This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft File: BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft (raw, json) Hash identifier: +/vJTrYYR5+9kdc5YaFIt12DCsnPlxFPrTngVXnDGNU= Subject key identifier: 12:0B:AE:EB:27:A7:05:7B:A6:88:ED:25:55:57:C0:4D:4B:09:2B:27 Authority key identifier: 06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24 Certificate issuer: /CN=A9122905/serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft Manifest number: 0281 Signing time: Tue 23 Dec 2025 00:33:52 +0000 Manifest this update: Tue 23 Dec 2025 00:33:51 +0000 Manifest next update: Tue 30 Dec 2025 00:33:51 +0000 Files and hashes: 1: BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl (hash: or57tE4jy06DZvAa6qpsNbPCx672JQekB9auun5t3Wc=) 2: 8BFE9EA6335911EDBC60AC44C4F9AE02.roa (hash: 8x2SsfQuIT881cDaqWjgKUso9bJl3sYc8ulFMGO/wmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122905, serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324 Validity Not Before: Dec 23 00:33:51 2025 GMT Not After : Dec 30 00:33:51 2025 GMT Subject: CN=6949e36f-4ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:22:63:b4:fb:a8:49:4b:2c:6d:ad:01:54:c7: e7:cc:40:eb:0a:a1:90:75:22:e1:41:22:96:ca:27: 3d:da:f9:12:36:5b:5a:3a:e1:b1:69:b7:9e:52:49: 37:9a:51:b2:7e:b3:b7:3d:13:63:4c:fa:95:cf:1d: 1a:6e:ca:40:75:06:02:c6:1b:99:46:bf:3d:37:b4: 46:e8:2c:bd:e4:39:0c:55:b5:b5:31:63:c4:4b:b7: 9c:b7:b7:8b:9a:06:d9:62:38:b7:d3:85:a7:58:95: 63:1b:ce:28:c3:80:6c:70:16:88:f0:e3:5b:00:47: d1:dc:6f:72:30:ff:3a:eb:12:07:69:34:b1:bb:a0: 59:5b:fc:e7:76:e0:96:e2:eb:be:ab:cc:d7:e2:b7: 15:3a:1d:83:3e:82:af:f3:33:7d:70:e2:e9:a3:28: 01:22:25:a2:16:e3:78:88:3e:c0:bc:8b:3e:76:34: b5:fd:86:6c:01:f6:36:b9:85:89:d8:52:56:8f:93: c4:bb:b8:fb:48:91:26:5b:6c:8c:4d:dc:85:67:a7: ef:ae:d1:18:a5:44:2b:57:93:4d:9f:15:1a:e9:fe: 29:72:0f:13:0e:db:52:ea:55:81:1e:4f:1c:8a:37: 24:4f:27:08:c6:59:06:45:87:e3:4f:a1:e3:b9:07: 87:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0B:AE:EB:27:A7:05:7B:A6:88:ED:25:55:57:C0:4D:4B:09:2B:27 X509v3 Authority Key Identifier: keyid:06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:6d:8d:7e:cc:f4:e3:81:b2:c5:25:6e:61:88:a3:9d:b8:5b: 19:d1:d1:f5:7b:bd:0d:65:87:9a:40:68:f4:d8:29:27:a8:d1: ef:41:c5:c9:d3:ef:ad:b8:84:d5:09:10:a4:2e:37:8f:4f:d4: d1:92:2b:12:93:ab:9e:19:9e:d1:a2:c0:8e:53:d1:14:4f:2b: aa:a5:a3:3d:97:c3:fe:48:01:92:38:85:9d:1e:4f:d6:77:f0: fa:7e:1b:f2:f2:0b:dd:d0:67:b2:3e:0b:70:56:7f:e6:0a:c3: a7:c1:9f:d2:58:16:02:55:f1:e8:7c:17:d2:84:04:80:34:ab: c8:0a:51:52:9e:f6:56:da:a0:04:72:40:0e:e2:c1:6b:6f:df: 14:a3:65:c3:5c:bd:f9:9f:00:19:5f:a3:ed:80:b1:66:16:bf: 58:eb:69:fd:92:59:1b:68:b5:e5:af:0f:e5:9c:7e:7d:cb:ba: 1f:96:bc:b9:cb:a9:6a:78:c2:5a:dd:14:86:31:a0:0d:39:46: 16:ae:57:32:03:f8:23:c1:39:db:c3:b4:c5:77:cd:32:fd:52: 01:c6:dd:e9:94:b2:80:5a:55:fd:1b:ce:2b:b5:4f:e8:24:15: f5:fd:28:c0:f5:8b:6a:70:2f:52:26:1d:20:71:31:00:04:a0: 55:78:cd:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5MDUxMTAvBgNVBAUTKDA2NDZDNTIyOTFENUNENERGNEEwRkY3ODY3ODRGQ0Y1 MjgzNDYzMjQwHhcNMjUxMjIzMDAzMzUxWhcNMjUxMjMwMDAzMzUxWjAYMRYwFAYD VQQDDA02OTQ5ZTM2Zi00YWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yJjtPuoSUssba0BVMfnzEDrCqGQdSLhQSKWyic92vkSNltaOuGxabeeUkk3 mlGyfrO3PRNjTPqVzx0abspAdQYCxhuZRr89N7RG6Cy95DkMVbW1MWPES7ect7eL mgbZYji304WnWJVjG84ow4BscBaI8ONbAEfR3G9yMP866xIHaTSxu6BZW/znduCW 4uu+q8zX4rcVOh2DPoKv8zN9cOLpoygBIiWiFuN4iD7AvIs+djS1/YZsAfY2uYWJ 2FJWj5PEu7j7SJEmW2yMTdyFZ6fvrtEYpUQrV5NNnxUa6f4pcg8TDttS6lWBHk8c ijckTycIxlkGRYfjT6HjuQeHWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBILrusn pwV7pojtJVVXwE1LCSsnMB8GA1UdIwQYMBaAFAZGxSKR1c1N9KD/eGeE/PUoNGMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjkwNS8xMUVCMDg2QTMz NTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpVMzBvUDk0WjRUODlTZzBZ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JrYkZJcEhWelUzMG9QOTRaNFQ4OVNnMFl5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjkwNS8xMUVCMDg2QTMzNTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpV MzBvUDk0WjRUODlTZzBZeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWbY1+zPTjgbLFJW5hiKOduFsZ0dH1e70NZYeaQGj02CknqNHvQcXJ 0++tuITVCRCkLjePT9TRkisSk6ueGZ7RosCOU9EUTyuqpaM9l8P+SAGSOIWdHk/W d/D6fhvy8gvd0GeyPgtwVn/mCsOnwZ/SWBYCVfHofBfShASANKvIClFSnvZW2qAE ckAO4sFrb98Uo2XDXL35nwAZX6PtgLFmFr9Y62n9klkbaLXlrw/lnH59y7oflry5 y6lqeMJa3RSGMaANOUYWrlcyA/gjwTnbw7TFd80y/VIBxt3plLKAWlX9G84rtU/o JBX1/SjA9YtqcC9SJh0gcTEABKBVeM1x -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:20 2025 by rpki-client