This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft File: BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft (raw, json) Hash identifier: NTjCTVAR3cvnEQ1eSUeTt3Zh8ysaIMHrGUcPZb1j8dU= Subject key identifier: 06:56:69:E1:1F:91:25:99:BB:9F:62:99:AE:4C:C1:1B:5C:24:F5:D0 Authority key identifier: 05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 Certificate issuer: /CN=A9199B85/serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft Manifest number: 0156 Signing time: Sat 06 Dec 2025 23:43:10 +0000 Manifest this update: Sat 06 Dec 2025 23:43:10 +0000 Manifest next update: Sat 13 Dec 2025 23:43:10 +0000 Files and hashes: 1: BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl (hash: WJFw0K/ArCvgK5poHQ24nZXsaCmRmbO3iaa+zQofsko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Validity Not Before: Dec 6 23:43:10 2025 GMT Not After : Dec 13 23:43:10 2025 GMT Subject: CN=6934bf8e-9bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d8:a0:89:a0:61:31:92:c4:e0:32:ff:44:87: 39:c5:14:60:e6:9b:bc:67:2c:12:01:75:f4:b0:f7: 4f:ba:49:0d:1f:b6:41:1c:f2:cc:5c:8e:48:c4:81: 7c:f7:3e:a4:0d:cc:2a:63:c9:b9:5d:2a:3a:4b:43: ac:c7:80:65:8c:b4:f8:d1:76:93:c5:f7:51:b1:80: fc:a9:11:d8:11:d7:27:4b:3c:30:dd:da:7f:8e:6b: df:5a:72:a6:95:4d:73:57:d2:63:dd:1c:83:1b:4a: a0:64:ca:c1:39:fa:d4:71:e8:76:34:a9:a5:12:e0: f6:30:14:cd:ca:28:fb:ba:7a:36:8b:52:ac:c3:ba: 8d:61:5f:ce:ba:29:f7:c5:41:59:91:86:bc:83:85: 94:55:b8:4c:24:85:a0:d7:3e:2e:4c:b1:29:08:53: 64:e0:bf:61:03:0b:14:cf:6a:d6:50:f7:06:7a:e4: 60:95:db:88:c5:fc:05:df:0a:17:54:01:63:c1:ce: 39:41:0c:ef:01:29:6a:85:05:d8:dd:d6:6c:9e:2f: a2:34:a9:6f:eb:b6:51:7e:f2:fd:ec:10:f6:71:0a: 3c:14:c8:70:61:df:af:cd:a4:02:aa:4f:5a:d4:e7: 2e:59:44:cd:eb:da:19:4f:6a:bb:0b:78:62:a6:b4: 0d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:56:69:E1:1F:91:25:99:BB:9F:62:99:AE:4C:C1:1B:5C:24:F5:D0 X509v3 Authority Key Identifier: keyid:05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:03:43:56:2d:4b:af:75:16:9c:7f:40:57:93:9d:bb:29:69: 00:3e:8d:1d:09:a7:78:8d:8c:b7:5f:82:56:12:ff:77:eb:03: ab:67:7a:35:c1:bc:a3:b5:bd:9f:10:97:7a:b8:3a:7e:f8:1f: c9:62:e7:01:95:f7:db:02:65:1b:df:dd:80:68:04:6a:e5:8c: 34:0e:d2:e4:f1:5d:8a:76:47:80:a1:a2:38:a6:b0:36:4f:58: 8c:32:19:37:c6:16:e6:06:40:ce:15:53:4a:cf:78:50:7f:11: 8f:fe:1e:f8:00:85:13:78:82:fe:2f:c4:34:77:10:f0:63:1d: 6e:0b:0a:33:1a:a6:c9:b5:df:6c:ac:ec:3c:96:86:06:60:b3: 54:85:49:66:da:d8:c5:8c:14:5e:cc:6d:91:98:33:0d:e0:26: db:5e:6b:2a:ac:ba:5e:d2:04:5e:cd:dd:c5:d2:9a:9b:9a:a2: 6a:08:08:1a:97:f8:78:26:54:17:30:1d:91:ef:01:fb:8d:67: 0f:a9:82:5b:66:c1:02:19:bb:d7:bf:84:c3:a1:c3:e6:f7:8a: 37:1d:9b:5c:a8:59:77:60:5f:97:fa:4d:7f:11:b5:fe:08:1d: bf:c0:4c:4b:67:30:96:55:41:be:14:3f:0a:1c:af:c9:62:57: cd:04:1f:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDA1QTMzNkY2NDZDNjgzMzc4OUI2QUU3QzkyMDcyQjdG OTREOURDMjkwHhcNMjUxMjA2MjM0MzEwWhcNMjUxMjEzMjM0MzEwWjAYMRYwFAYD VQQDEw02OTM0YmY4ZS05YmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdigiaBhMZLE4DL/RIc5xRRg5pu8ZywSAXX0sPdPukkNH7ZBHPLMXI5IxIF8 9z6kDcwqY8m5XSo6S0Osx4BljLT40XaTxfdRsYD8qRHYEdcnSzww3dp/jmvfWnKm lU1zV9Jj3RyDG0qgZMrBOfrUceh2NKmlEuD2MBTNyij7uno2i1Ksw7qNYV/Ouin3 xUFZkYa8g4WUVbhMJIWg1z4uTLEpCFNk4L9hAwsUz2rWUPcGeuRglduIxfwF3woX VAFjwc45QQzvASlqhQXY3dZsni+iNKlv67ZRfvL97BD2cQo8FMhwYd+vzaQCqk9a 1OcuWUTN69oZT2q7C3hiprQNhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZWaeEf kSWZu59ima5MwRtcJPXQMB8GA1UdIwQYMBaAFAWjNvZGxoM3ibaufJIHK3+U2dwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS83RDg2QTIzOEM2 MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6ZUp0cTU4a2djcmY1VFoz Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JhTTI5a2JHZ3plSnRxNThrZ2NyZjVUWjNDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS83RDg2QTIzOEM2MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6 ZUp0cTU4a2djcmY1VFozQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyA0NWLUuvdRacf0BXk527KWkAPo0dCad4jYy3X4JWEv936wOrZ3o1 wbyjtb2fEJd6uDp++B/JYucBlffbAmUb392AaARq5Yw0DtLk8V2KdkeAoaI4prA2 T1iMMhk3xhbmBkDOFVNKz3hQfxGP/h74AIUTeIL+L8Q0dxDwYx1uCwozGqbJtd9s rOw8loYGYLNUhUlm2tjFjBRezG2RmDMN4CbbXmsqrLpe0gRezd3F0pqbmqJqCAga l/h4JlQXMB2R7wH7jWcPqYJbZsECGbvXv4TDocPm94o3HZtcqFl3YF+X+k1/EbX+ CB2/wExLZzCWVUG+FD8KHK/JYlfNBB+P -----END CERTIFICATE-----Generated at Sun Dec 7 06:24:05 2025 by rpki-client