This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: sWKbff26VV0lpjaB2HBixSg8+lM9Vt9T+MjlJVuzFlE= Subject key identifier: 0B:3A:99:27:0A:0A:A1:73:A2:DB:3E:0B:A7:96:B8:CA:B3:C7:07:D0 Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 0F7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 0F70 Signing time: Thu 04 Dec 2025 17:08:40 +0000 Manifest this update: Thu 04 Dec 2025 17:08:40 +0000 Manifest next update: Thu 11 Dec 2025 17:08:40 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: BVHuwi/VnHkasRCbOq0NEYymk2ljdPVVN20podVanow=) 2: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (hash: ujwlh3xKcro8Gn6vri+ysk2OetBXOQN4CKfvRdsI/Ts=) 3: AA75695ACD2011F0B214A868C4F9AE02.roa (hash: J1q9B+GvWu0EHxlM4wrZ2tzbKSLE34bYP07mlS0yo3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3965 (0xf7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: Dec 4 17:08:40 2025 GMT Not After : Dec 11 17:08:40 2025 GMT Subject: CN=6931c018-ebe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:99:e2:82:b6:14:85:ae:ca:b9:55:90:0f: 78:f7:9e:49:34:3e:20:f3:60:87:c5:74:44:ed:48: 6b:1c:85:58:63:10:41:ee:7e:a1:66:41:fc:56:36: bb:0b:7e:c1:f9:32:88:2f:aa:01:96:bc:8b:eb:4d: 24:c0:5a:bc:4d:f8:97:79:76:f3:b3:f4:3c:15:f1: 18:45:23:ff:fe:7d:e5:ff:d0:35:ce:42:40:68:bb: a4:e8:dc:40:2b:f6:33:d6:75:ca:73:7c:48:2e:93: 63:84:a0:1b:f3:ad:bc:b2:4d:ee:e5:f2:9f:25:59: 4e:77:8c:91:ff:b2:45:ab:35:a7:76:34:5a:98:b7: af:2e:b1:b9:39:f1:04:43:67:12:ac:04:8f:72:18: 1a:1c:aa:af:b0:93:9d:7f:c1:17:4a:33:65:cc:9a: f5:00:20:3f:94:e9:6a:4b:43:fb:20:d8:f1:32:40: 5e:76:88:9e:1e:39:23:6b:65:49:d3:3c:e9:d1:86: 24:95:51:ff:f6:9f:be:28:e1:36:8e:73:1c:78:4e: 9c:98:44:c0:dd:08:8d:f9:da:2e:79:ef:5d:3f:6f: 61:dc:10:cc:ad:28:7e:42:01:d7:72:60:2a:60:03: 92:ec:86:4f:12:f5:6a:35:3d:25:58:24:87:96:aa: 50:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3A:99:27:0A:0A:A1:73:A2:DB:3E:0B:A7:96:B8:CA:B3:C7:07:D0 X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:18:1e:50:96:ce:4d:76:fd:14:05:02:eb:fb:6f:11:56:a1: 6a:4d:1e:f1:5d:2f:8e:a4:c9:fa:71:0c:17:c6:f9:22:11:b2: df:f5:a7:2b:05:3a:5f:06:c6:ce:d2:ea:b2:02:8e:df:2f:07: 79:c1:ae:ec:06:a6:96:0a:6b:9e:b0:cf:56:30:e0:1b:ae:8a: 90:9b:81:81:13:e3:6c:f5:b0:d6:f8:00:f9:08:00:e0:9a:da: 94:1a:e5:87:ff:88:53:10:7a:a9:44:97:2c:cd:98:22:1d:28: be:46:bf:1f:5f:04:f5:4d:63:47:fe:19:c9:62:0c:f9:62:e5: 88:95:d8:1b:45:73:1f:e2:3d:cf:39:ee:5f:3d:b4:31:7f:20: 0d:4d:5e:59:20:0b:b8:9b:df:7d:fa:4c:f6:99:05:2b:9b:46: ea:0b:f3:66:14:73:a1:b5:3c:ed:86:3b:9b:f1:7f:85:36:4c: 23:93:e7:15:90:9d:26:ab:b4:ea:52:6c:af:9c:d1:9e:6f:f7: 43:87:39:bb:0e:d3:cf:7f:6a:a1:2f:11:aa:ec:8b:41:86:86: 9c:f6:c8:74:03:3c:72:c2:09:68:70:42:d8:06:f9:1c:ef:0f: 4c:1c:77:9c:2a:b9:12:7d:87:95:34:e1:7f:ec:d3:1d:8a:6c: 97:75:55:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjUxMjA0MTcwODQwWhcNMjUxMjExMTcwODQwWjAYMRYwFAYD VQQDEw02OTMxYzAxOC1lYmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYeZ4oK2FIWuyrlVkA94955JND4g82CHxXRE7UhrHIVYYxBB7n6hZkH8Vja7 C37B+TKIL6oBlryL600kwFq8TfiXeXbzs/Q8FfEYRSP//n3l/9A1zkJAaLuk6NxA K/Yz1nXKc3xILpNjhKAb8628sk3u5fKfJVlOd4yR/7JFqzWndjRamLevLrG5OfEE Q2cSrASPchgaHKqvsJOdf8EXSjNlzJr1ACA/lOlqS0P7INjxMkBedoieHjkja2VJ 0zzp0YYklVH/9p++KOE2jnMceE6cmETA3QiN+douee9dP29h3BDMrSh+QgHXcmAq YAOS7IZPEvVqNT0lWCSHlqpQLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAs6mScK CqFzots+C6eWuMqzxwfQMB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzGB5Qls5Ndv0UBQLr+28RVqFqTR7xXS+OpMn6cQwXxvkiEbLf9acr BTpfBsbO0uqyAo7fLwd5wa7sBqaWCmuesM9WMOAbroqQm4GBE+Ns9bDW+AD5CADg mtqUGuWH/4hTEHqpRJcszZgiHSi+Rr8fXwT1TWNH/hnJYgz5YuWIldgbRXMf4j3P Oe5fPbQxfyANTV5ZIAu4m999+kz2mQUrm0bqC/NmFHOhtTzthjub8X+FNkwjk+cV kJ0mq7TqUmyvnNGeb/dDhzm7DtPPf2qhLxGq7ItBhoac9sh0AzxywglocELYBvkc 7w9MHHecKrkSfYeVNOF/7NMdimyXdVWb -----END CERTIFICATE-----Generated at Sat Dec 6 15:28:26 2025 by rpki-client