This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft File: bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft (raw, json) Hash identifier: RVdfKtMZ0zC/NXkzTGOGk6jFIcEDMGkRdwhxNEVym8E= Subject key identifier: F2:BF:17:55:FE:A2:EA:B8:3F:23:E1:32:97:E8:DB:C0:B5:4C:CA:8B Authority key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 Certificate issuer: /CN=A9117CD5/serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft Manifest number: 54 Signing time: Tue 23 Dec 2025 06:04:57 +0000 Manifest this update: Tue 23 Dec 2025 06:04:56 +0000 Manifest next update: Tue 30 Dec 2025 06:04:56 +0000 Files and hashes: 1: bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl (hash: x0d+ntjBbz7oINPSrc/dTUUuNfdU6c6omGKYYBdUEaY=) 2: 0BC2889A5FA911F0BE187C31C4F9AE02.roa (hash: J+H6csOZmYsW7V01nBKq8FR/OiHNtxdZOxR4C+LUEPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Validity Not Before: Dec 23 06:04:56 2025 GMT Not After : Dec 30 06:04:56 2025 GMT Subject: CN=694a3109-858a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:1d:36:2c:e9:b6:6e:93:a0:fe:7f:38:3d: fe:0c:9c:5f:dd:60:81:85:6b:a4:d6:77:a6:47:8b: ee:32:01:21:cf:d6:d0:6c:ef:e2:c6:71:f5:1e:da: 84:eb:56:51:f1:91:72:dd:88:56:b6:10:15:44:0c: fb:7b:ce:0e:36:9b:dd:11:46:de:40:1e:5c:2b:18: d5:a4:e8:16:20:32:28:97:93:e4:41:74:c1:fd:aa: 1d:88:b2:69:f2:ab:a9:46:17:f6:db:d1:8e:d5:8e: b9:d0:cb:06:12:fa:26:e6:31:0d:71:5d:5a:08:e1: d4:aa:22:1e:95:cc:ca:fd:bf:f9:af:5f:9c:3c:17: e6:da:4f:ee:a7:67:1b:ab:1b:ba:55:b9:c4:c3:83: d3:64:41:3c:d9:5a:dd:c1:9b:01:7c:b1:71:20:83: c3:32:51:ce:fd:6a:ab:74:6a:bc:8a:da:9c:ea:ee: a9:15:33:7d:96:37:0b:94:1f:b0:83:4f:6f:ec:75: 21:0c:f4:89:a6:26:35:52:c1:24:0e:08:b8:ce:50: ae:2a:04:61:f3:d9:23:52:8d:13:16:57:e1:6c:71: 1c:d9:a9:2c:3b:ab:86:79:10:ec:7f:82:b1:8b:7f: d4:dc:e2:ff:d9:be:5b:ff:d9:68:d8:c5:58:46:fa: b8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BF:17:55:FE:A2:EA:B8:3F:23:E1:32:97:E8:DB:C0:B5:4C:CA:8B X509v3 Authority Key Identifier: keyid:6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ef:51:2e:a6:8f:39:86:f8:d0:c8:e9:a7:b7:5b:8a:56:ec: 86:c9:af:99:c4:ac:a3:90:66:fd:7b:d4:99:4b:14:83:36:6a: aa:b3:d9:46:59:2b:8c:af:45:98:f1:00:ed:64:bd:2f:5f:2c: 1d:61:65:77:cc:73:69:68:0b:44:59:ff:0e:af:9f:bd:81:93: cb:47:2e:24:1f:55:da:c2:72:87:9c:b0:5a:c0:92:d5:27:96: 22:38:6d:0e:e1:61:ba:f2:dc:db:4f:36:f9:9c:b9:b7:d4:1c: 1b:89:12:0a:99:87:0b:59:48:c5:57:a1:fd:cd:55:9e:bf:c9: 8f:2f:76:ed:d9:ec:a4:30:71:64:76:96:53:12:1d:59:73:a8: 28:51:60:d9:84:56:55:d3:00:58:95:3d:f2:7f:92:a7:bb:a2: fa:5d:29:96:c0:9b:19:08:5f:16:c8:ad:89:d3:9e:cd:73:bb: 40:21:c6:d7:cd:d9:23:6f:44:c5:43:84:66:2d:3f:4c:fd:39: 1d:bf:f4:f6:3e:e5:c5:2a:77:58:63:07:26:8e:bf:40:b3:c3: 35:a1:ec:63:c8:37:c0:0b:6a:57:4c:51:0f:d5:0f:f4:47:3f: 8a:59:af:a2:07:4d:78:15:97:12:3f:ae:bc:6d:1c:bf:3f:40: 11:98:e4:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NENTExMC8GA1UEBRMoNkM0MkYwNEY4MEJCMDY4RUMyNDZDRTY4ODcxNzdFRjE3 Qzg2Q0YzMzAeFw0yNTEyMjMwNjA0NTZaFw0yNTEyMzAwNjA0NTZaMBgxFjAUBgNV BAMMDTY5NGEzMTA5LTg1OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGjR02LOm2bpOg/n84Pf4MnF/dYIGFa6TWd6ZHi+4yASHP1tBs7+LGcfUe2oTr VlHxkXLdiFa2EBVEDPt7zg42m90RRt5AHlwrGNWk6BYgMiiXk+RBdMH9qh2Ismny q6lGF/bb0Y7VjrnQywYS+ibmMQ1xXVoI4dSqIh6VzMr9v/mvX5w8F+baT+6nZxur G7pVucTDg9NkQTzZWt3BmwF8sXEgg8MyUc79aqt0aryK2pzq7qkVM32WNwuUH7CD T2/sdSEM9ImmJjVSwSQOCLjOUK4qBGHz2SNSjRMWV+FscRzZqSw7q4Z5EOx/grGL f9Tc4v/Zvlv/2WjYxVhG+rivAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8r8XVf6i 6rg/I+Eyl+jbwLVMyoswHwYDVR0jBBgwFoAUbELwT4C7Bo7CRs5ohxd+8XyGzzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0Q1LzY2QzMzMjBFNUZB ODExRjBCNTk3OEMyQ0M0RjlBRTAyL2JFTHdUNEM3Qm83Q1JzNW9oeGQtOFh5R3p6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkVMd1Q0QzdCbzdDUnM1b2h4ZC04WHlHenpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0Q1LzY2QzMzMjBFNUZBODExRjBCNTk3OEMyQ0M0RjlBRTAyL2JFTHdUNEM3Qm83 Q1JzNW9oeGQtOFh5R3p6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAHvUS6mjzmG+NDI6ae3W4pW7IbJr5nErKOQZv171JlLFIM2aqqz2UZZ K4yvRZjxAO1kvS9fLB1hZXfMc2loC0RZ/w6vn72Bk8tHLiQfVdrCcoecsFrAktUn liI4bQ7hYbry3NtPNvmcubfUHBuJEgqZhwtZSMVXof3NVZ6/yY8vdu3Z7KQwcWR2 llMSHVlzqChRYNmEVlXTAFiVPfJ/kqe7ovpdKZbAmxkIXxbIrYnTns1zu0AhxtfN 2SNvRMVDhGYtP0z9OR2/9PY+5cUqd1hjByaOv0CzwzWh7GPIN8ALaldMUQ/VD/RH P4pZr6IHTXgVlxI/rrxtHL8/QBGY5Jk= -----END CERTIFICATE-----Generated at Wed Dec 24 15:59:04 2025 by rpki-client