This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: AAUPy6m9Y2/gJM+gR4dcmHHJQ0SDKnHFVWDGmJm2Ky8= Subject key identifier: 97:67:FC:81:5D:95:30:33:0F:ED:57:74:51:6A:32:8B:10:65:9D:E8 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 04B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 04AF Signing time: Sat 20 Dec 2025 23:11:43 +0000 Manifest this update: Sat 20 Dec 2025 23:11:43 +0000 Manifest next update: Sat 27 Dec 2025 23:11:43 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: Dy8fi60/g8rywo+K3A8YZBY0hcf6Wl1QsvbtSoyERK0=) 2: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: uuh45EQpfeL2lsbAeT2+gUwqmhTYsY8UsTGJi5buq44=) 3: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: kZjcKzBGqSINobGtIV728vc2/z8+SbRwdVQQn+JVTTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1209 (0x4b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Dec 20 23:11:43 2025 GMT Not After : Dec 27 23:11:43 2025 GMT Subject: CN=69472d2f-c4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4c:e5:9f:b6:1e:33:61:49:1a:26:0f:66:42: ea:36:8a:3c:0e:58:e0:95:07:a2:22:b9:fd:fb:23: 5e:76:eb:c3:e2:08:3a:24:f1:7f:fc:a4:1a:94:d2: ad:d1:d3:fe:59:cf:90:7c:e4:e9:b2:e4:f7:61:3e: a1:06:1d:10:12:67:31:ad:27:86:47:00:ef:48:f9: 55:86:a0:bc:2f:98:89:12:d8:11:e9:de:20:a9:cf: a0:8f:13:e4:1e:22:db:bb:d0:30:2e:ab:c1:74:23: 8b:0f:85:59:d4:4c:6e:9c:fb:a6:07:24:08:46:41: 4a:6e:1a:19:a5:0d:c3:a8:e1:26:00:3b:f6:a7:ea: 84:c8:cb:3d:1a:41:96:c1:fd:d2:bf:29:35:44:7a: c7:84:e8:cc:cd:78:4f:66:de:ca:e6:c8:50:01:e4: 4c:40:e2:ac:7e:80:de:05:b4:a6:b6:33:59:5a:e6: f6:0c:5e:5b:30:c3:6b:46:ee:9c:87:89:81:fa:13: 81:d2:04:ac:3c:37:e4:12:d0:70:fa:4a:4b:0e:a4: f9:54:39:24:6a:ed:74:24:b8:1e:d5:cf:4f:86:4f: 57:b0:eb:bc:67:8d:bb:a4:1f:9c:3f:55:16:ec:f4: 25:96:86:c3:a5:05:05:a2:bd:27:43:6b:d0:bf:29: 4d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:67:FC:81:5D:95:30:33:0F:ED:57:74:51:6A:32:8B:10:65:9D:E8 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:58:db:40:ac:a7:3a:60:ff:a7:14:9f:76:aa:53:9c:a0:56: 6e:3e:09:91:49:07:2d:ff:8c:44:86:c7:09:9d:22:20:dd:15: 37:8c:31:79:c2:1c:8e:ba:f8:d2:1c:ff:7e:a8:de:0a:6b:4f: 11:fa:ae:1b:af:ae:9e:a5:a4:d9:1c:8d:b4:00:4b:90:4e:73: 68:32:37:c2:4b:eb:31:a1:a0:65:41:fa:6c:e5:63:f9:84:b3: d4:47:e2:d9:3c:49:44:5d:93:ae:e2:d7:77:b1:f0:38:48:c5: 91:8d:54:2a:7c:44:c2:c4:9f:fb:cc:e8:64:8f:d5:80:64:dd: b4:eb:c8:e4:45:52:3f:7a:af:1d:8b:1a:aa:da:0e:18:f7:1e: 5c:01:b9:8d:fd:fb:3e:75:a1:f1:30:66:3f:7a:c9:14:0b:fd: 61:21:23:78:39:fa:50:f0:83:99:e4:c3:66:51:f9:7f:65:6f: 1e:fc:0a:82:e9:34:b1:c1:18:63:34:04:1b:29:94:cb:76:74: 89:82:bd:24:40:6a:b0:78:73:f1:cc:e6:56:ae:98:9f:66:69: f5:f4:f7:ac:39:bb:d7:ec:07:c0:48:c8:24:7f:72:9b:f4:e0: 3b:f6:e5:a1:9d:83:2b:97:2b:02:0e:e9:e5:bc:b3:73:43:24: 29:60:e1:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjUxMjIwMjMxMTQzWhcNMjUxMjI3MjMxMTQzWjAYMRYwFAYD VQQDDA02OTQ3MmQyZi1jNGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUzln7YeM2FJGiYPZkLqNoo8DljglQeiIrn9+yNeduvD4gg6JPF//KQalNKt 0dP+Wc+QfOTpsuT3YT6hBh0QEmcxrSeGRwDvSPlVhqC8L5iJEtgR6d4gqc+gjxPk HiLbu9AwLqvBdCOLD4VZ1ExunPumByQIRkFKbhoZpQ3DqOEmADv2p+qEyMs9GkGW wf3Svyk1RHrHhOjMzXhPZt7K5shQAeRMQOKsfoDeBbSmtjNZWub2DF5bMMNrRu6c h4mB+hOB0gSsPDfkEtBw+kpLDqT5VDkkau10JLge1c9Phk9XsOu8Z427pB+cP1UW 7PQllobDpQUFor0nQ2vQvylNBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdn/IFd lTAzD+1XdFFqMosQZZ3oMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrWNtArKc6YP+nFJ92qlOcoFZuPgmRSQct/4xEhscJnSIg3RU3jDF5 whyOuvjSHP9+qN4Ka08R+q4br66epaTZHI20AEuQTnNoMjfCS+sxoaBlQfps5WP5 hLPUR+LZPElEXZOu4td3sfA4SMWRjVQqfETCxJ/7zOhkj9WAZN2068jkRVI/eq8d ixqq2g4Y9x5cAbmN/fs+daHxMGY/eskUC/1hISN4OfpQ8IOZ5MNmUfl/ZW8e/AqC 6TSxwRhjNAQbKZTLdnSJgr0kQGqweHPxzOZWrpifZmn19PesObvX7AfASMgkf3Kb 9OA79uWhnYMrlysCDunlvLNzQyQpYOE+ -----END CERTIFICATE-----Generated at Sun Dec 21 22:42:01 2025 by rpki-client