This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft File: bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft (raw, json) Hash identifier: DFRbmUuYV2CQfwuzGXtG+t33RN5+aHvv7vBcTp/Wbko= Subject key identifier: 08:04:1C:FB:29:9D:A1:C6:33:FD:5D:6B:14:21:C0:F2:8B:AC:25:16 Authority key identifier: 6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC Certificate issuer: /CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Certificate serial: 0CA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft Manifest number: 0D21 Signing time: Mon 22 Dec 2025 18:04:40 +0000 Manifest this update: Mon 22 Dec 2025 18:04:40 +0000 Manifest next update: Mon 29 Dec 2025 18:04:40 +0000 Files and hashes: 1: bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl (hash: fxSdnF3S86sTt9cjbYq3HeWsyvUlm1u4Epxa8tlawWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3235 (0xca3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119010, serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Validity Not Before: Dec 22 18:04:40 2025 GMT Not After : Dec 29 18:04:40 2025 GMT Subject: CN=69498838-aaa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:dc:4d:33:8f:b8:85:51:40:2d:c2:6c:3c: 79:eb:66:92:44:7a:31:a7:97:64:09:42:43:5b:3e: 3e:24:ad:ed:fc:a0:a3:45:5b:4d:6e:04:96:04:78: 0f:31:bd:42:05:a0:c2:89:1b:d8:59:3c:43:dc:e2: ac:5a:6b:90:3f:95:b4:73:83:79:3a:ea:64:e9:5e: 43:9e:0d:f5:ee:da:6c:8d:40:13:0f:3a:fb:69:58: a3:bc:95:40:ff:37:7c:6b:56:88:49:60:d0:ac:2e: cd:38:1b:f1:8f:d4:a7:40:70:9a:23:b7:a4:06:56: 38:13:89:89:3f:ed:75:f2:45:21:b5:d1:a0:3a:1a: fd:03:68:bf:13:cc:eb:ec:1c:cc:7f:dd:7d:ad:0e: 9f:6d:cd:90:c4:d1:4b:a9:d6:3f:24:fb:46:d3:65: 91:58:e4:e7:bf:bf:52:14:b2:fe:27:a2:f5:e0:b1: 6a:26:c3:f7:e4:1f:69:f3:fd:cb:9b:cf:61:26:86: 63:bf:25:a6:39:1e:4b:ad:4b:fe:95:31:c5:e6:8f: c2:ff:45:8b:8b:70:55:91:1c:d6:7c:70:12:cf:97: 54:cc:d4:3e:d6:d1:e8:f5:a4:49:4b:8d:5e:fe:ba: 33:72:61:0a:60:70:ff:34:3c:8b:a8:50:35:45:03: 35:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:04:1C:FB:29:9D:A1:C6:33:FD:5D:6B:14:21:C0:F2:8B:AC:25:16 X509v3 Authority Key Identifier: keyid:6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:89:b0:9d:95:2f:1d:f2:dc:0e:f3:ac:3b:a5:a1:f9:de:b7: 94:1c:c5:f9:04:06:9c:84:e1:2f:ab:2e:26:13:50:aa:a3:60: 9b:b5:3b:45:1e:22:bf:f1:41:b2:82:18:18:fe:fd:ed:a2:a8: bb:df:63:9b:1d:0a:16:2a:da:a8:3e:89:c7:44:b7:bb:54:24: 77:21:7d:6a:ba:e9:d9:38:a3:9a:f1:b3:f4:ec:10:a1:80:3e: bc:c3:b7:b6:ba:1c:f3:5f:53:b9:f4:75:2a:ac:b8:b4:1d:68: 96:be:11:c7:51:58:f1:5c:78:45:ba:46:f8:a9:75:76:d9:7a: bf:a4:27:f1:70:4c:e1:cb:3f:b3:29:b3:4a:eb:d4:00:74:4f: 3d:40:e6:ff:f1:85:9a:4a:2f:48:6c:19:fc:19:21:b1:1f:68: 5f:27:9d:d6:61:39:18:06:ff:6a:e9:9b:7e:d8:54:86:52:f6: f5:bd:fd:c0:ad:82:fa:40:f9:2e:02:d1:5c:93:b9:cc:58:cb: da:83:8f:19:2a:fc:61:99:be:92:0a:66:31:9c:2a:1c:57:a5: 1c:7d:23:0c:12:93:ea:bb:fb:b3:54:1e:52:66:9d:b5:51:aa: 3e:06:f5:48:f1:ee:fb:ca:0b:f0:30:57:88:9c:c0:f9:b8:21: 18:e5:ea:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwMTAxMTAvBgNVBAUTKDZDMDVFRUFGM0Y2ODcwNDFENTlBNDlCQTE3MDlCODMw MzJCNzRDREMwHhcNMjUxMjIyMTgwNDQwWhcNMjUxMjI5MTgwNDQwWjAYMRYwFAYD VQQDDA02OTQ5ODgzOC1hYWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXzcTTOPuIVRQC3CbDx562aSRHoxp5dkCUJDWz4+JK3t/KCjRVtNbgSWBHgP Mb1CBaDCiRvYWTxD3OKsWmuQP5W0c4N5Oupk6V5Dng317tpsjUATDzr7aVijvJVA /zd8a1aISWDQrC7NOBvxj9SnQHCaI7ekBlY4E4mJP+118kUhtdGgOhr9A2i/E8zr 7BzMf919rQ6fbc2QxNFLqdY/JPtG02WRWOTnv79SFLL+J6L14LFqJsP35B9p8/3L m89hJoZjvyWmOR5LrUv+lTHF5o/C/0WLi3BVkRzWfHASz5dUzNQ+1tHo9aRJS41e /rozcmEKYHD/NDyLqFA1RQM1pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgEHPsp naHGM/1daxQhwPKLrCUWMB8GA1UdIwQYMBaAFGwF7q8/aHBB1ZpJuhcJuDAyt0zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTAxMC82QTdFOTQwQTBD M0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NFSFZta202RndtNE1ESzNU TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBWHVyejlvY0VIVm1rbTZGd200TURLM1ROdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTAxMC82QTdFOTQwQTBDM0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NF SFZta202RndtNE1ESzNUTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9ibCdlS8d8twO86w7paH53reUHMX5BAachOEvqy4mE1Cqo2CbtTtF HiK/8UGyghgY/v3toqi732ObHQoWKtqoPonHRLe7VCR3IX1quunZOKOa8bP07BCh gD68w7e2uhzzX1O59HUqrLi0HWiWvhHHUVjxXHhFukb4qXV22Xq/pCfxcEzhyz+z KbNK69QAdE89QOb/8YWaSi9IbBn8GSGxH2hfJ53WYTkYBv9q6Zt+2FSGUvb1vf3A rYL6QPkuAtFck7nMWMvag48ZKvxhmb6SCmYxnCocV6UcfSMMEpPqu/uzVB5SZp21 Uao+BvVI8e77ygvwMFeInMD5uCEY5epT -----END CERTIFICATE-----Generated at Tue Dec 23 20:07:16 2025 by rpki-client