This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft File: BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft (raw, json) Hash identifier: 2V7h4FmYat2lNAuqS2Tknwfi2i6aBVVgW0arFebV0kE= Subject key identifier: 70:B6:4A:F9:0F:FF:48:AD:42:55:A6:6E:0F:8E:35:F9:B8:56:03:E5 Authority key identifier: 04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9 Certificate issuer: /CN=A9120BC1/serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft Manifest number: 3A Signing time: Tue 23 Dec 2025 06:21:25 +0000 Manifest this update: Tue 23 Dec 2025 06:21:24 +0000 Manifest next update: Tue 30 Dec 2025 06:21:24 +0000 Files and hashes: 1: BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl (hash: AdaH7EzaEt0ZkkOcQm4yxOuh1cSDAwvmHtBNnTPKvP0=) 2: 309260868C7311F0A82E0E57C4F9AE02.roa (hash: pmJN4rlyAjyIEwtIxMwQqfFU7tME7Agin1X2d5LeW2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120BC1, serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9 Validity Not Before: Dec 23 06:21:24 2025 GMT Not After : Dec 30 06:21:24 2025 GMT Subject: CN=694a34e4-535d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:8a:9b:d3:b6:ea:a3:47:27:7f:93:0d:25: dd:60:fd:19:85:5c:0e:07:de:5f:3f:3e:8e:b9:54: 83:f2:09:70:9c:c7:f5:92:48:66:83:0b:bd:06:cd: ae:d2:fb:04:6f:4d:b2:a6:67:aa:b6:60:8e:a1:ba: ed:1b:1f:06:8e:12:bf:df:23:af:15:d7:f4:a8:c1: 34:2c:b8:c8:e9:61:8d:c7:84:c7:48:5d:a6:5a:c7: 8e:bd:5d:a2:9f:8f:e6:8e:2a:4c:f4:4b:0c:f9:1c: bb:87:64:05:38:33:3d:b0:8b:43:2f:c6:01:6e:92: d0:1d:54:d5:77:52:cc:c8:b6:4f:a0:2c:53:7f:49: 41:b6:fe:dc:34:86:64:61:98:97:fb:65:32:88:cb: a1:23:a5:d9:31:f5:84:f9:5c:27:b6:bc:0d:cf:f4: 38:28:4d:3f:f7:cb:e4:ba:42:7a:83:2c:62:d3:d9: 1f:23:2c:23:35:4d:f8:02:3e:8e:9d:e1:a6:9d:25: a4:03:b4:a9:59:b6:68:ee:4e:9e:03:65:50:65:10: 33:fb:24:a0:12:38:01:e6:8c:39:af:62:9c:09:47: 09:c4:31:65:59:87:5c:30:47:95:b4:44:33:2a:db: 46:11:d6:88:fe:b8:cd:79:e8:49:00:ea:80:6f:e6: ab:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B6:4A:F9:0F:FF:48:AD:42:55:A6:6E:0F:8E:35:F9:B8:56:03:E5 X509v3 Authority Key Identifier: keyid:04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:06:97:54:5e:27:e0:de:21:30:19:6e:ba:d2:57:26:77:4a: 98:5c:e4:6b:c7:24:43:67:23:0c:e2:6f:a0:38:60:42:3d:01: 15:0f:90:91:cf:55:4e:af:80:09:d5:4e:25:90:5c:26:58:d3: 98:6d:31:0c:c7:f8:39:69:04:e4:7a:10:bb:a0:27:2f:41:02: 31:bb:9b:71:a9:62:f1:e1:b6:6f:b4:be:a5:6a:b2:e2:6d:6a: 4e:73:fc:4e:77:20:7b:2b:1b:0c:b5:4e:b1:60:f4:d8:b8:5d: 88:2b:f6:3f:a4:fe:d1:03:d5:13:08:00:ec:7b:34:a6:c1:bb: 01:9f:29:f0:fd:9e:e2:0e:c1:d2:1f:6a:0d:90:71:e7:03:f6: 2d:71:24:b2:dd:98:3b:7c:27:2b:da:5b:73:6b:a5:1c:e2:19: ad:65:76:99:ae:b9:2e:ac:77:0b:01:f8:c3:a3:76:d7:93:20: c9:0f:34:f1:4c:f2:3e:73:a5:16:88:31:70:05:6e:a7:c2:66: 1d:96:d9:57:4d:02:7c:8b:06:30:a8:9a:e7:1b:f8:c1:58:e3: 30:5e:0b:f8:33:ca:2a:96:52:7b:d8:ca:6f:96:fd:30:6e:bb: f2:29:4c:da:92:2d:75:aa:ad:66:49:f6:6c:5f:86:43:d2:66: 51:bf:95:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MEJDMTExMC8GA1UEBRMoMDRBOEYyOEY1MjdFMTg5MTY3QUNDOTAzMENCRURBRDhB OUM0MTdCOTAeFw0yNTEyMjMwNjIxMjRaFw0yNTEyMzAwNjIxMjRaMBgxFjAUBgNV BAMMDTY5NGEzNGU0LTUzNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV94qb07bqo0cnf5MNJd1g/RmFXA4H3l8/Po65VIPyCXCcx/WSSGaDC70Gza7S +wRvTbKmZ6q2YI6huu0bHwaOEr/fI68V1/SowTQsuMjpYY3HhMdIXaZax469XaKf j+aOKkz0Swz5HLuHZAU4Mz2wi0MvxgFuktAdVNV3UszItk+gLFN/SUG2/tw0hmRh mJf7ZTKIy6Ejpdkx9YT5XCe2vA3P9DgoTT/3y+S6QnqDLGLT2R8jLCM1TfgCPo6d 4aadJaQDtKlZtmjuTp4DZVBlEDP7JKASOAHmjDmvYpwJRwnEMWVZh1wwR5W0RDMq 20YR1oj+uM156EkA6oBv5qvFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcLZK+Q// SK1CVaZuD441+bhWA+UwHwYDVR0jBBgwFoAUBKjyj1J+GJFnrMkDDL7a2KnEF7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwQkMxL0RBQzYwMzg4OEM3 MjExRjBBMkIwQUU1NkM0RjlBRTAyL0JLanlqMUotR0pGbnJNa0RETDdhMktuRUY3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQktqeWoxSi1HSkZuck1rRERMN2EyS25FRjdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw QkMxL0RBQzYwMzg4OEM3MjExRjBBMkIwQUU1NkM0RjlBRTAyL0JLanlqMUotR0pG bnJNa0RETDdhMktuRUY3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI4Gl1ReJ+DeITAZbrrSVyZ3Sphc5GvHJENnIwzib6A4YEI9ARUPkJHP VU6vgAnVTiWQXCZY05htMQzH+DlpBOR6ELugJy9BAjG7m3GpYvHhtm+0vqVqsuJt ak5z/E53IHsrGwy1TrFg9Ni4XYgr9j+k/tED1RMIAOx7NKbBuwGfKfD9nuIOwdIf ag2QcecD9i1xJLLdmDt8JyvaW3NrpRziGa1ldpmuuS6sdwsB+MOjdteTIMkPNPFM 8j5zpRaIMXAFbqfCZh2W2VdNAnyLBjComucb+MFY4zBeC/gzyiqWUnvYym+W/TBu u/IpTNqSLXWqrWZJ9mxfhkPSZlG/lb8= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:02 2025 by rpki-client