This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft File: bKayrB3RewFNtsdnJ50Ixm5O_AU.mft (raw, json) Hash identifier: BqcHV/UmaFYGSpineiFn+sKRTTuwWMqXFDOcgUmapRU= Subject key identifier: 08:20:6E:75:9E:1C:0B:6A:B9:C6:B2:A9:7A:3A:57:C1:B8:DD:52:EA Authority key identifier: 6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05 Certificate issuer: /CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05 Certificate serial: 1007 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft Manifest number: 0FDF Signing time: Thu 04 Dec 2025 17:04:25 +0000 Manifest this update: Thu 04 Dec 2025 17:04:24 +0000 Manifest next update: Thu 11 Dec 2025 17:04:24 +0000 Files and hashes: 1: bKayrB3RewFNtsdnJ50Ixm5O_AU.crl (hash: 9h4AKjzaruclZgVd4l+NiP8rCR9TUtxHErAgmjiL130=) 2: 61A85BEE21CF11EBA0C85857C4F9AE02.roa (hash: FEdMa9ZJBaoWQIx6djE/7tcciw4VTrjU3qrHgN23mo8=) 3: FD22BBAE231F11EB99F53580C4F9AE02.roa (hash: XXa6SJA5QTgmd2S25JSyBGpv+kardlTpnYOCPB9Kf1Y=) 4: 425BF5FE7A4711EBAD125258C4F9AE02.roa (hash: OQe13tIv3uovK7+LLI22t0SruIOPUw/wbyXtMiDbVn4=) 5: A850C476026E11EBB2E0E72FC4F9AE02.roa (hash: MUbgi1W9az5Y+OqycFqv9bQ0JgxdrpLfybU7ZdOSDHk=) 6: 5FB07B1421CF11EBA0C85857C4F9AE02.roa (hash: OmYQIIbzZk6dmH6VxHcDDfUOUOfBGcECAJW72iuPNeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4103 (0x1007) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6B4, serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05 Validity Not Before: Dec 4 17:04:24 2025 GMT Not After : Dec 11 17:04:24 2025 GMT Subject: CN=6931bf19-d422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:73:82:9e:e4:7f:21:cb:d1:1f:87:33:61:4a: 45:57:dd:eb:3a:97:1e:56:3a:bb:21:7b:a4:38:24: 30:a6:e2:f2:fb:69:35:d3:06:84:06:6a:25:e6:32: 5e:2a:93:10:a9:1b:a0:a6:2d:f9:50:e3:06:b0:a7: 20:06:32:08:c7:bd:06:5d:fa:a2:d7:64:15:d7:47: 52:1a:59:ce:0b:a7:01:ae:c8:8e:4c:c3:e8:67:8d: f3:53:ac:3e:82:c7:e9:6f:cf:c6:5a:0a:3e:8e:8e: eb:41:5a:e6:5f:11:72:23:4b:aa:36:a6:ba:f4:d8: f0:c7:c1:2a:e4:d8:37:a5:b9:3b:0f:a7:6a:a4:1d: 50:4a:0d:fc:cf:74:3d:90:68:e3:dd:6a:3e:6f:e5: fa:8f:fe:74:4d:9e:33:92:31:37:be:8e:dc:aa:89: 2a:e9:4b:f7:fe:9d:fa:ec:d0:ab:52:70:12:bf:fd: e5:52:8d:28:d9:37:55:38:17:d3:a3:79:c9:e6:f4: 2d:11:51:21:2f:da:fc:ff:fb:75:56:0d:c7:f5:27: 54:39:d1:5c:b6:cc:92:00:c2:85:62:c5:1b:1c:6c: 49:95:b8:7a:2e:62:09:39:ea:2f:34:61:d2:95:e2: 3c:ee:92:67:ca:59:77:62:50:48:81:89:1f:e6:ca: bf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:20:6E:75:9E:1C:0B:6A:B9:C6:B2:A9:7A:3A:57:C1:B8:DD:52:EA