA1S8Q1HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1586 (0x632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165B02, serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Validity Not Before: Dec 6 21:37:37 2025 GMT Not After : Dec 13 21:37:37 2025 GMT Subject: CN=6934a221-0ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3e:4f:21:44:a5:f3:90:6f:fa:c8:41:23:4a: 47:e3:fa:45:be:17:fa:d1:52:8e:73:4e:37:83:67: b1:f3:88:f3:f3:5c:b1:e7:cb:ed:ef:4c:0f:4b:04: 11:e9:94:ba:14:6e:32:88:10:a9:0c:54:48:47:3f: 85:83:22:a3:f5:80:c4:71:0f:74:93:59:91:f1:8c: a4:ab:bb:ec:cb:c0:ff:aa:0f:df:a1:03:5d:20:ff: e0:3f:f9:09:c2:9a:be:7d:44:96:c5:17:e2:a6:72: f3:e1:14:24:23:eb:dc:6e:22:99:18:7c:73:56:75: ee:cd:b6:cb:08:43:a1:63:7b:65:ed:aa:22:4e:54: 3e:aa:2b:31:5a:8c:d4:b9:ec:45:96:29:48:ed:52: c3:d2:c5:fb:52:18:6d:5d:39:05:08:2f:ac:e3:de: a5:c9:21:11:28:ee:83:1e:c4:f3:dc:eb:a9:42:dc: 2f:91:0e:64:a1:2e:08:8c:5f:f8:79:d6:08:9e:88: 91:d3:6f:3d:7d:f7:6e:b8:cd:21:98:7c:56:ce:c6: 51:f9:e9:ee:5f:d7:7a:78:67:de:47:35:45:64:47: d0:46:6f:01:01:10:c2:2c:22:6c:59:3a:6d:a4:3a: b3:d5:2b:46:29:69:a1:e7:1b:89:b8:4d:c7:e2:d7: 92:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E1:3D:DB:52:27:1B:3F:C4:A2:91:DB:81:A2:27:CF:71:8E:5A:91 X509v3 Authority Key Identifier: keyid:04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:fd:1c:d7:20:f9:b4:97:17:39:72:c0:38:d4:0a:f6:18:0d: c7:d3:72:ee:26:cc:ae:0a:d2:50:4c:84:eb:2a:02:21:a3:06: e8:9e:a1:c6:7d:86:d5:a9:28:20:07:f3:54:31:fa:4a:a5:01: bc:4a:18:68:bb:05:d8:0a:31:7b:c4:b6:ec:6a:45:57:6f:1d: 21:47:3c:5a:f1:63:1f:76:a8:1b:7d:d4:14:dd:53:64:93:be: d0:89:3c:4f:aa:fa:39:53:19:b8:a6:03:c9:8e:37:5c:36:37: 3d:23:97:35:f8:bb:95:a9:54:ef:90:4a:00:47:2b:89:c0:6e: 42:b5:c8:af:2d:df:5c:18:12:f2:99:54:15:cc:e0:7c:11:7b: 68:03:61:a8:45:1a:ff:07:17:39:71:bc:4b:c8:3b:71:92:06: 21:d0:45:66:8a:04:d9:10:bd:91:bd:32:de:5a:6c:08:17:ec: 44:b5:3f:ed:e4:66:de:28:c4:65:34:3b:17:66:ba:02:3e:1d: 7b:45:97:44:88:b4:4c:17:d6:31:6c:7c:f0:a4:fa:3a:37:81: b2:14:e4:6e:db:62:35:9a:12:58:8c:e9:b2:58:3e:15:db:93: c0:c3:53:93:c1:c9:b3:f2:61:3d:55:69:6d:f9:30:27:1f:cc: 75:a9:1b:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCMDIxMTAvBgNVBAUTKDA0MUQ1MTkyNDdDNDZFNzNGNkE2N0RERjdDOTA0OUJG RjI3OUMwQjcwHhcNMjUxMjA2MjEzNzM3WhcNMjUxMjEzMjEzNzM3WjAYMRYwFAYD VQQDEw02OTM0YTIyMS0wY2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsz5PIUSl85Bv+shBI0pH4/pFvhf60VKOc043g2ex84jz81yx58vt70wPSwQR 6ZS6FG4yiBCpDFRIRz+FgyKj9YDEcQ90k1mR8Yykq7vsy8D/qg/foQNdIP/gP/kJ wpq+fUSWxRfipnLz4RQkI+vcbiKZGHxzVnXuzbbLCEOhY3tl7aoiTlQ+qisxWozU uexFlilI7VLD0sX7UhhtXTkFCC+s496lySERKO6DHsTz3OupQtwvkQ5koS4IjF/4 edYInoiR0289ffduuM0hmHxWzsZR+enuX9d6eGfeRzVFZEfQRm8BARDCLCJsWTpt pDqz1StGKWmh5xuJuE3H4teSHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjhPdtS Jxs/xKKR24GiJ89xjlqRMB8GA1UdIwQYMBaAFAQdUZJHxG5z9qZ933yQSb/yecC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUIwMi85NUEzOEVGNkJE MTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJuUDJwbjNmZkpCSnZfSjV3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JCMVJra2ZFYm5QMnBuM2ZmSkJKdl9KNXdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUIwMi85NUEzOEVGNkJEMTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJu UDJwbjNmZkpCSnZfSjV3TGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD/RzXIPm0lxc5csA41Ar2GA3H03LuJsyuCtJQTITrKgIhowbonqHG fYbVqSggB/NUMfpKpQG8ShhouwXYCjF7xLbsakVXbx0hRzxa8WMfdqgbfdQU3VNk k77QiTxPqvo5Uxm4pgPJjjdcNjc9I5c1+LuVqVTvkEoARyuJwG5CtcivLd9cGBLy mVQVzOB8EXtoA2GoRRr/Bxc5cbxLyDtxkgYh0EVmigTZEL2RvTLeWmwIF+xEtT/t 5GbeKMRlNDsXZroCPh17RZdEiLRMF9YxbHzwpPo6N4GyFORu22I1mhJYjOmyWD4V 25PAw1OTwcmz8mE9VWlt+TAnH8x1qRsS -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:39 2025 by rpki-client