This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft File: BFtcCGfeWB0rdIQv74BFwad76L0.mft (raw, json) Hash identifier: UFgbOXUMRuRXXua81yNz8jZZ3gyaR3xDnvPjqCxoCNA= Subject key identifier: E7:CF:96:3E:43:41:55:8D:7D:2D:5B:1B:04:85:E2:5C:63:9B:07:41 Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD Certificate issuer: /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD Certificate serial: 2451 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft Manifest number: 2417 Signing time: Sat 06 Dec 2025 15:33:14 +0000 Manifest this update: Sat 06 Dec 2025 15:33:14 +0000 Manifest next update: Sat 13 Dec 2025 15:33:14 +0000 Files and hashes: 1: BFtcCGfeWB0rdIQv74BFwad76L0.crl (hash: yiEpgdj8L0S9gM3lrWS9kntUMOmA2ujh9qRry6pC2ZA=) 2: F8623718B10D11E5894F4D1CC4F9AE02.roa (hash: 2VqKtLp4I4n3i3xfxJ0a0zauep05yhz4m6vcbsayeiY=) 3: FCF0A580B10D11E5894F4D1CC4F9AE02.roa (hash: +2MMI4KCUim/55I1v/CcFFWM8c4do3z3Prc4iRx7/lQ=) 4: F9ED1B16B10D11E5894F4D1CC4F9AE02.roa (hash: fkO78SaWxLHL6UEeOmDkgAwdKa1QD3bVWVMip2dHju0=) 5: FB87E4C4B10D11E5894F4D1CC4F9AE02.roa (hash: Xr4axXAE5xhZlqvtubxZ2pb3RMbCF82Tss/A5eKchFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9297 (0x2451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917412F, serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD Validity Not Before: Dec 6 15:33:14 2025 GMT Not After : Dec 13 15:33:14 2025 GMT Subject: CN=69344cba-59b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cd:a1:33:ac:c3:de:fd:00:2a:7a:e1:31:bc: d7:1c:cb:30:85:f1:8a:cf:0e:6a:78:81:ac:21:86: 11:b7:e4:2a:17:a0:6f:b9:64:ce:49:cc:eb:8c:39: 27:bd:de:40:63:16:01:4f:94:7a:e7:94:57:1e:15: 93:0c:e7:a9:14:77:2f:dc:5a:c9:f8:b3:45:81:94: 7b:c4:09:b3:a6:4b:c5:58:64:2d:3c:4c:95:07:40: de:c4:c2:08:43:bc:ad:50:5f:1f:32:3d:59:38:a9: 0e:7b:71:ac:00:e9:ae:f5:da:d9:e5:03:cf:84:d9: 5d:ad:f3:99:6f:06:04:d2:56:70:47:f0:98:91:9d: eb:21:a8:80:b6:7c:8d:36:c4:77:63:8c:24:71:8b: 23:95:6f:d9:2d:fd:a5:b7:9f:0d:6a:04:b8:b3:32: 24:da:ef:68:0e:0f:83:e7:a4:2e:45:f8:9a:12:b6: de:f3:91:92:e4:30:29:5d:2f:41:7c:c9:2a:99:b4: 65:91:0d:86:9d:f6:ef:65:d5:e9:81:8b:d2:79:53: 9e:47:ce:a9:27:3f:c6:5d:eb:4b:4e:f9:33:19:ac: 9b:11:4e:97:71:c2:9e:53:02:08:f0:25:f0:a5:2d: 12:67:27:42:58:e3:67:37:25:f9:04:d8:0e:05:fa: 21:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CF:96:3E:43:41:55:8D:7D:2D:5B:1B:04:85:E2:5C:63:9B:07:41 X509v3 Authority Key Identifier: keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:42:85:0f:5d:3c:f9:8b:b2:df:4d:fa:56:f5:b6:ae:25:8e: 1e:d2:1e:9f:2b:4d:cf:15:10:6e:ba:b9:dc:75:e9:72:da:b2: 3b:22:d3:47:80:a7:e9:e7:ea:1f:5e:d8:2e:b8:8e:63:81:3c: f7:ef:b2:1f:38:c9:94:61:54:15:ae:55:0c:f6:f6:d1:02:e5: 26:b9:06:4e:bc:35:e6:50:e6:5f:c8:60:8c:6a:12:64:e5:00: fe:b8:b4:76:3c:89:ee:16:55:ea:e6:26:e4:b8:3f:48:e9:f9: 0a:44:58:5e:ee:9c:7f:bd:1c:a9:b1:33:52:ef:11:50:4b:de: 94:65:3b:5e:2e:c4:24:0e:0d:9e:f3:b7:c7:9d:0b:d2:15:b4: c0:e1:c8:b1:e6:10:8c:ae:03:c2:6d:0f:fc:29:53:cf:29:a3: f3:1e:d8:b7:df:7a:58:ca:cd:4b:82:21:4a:ab:84:a3:eb:7b: f9:4b:66:04:09:0d:0c:2b:95:fa:d4:07:70:b2:fb:c4:cb:67: c4:e2:66:78:e5:13:e5:9d:4d:59:21:6f:be:95:9d:f4:f3:09: 2a:72:28:60:a9:15:5d:91:5a:cb:52:9e:9f:09:30:c7:20:13: 91:f7:a4:1d:48:bf:b6:f9:46:94:38:81:ef:ff:e6:50:a7:e2: b8:8c:19:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxMkYxMTAvBgNVBAUTKDA0NUI1QzA4NjdERTU4MUQyQjc0ODQyRkVGODA0NUMx QTc3QkU4QkQwHhcNMjUxMjA2MTUzMzE0WhcNMjUxMjEzMTUzMzE0WjAYMRYwFAYD VQQDEw02OTM0NGNiYS01OWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvM2hM6zD3v0AKnrhMbzXHMswhfGKzw5qeIGsIYYRt+QqF6BvuWTOSczrjDkn vd5AYxYBT5R655RXHhWTDOepFHcv3FrJ+LNFgZR7xAmzpkvFWGQtPEyVB0DexMII Q7ytUF8fMj1ZOKkOe3GsAOmu9drZ5QPPhNldrfOZbwYE0lZwR/CYkZ3rIaiAtnyN NsR3Y4wkcYsjlW/ZLf2lt58NagS4szIk2u9oDg+D56QuRfiaErbe85GS5DApXS9B fMkqmbRlkQ2GnfbvZdXpgYvSeVOeR86pJz/GXetLTvkzGaybEU6XccKeUwII8CXw pS0SZydCWONnNyX5BNgOBfohcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfPlj5D QVWNfS1bGwSF4lxjmwdBMB8GA1UdIwQYMBaAFARbXAhn3lgdK3SEL++ARcGne+i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDEyRi9ENDExNDE0QzZE NTYxMUU1OTBEODc0NzJDNEY5QUUwMi9CRnRjQ0dmZVdCMHJkSVF2NzRCRndhZDc2 TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JGdGNDR2ZlV0IwcmRJUXY3NEJGd2FkNzZMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDEyRi9ENDExNDE0QzZENTYxMUU1OTBEODc0NzJDNEY5QUUwMi9CRnRjQ0dmZVdC MHJkSVF2NzRCRndhZDc2TDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADQoUPXTz5i7LfTfpW9bauJY4e0h6fK03PFRBuurncdely2rI7ItNH gKfp5+ofXtguuI5jgTz377IfOMmUYVQVrlUM9vbRAuUmuQZOvDXmUOZfyGCMahJk 5QD+uLR2PInuFlXq5ibkuD9I6fkKRFhe7px/vRypsTNS7xFQS96UZTteLsQkDg2e 87fHnQvSFbTA4cix5hCMrgPCbQ/8KVPPKaPzHti333pYys1LgiFKq4Sj63v5S2YE CQ0MK5X61AdwsvvEy2fE4mZ45RPlnU1ZIW++lZ308wkqcihgqRVdkVrLUp6fCTDH IBOR96QdSL+2+UaUOIHv/+ZQp+K4jBn/ -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:19 2025 by rpki-client