X509v3 Authority Key Identifier: keyid:6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:32:c0:f0:98:4c:12:32:e6:e1:34:83:93:e0:7f:2e:51:28: 73:92:f8:e3:58:82:cd:71:3f:89:92:d4:fd:d0:29:6d:86:82: af:5a:01:d1:17:96:99:29:77:2b:23:d1:bb:dc:ac:8d:f4:e3: cd:bd:a2:d8:33:41:00:33:07:a5:f4:68:08:d0:09:09:7a:f0: bf:55:14:d8:69:97:af:98:64:ac:dd:3d:5d:94:51:04:8b:7a: 6e:15:48:69:3b:c6:ab:07:33:64:a9:4a:81:25:e5:f7:37:ae: e9:70:a4:65:74:c8:4e:d3:b8:7b:94:03:22:e2:b0:18:14:64: b0:3e:ba:5b:fe:e8:e5:9f:88:da:25:75:3e:b1:f4:bc:5e:51: 2e:9d:1a:e5:ed:f4:e7:8b:4e:e9:f4:ba:9e:a3:a5:74:6d:ce: 4b:e9:bd:41:ea:be:90:a9:50:17:35:e6:89:14:1f:d2:2b:f6: f6:c8:2a:0e:ce:ad:85:1b:33:b4:44:17:c5:18:b7:a1:1a:e2: a6:47:1b:ea:34:a8:aa:e8:a8:24:3f:8f:ac:d8:42:92:0b:21: 1a:fd:3e:73:db:05:40:67:2d:3c:f5:3a:99:a3:0e:64:cb:1a: 9c:5e:f9:23:ac:14:12:6a:e0:18:e4:49:05:77:c7:12:f4:29: 50:a0:ab:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2QjQxMTAvBgNVBAUTKDZDQTZCMkFDMUREMTdCMDE0REI2Qzc2NzI3OUQwOEM2 NkU0RUZDMDUwHhcNMjUxMjA0MTcwNDI0WhcNMjUxMjExMTcwNDI0WjAYMRYwFAYD VQQDEw02OTMxYmYxOS1kNDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nOCnuR/IcvRH4czYUpFV93rOpceVjq7IXukOCQwpuLy+2k10waEBmol5jJe KpMQqRugpi35UOMGsKcgBjIIx70GXfqi12QV10dSGlnOC6cBrsiOTMPoZ43zU6w+ gsfpb8/GWgo+jo7rQVrmXxFyI0uqNqa69Njwx8Eq5Ng3pbk7D6dqpB1QSg38z3Q9 kGjj3Wo+b+X6j/50TZ4zkjE3vo7cqokq6Uv3/p367NCrUnASv/3lUo0o2TdVOBfT o3nJ5vQtEVEhL9r8//t1Vg3H9SdUOdFctsySAMKFYsUbHGxJlbh6LmIJOeovNGHS leI87pJnyll3YlBIgYkf5sq/8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAggbnWe HAtqucayqXo6V8G43VLqMB8GA1UdIwQYMBaAFGymsqwd0XsBTbbHZyedCMZuTvwF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZCNC83MjZGNTFDMjYz RjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3Rk50c2RuSjUwSXhtNU9f QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLYXlyQjNSZXdGTnRzZG5KNTBJeG01T19BVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZCNC83MjZGNTFDMjYzRjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3 Rk50c2RuSjUwSXhtNU9fQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6MsDwmEwSMubhNIOT4H8uUShzkvjjWILNcT+JktT90ClthoKvWgHR F5aZKXcrI9G73KyN9OPNvaLYM0EAMwel9GgI0AkJevC/VRTYaZevmGSs3T1dlFEE i3puFUhpO8arBzNkqUqBJeX3N67pcKRldMhO07h7lAMi4rAYFGSwPrpb/ujln4ja JXU+sfS8XlEunRrl7fTni07p9Lqeo6V0bc5L6b1B6r6QqVAXNeaJFB/SK/b2yCoO zq2FGzO0RBfFGLehGuKmRxvqNKiq6KgkP4+s2EKSCyEa/T5z2wVAZy089TqZow5k yxqcXvkjrBQSauAY5EkFd8cS9ClQoKuY -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:07 2025 by rpki-client