This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft File: ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft (raw, json) Hash identifier: MqEvVtdBuxmSrAbFVNqLPfhlh6yAKoiAgFJPPcvOGOw= Subject key identifier: 7E:DB:BE:5D:DC:EE:9F:91:F1:7C:4C:E1:A9:C6:05:03:9B:28:08:12 Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Certificate serial: 0BC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft Manifest number: 0BBC Signing time: Thu 04 Dec 2025 18:18:52 +0000 Manifest this update: Thu 04 Dec 2025 18:18:51 +0000 Manifest next update: Thu 11 Dec 2025 18:18:51 +0000 Files and hashes: 1: ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl (hash: V1TLTNtBjhQZDYTbyT/7hK7DavMTJZC6g/XceSpeVVI=) 2: 1A8553B831F011EAA18AC76AC4F9AE02.roa (hash: 2QDvhbtMSuUMKkHjiP/BzPb8Yd8fGPxfNmWlpQE2e54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3011 (0xbc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C7B6, serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Validity Not Before: Dec 4 18:18:51 2025 GMT Not After : Dec 11 18:18:51 2025 GMT Subject: CN=6931d08b-91df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:82:73:20:41:6b:b9:6f:62:53:61:e5:3c: 34:af:4b:01:c6:b6:6e:d1:6b:19:49:d9:09:dd:2c: bd:4a:d6:1e:ff:c0:d1:d4:ab:b2:2b:fb:53:59:1a: 50:2f:61:19:55:18:47:21:fa:ef:63:7e:88:3a:98: 87:9b:4e:84:bc:39:f8:d0:26:fb:b9:fc:e8:96:cb: 6b:a4:fa:42:b9:61:50:76:cb:46:4a:15:00:70:90: bd:bd:55:dd:6f:e4:0d:4f:99:ac:68:4a:36:db:de: df:e2:a8:8e:00:40:d9:a3:bb:0d:2b:2b:66:d1:40: e1:2e:3a:1a:0b:dc:e5:39:1a:e9:35:0e:31:58:03: cb:b7:f8:e6:e4:1d:87:d9:37:22:9e:86:65:47:e0: 87:05:a3:14:53:a9:f8:1b:88:c5:54:08:f3:3e:a5: b0:b7:ee:f9:63:2d:15:99:40:21:ec:12:47:68:a7: 22:d5:f6:cc:f2:33:dd:52:5e:a9:69:47:05:b8:ac: 7e:fc:e0:41:4f:3f:f9:d6:65:0e:3e:67:e4:03:f1: f1:48:cf:5f:a5:ac:0c:c2:ae:6b:5f:f9:46:a8:0f: 31:b2:78:dd:8d:ae:2f:62:f5:fb:cd:41:82:0e:90: fb:1a:43:ec:95:27:ac:88:c5:73:78:27:52:a1:3a: 29:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DB:BE:5D:DC:EE:9F:91:F1:7C:4C:E1:A9:C6:05:03:9B:28:08:12 X509v3 Authority Key Identifier: keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:f0:2a:64:df:2e:5b:c8:91:7f:7c:f9:2c:f2:6d:9c:0a:3e: 24:7d:39:d7:d3:ae:10:94:5c:91:22:81:52:1d:41:3b:bc:15: 4d:00:3c:97:c6:38:64:26:81:f4:88:4d:ea:bd:62:91:b2:d8: 14:37:17:36:3d:1d:d2:4b:bd:2e:d7:2e:8b:ab:48:25:ff:fe: f0:8a:59:04:f9:9b:5a:54:de:4a:67:81:ea:f3:3f:fd:80:f3: 1a:3b:16:02:21:19:12:b2:79:e8:ac:8c:c1:58:c7:c3:e1:80: 6b:be:3e:21:38:86:87:d6:90:fc:ec:58:47:8e:8e:4b:e9:f5: e1:9a:a5:24:a4:df:ee:78:ef:84:9f:79:c9:e2:a7:dc:d5:6f: 9b:59:26:91:b0:5c:d2:7a:1a:8e:29:9f:fc:81:b2:a8:19:11: 19:80:66:44:26:9c:43:a2:13:1a:bc:e4:9c:50:10:d4:a0:9f: fb:6b:4f:90:1c:13:74:0f:ee:24:0e:ad:42:90:86:89:19:ad: 36:c1:92:a7:a1:47:05:05:27:25:68:43:e7:62:14:05:ad:84: 34:4b:33:27:02:42:60:c4:a1:51:85:3e:f1:fb:62:62:5d:79: cb:cf:9d:9e:01:01:2d:12:26:b7:0d:82:3b:5c:6a:61:99:fe: a0:b5:71:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3QjYxMTAvBgNVBAUTKDQ5M0QzRUFGRTA0MDU3Mjg0MUU5RkFCMjU2RDBDNjA0 NENCODU4QzgwHhcNMjUxMjA0MTgxODUxWhcNMjUxMjExMTgxODUxWjAYMRYwFAYD VQQDEw02OTMxZDA4Yi05MWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvveCcyBBa7lvYlNh5Tw0r0sBxrZu0WsZSdkJ3Sy9StYe/8DR1KuyK/tTWRpQ L2EZVRhHIfrvY36IOpiHm06EvDn40Cb7ufzolstrpPpCuWFQdstGShUAcJC9vVXd b+QNT5msaEo2297f4qiOAEDZo7sNKytm0UDhLjoaC9zlORrpNQ4xWAPLt/jm5B2H 2TcinoZlR+CHBaMUU6n4G4jFVAjzPqWwt+75Yy0VmUAh7BJHaKci1fbM8jPdUl6p aUcFuKx+/OBBTz/51mUOPmfkA/HxSM9fpawMwq5rX/lGqA8xsnjdja4vYvX7zUGC DpD7GkPslSesiMVzeCdSoTopEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7bvl3c 7p+R8XxM4anGBQObKAgSMB8GA1UdIwQYMBaAFEk9Pq/gQFcoQen6slbQxgRMuFjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzdCNi80M0Y2QTU3ODMx RUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5aEI2ZnF5VnRER0JFeTRX TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NUMC1yLUJBVnloQjZmcXlWdERHQkV5NFdNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzdCNi80M0Y2QTU3ODMxRUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5 aEI2ZnF5VnRER0JFeTRXTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU8Cpk3y5byJF/fPks8m2cCj4kfTnX064QlFyRIoFSHUE7vBVNADyX xjhkJoH0iE3qvWKRstgUNxc2PR3SS70u1y6Lq0gl//7wilkE+ZtaVN5KZ4Hq8z/9 gPMaOxYCIRkSsnnorIzBWMfD4YBrvj4hOIaH1pD87FhHjo5L6fXhmqUkpN/ueO+E n3nJ4qfc1W+bWSaRsFzSehqOKZ/8gbKoGREZgGZEJpxDohMavOScUBDUoJ/7a0+Q HBN0D+4kDq1CkIaJGa02wZKnoUcFBSclaEPnYhQFrYQ0SzMnAkJgxKFRhT7x+2Ji XXnLz52eAQEtEia3DYI7XGphmf6gtXHQ -----END CERTIFICATE-----Generated at Sat Dec 6 16:29:12 2025 by rpki-client