This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft File: bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft (raw, json) Hash identifier: WWSZUUbDS7LAG0HO6KvjWxfwNdiUQaPTIP4eaC3ihxk= Subject key identifier: B1:4A:AF:8E:1C:3F:57:EF:F4:DF:CD:41:03:94:3B:13:E2:DD:9B:BC Authority key identifier: 6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C Certificate issuer: /CN=A917877E/serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft Manifest number: 4E Signing time: Fri 05 Dec 2025 05:08:33 +0000 Manifest this update: Fri 05 Dec 2025 05:08:33 +0000 Manifest next update: Fri 12 Dec 2025 05:08:33 +0000 Files and hashes: 1: bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl (hash: gMjYkE3jOCuNwQisohlqSJBt86kN1eo3ihK6Opi5Amg=) 2: 9EA96DF25D5D11F08A574048C4F9AE02.roa (hash: q6ZblRMV0uyhkappWvL+RGy5XexsiemwGej/lfgL9RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917877E, serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C Validity Not Before: Dec 5 05:08:33 2025 GMT Not After : Dec 12 05:08:33 2025 GMT Subject: CN=693268d1-9efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e7:dc:1f:91:42:72:41:f5:58:40:dc:6f:3f: f2:22:a2:88:40:88:28:ba:5e:ce:f2:10:6f:cb:60: f5:ad:68:1a:16:4a:41:7b:ff:ce:8d:05:67:a4:26: f1:42:9e:26:78:4b:c0:00:9a:1f:70:d7:c3:24:8d: 47:16:73:df:61:f4:ee:9d:2d:e6:96:d1:ee:bb:8d: 57:3a:68:5d:ed:c2:62:8c:da:c0:b3:b4:80:d6:83: 6e:51:89:00:3b:da:32:7b:0b:16:fe:ef:39:68:5b: 60:8d:aa:3e:04:5f:ca:f3:5a:8f:65:66:d1:90:7f: 5f:dd:80:ef:98:77:b1:9c:51:af:30:9b:78:f8:c0: 76:86:cd:63:86:f9:37:1a:be:3a:e5:74:b2:e0:da: cc:3f:c9:02:9e:f6:65:86:c6:d1:89:99:38:09:00: 9b:2f:0a:1c:7b:10:86:8b:d9:1e:4f:8c:22:6d:69: 0b:41:8b:45:94:ff:31:4b:5b:b6:e8:c3:5f:4a:84: fe:5b:17:df:00:eb:0b:af:bc:dc:16:2a:28:17:fb: 98:9e:ec:b7:52:ad:55:ca:7c:e6:9d:21:ef:1c:23: 1f:5c:ef:77:e6:81:e8:dd:a3:b3:92:6a:d6:88:49: 83:aa:cb:87:6f:06:8b:f1:17:78:20:e8:d2:0e:56: ea:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4A:AF:8E:1C:3F:57:EF:F4:DF:CD:41:03:94:3B:13:E2:DD:9B:BC X509v3 Authority Key Identifier: keyid:6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:78:e9:f6:c3:40:93:7d:8a:ee:7f:64:3b:19:d2:32:e6:cd: 94:74:33:4c:3b:fe:76:36:31:95:29:32:c2:4f:37:cf:54:b4: 14:54:99:8a:79:40:1d:22:96:98:98:e7:6c:50:3b:56:4e:97: df:9e:8b:6e:04:8b:87:28:d1:f2:1f:ee:5e:26:30:5f:25:dd: 96:25:36:50:aa:dc:dd:73:00:d8:c2:ec:82:24:42:d1:06:ef: e2:4c:71:c2:0e:34:b0:f8:e3:27:cc:0d:db:16:49:38:f1:d4: 43:7b:29:26:46:68:08:4c:c3:d6:f6:65:33:e5:95:fc:8a:1e: 6a:b3:25:4f:8e:b3:28:46:03:f8:d7:cf:c7:0d:cc:26:44:9d: 0a:92:a7:4f:22:6c:5f:f8:4b:72:d2:fb:f3:73:5b:3b:0e:af: 00:b2:9d:0f:41:69:e1:ac:dc:10:92:9e:4b:93:5f:6c:eb:22: 93:ac:1d:f3:26:dc:f7:9a:cb:07:34:83:61:19:1e:45:09:d1: fb:3f:eb:9f:0a:47:b5:68:25:73:53:f1:da:f4:c7:50:18:34: d7:95:ac:1e:6e:64:86:7f:3f:10:a0:64:bd:8c:ec:0c:8b:c0: 44:89:0c:34:d6:64:1a:ad:68:bb:e4:0e:7c:40:80:6a:9b:90: d8:a8:10:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 ODc3RTExMC8GA1UEBRMoNkQ4QUI2RkRFNTIxREMxMDZGOTQ4MjkyQjUwMkZENUEw NzM0ODM3QzAeFw0yNTEyMDUwNTA4MzNaFw0yNTEyMTIwNTA4MzNaMBgxFjAUBgNV BAMTDTY5MzI2OGQxLTllZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr59wfkUJyQfVYQNxvP/IioohAiCi6Xs7yEG/LYPWtaBoWSkF7/86NBWekJvFC niZ4S8AAmh9w18MkjUcWc99h9O6dLeaW0e67jVc6aF3twmKM2sCztIDWg25RiQA7 2jJ7Cxb+7zloW2CNqj4EX8rzWo9lZtGQf1/dgO+Yd7GcUa8wm3j4wHaGzWOG+Tca vjrldLLg2sw/yQKe9mWGxtGJmTgJAJsvChx7EIaL2R5PjCJtaQtBi0WU/zFLW7bo w19KhP5bF98A6wuvvNwWKigX+5ie7LdSrVXKfOadIe8cIx9c73fmgejdo7OSataI SYOqy4dvBovxF3gg6NIOVupdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsUqvjhw/ V+/0381BA5Q7E+Ldm7wwHwYDVR0jBBgwFoAUbYq2/eUh3BBvlIKStQL9Wgc0g3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4NzdFLzM4OUE2MkQyNUQ1 RDExRjBCNDlBNzg0N0M0RjlBRTAyL2JZcTJfZVVoM0JCdmxJS1N0UUw5V2djMGcz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYllxMl9lVWgzQkJ2bElLU3RRTDlXZ2MwZzN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 NzdFLzM4OUE2MkQyNUQ1RDExRjBCNDlBNzg0N0M0RjlBRTAyL2JZcTJfZVVoM0JC dmxJS1N0UUw5V2djMGczdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACJ46fbDQJN9iu5/ZDsZ0jLmzZR0M0w7/nY2MZUpMsJPN89UtBRUmYp5 QB0ilpiY52xQO1ZOl9+ei24Ei4co0fIf7l4mMF8l3ZYlNlCq3N1zANjC7IIkQtEG 7+JMccIONLD44yfMDdsWSTjx1EN7KSZGaAhMw9b2ZTPllfyKHmqzJU+OsyhGA/jX z8cNzCZEnQqSp08ibF/4S3LS+/NzWzsOrwCynQ9BaeGs3BCSnkuTX2zrIpOsHfMm 3Peaywc0g2EZHkUJ0fs/658KR7VoJXNT8dr0x1AYNNeVrB5uZIZ/PxCgZL2M7AyL wESJDDTWZBqtaLvkDnxAgGqbkNioEEk= -----END CERTIFICATE-----Generated at Sat Dec 6 22:08:14 2025 by rpki-client