This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft File: BWvvRscxWDfrrepBeAueQaP7fqA.mft (raw, json) Hash identifier: 8M+DScOtOrX2DbztLoudheOePQKUqd++Frjvl7OThIk= Subject key identifier: CF:4D:C6:8B:78:C2:2F:3B:B2:97:0F:CD:82:BA:53:AD:2A:F0:3F:21 Authority key identifier: 05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0 Certificate issuer: /CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0 Certificate serial: 02E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft Manifest number: 02DC Signing time: Tue 23 Dec 2025 00:19:58 +0000 Manifest this update: Tue 23 Dec 2025 00:19:58 +0000 Manifest next update: Tue 30 Dec 2025 00:19:58 +0000 Files and hashes: 1: BWvvRscxWDfrrepBeAueQaP7fqA.crl (hash: qZ7mEq4crTQ0eiWcHn5FAxzmkhEKuKAF9Bxbps89P8w=) 2: 207B27560EE411EDA32ABE0FC4F9AE02.roa (hash: 6uwFx8/ukSzKKH+6QOFIRRiywJ0AdBaXItyBqWPv0ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912391D, serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0 Validity Not Before: Dec 23 00:19:58 2025 GMT Not After : Dec 30 00:19:58 2025 GMT Subject: CN=6949e02e-242a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a3:e2:33:1b:e6:73:ff:f1:1c:5d:cc:5e:8f: fe:a4:29:4b:4a:ab:2f:4e:7c:14:e8:e3:0f:d3:f6: dc:46:25:4f:22:df:9a:8d:55:d8:8b:94:e9:57:98: 6f:f7:0d:d8:26:26:e3:cf:c4:a0:de:45:e2:47:0b: f5:78:f8:ab:ed:a7:e1:1b:92:ae:7f:68:ad:42:64: 4e:be:b2:05:ae:05:20:40:88:14:96:57:5a:9f:4c: d5:bd:6e:64:74:e4:00:b4:5c:95:7f:ce:21:23:5c: 1e:a9:82:eb:c1:fb:54:28:45:33:a8:66:eb:c1:bc: ee:e5:90:ad:3d:00:24:db:ec:d3:7f:10:d3:f3:96: df:98:76:15:6b:da:65:9c:86:7b:37:06:ef:d7:b3: 1e:5a:f4:58:92:96:f6:60:79:36:af:4f:72:de:dc: 77:f8:01:5f:e8:a3:95:49:8d:39:56:d7:cd:a7:2d: fc:88:e3:c3:5a:ca:b0:78:f5:ec:09:50:93:c0:d6: ca:47:ad:a0:68:f1:db:f5:a1:cf:c2:3c:0d:22:fd: d7:e0:f2:8e:ee:d4:dd:62:da:68:4a:5b:6b:ed:a0: b4:81:05:ff:44:ba:6d:b1:f6:4e:93:7b:a1:9a:4d: e9:b7:49:41:ab:2f:84:8d:67:10:6b:00:88:c2:09: d5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4D:C6:8B:78:C2:2F:3B:B2:97:0F:CD:82:BA:53:AD:2A:F0:3F:21 X509v3 Authority Key Identifier: keyid:05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:04:18:9d:62:98:e6:3e:eb:f3:f4:c3:16:d1:bd:b6:ca:ea: 18:61:44:04:e8:2c:bf:c8:f3:8f:41:7a:ba:22:53:1b:7e:25: f2:7a:a4:36:32:03:57:47:c3:19:39:87:83:46:09:69:7d:b7: 4a:1a:d6:af:a3:39:b4:7f:8d:d4:ed:2e:a3:0a:b1:ee:f1:75: a2:23:7d:ab:cb:3b:0e:01:92:05:6f:ee:84:c4:fd:40:48:5c: 81:46:f9:a9:63:1c:fc:12:90:d0:af:4e:52:50:51:d7:fe:6c: 57:b6:34:6a:cf:50:53:1b:33:2a:2d:35:e5:c0:74:e0:84:48: 97:aa:7c:c7:4d:81:7e:f5:89:81:15:18:df:3e:65:34:2b:63: 18:18:f3:ce:f5:ac:4d:64:ea:dc:de:4b:2e:ff:ee:a7:3b:fa: 57:70:39:a1:f4:66:a4:4a:f7:7b:30:ac:72:f7:47:fd:f7:57: 00:ee:77:ff:7b:eb:41:98:72:8f:a2:56:34:88:13:6d:ad:ca: 82:1f:91:30:c0:39:d1:0d:6f:42:1c:87:3f:39:c5:b3:70:d4: 3f:80:40:49:e3:3c:67:0a:32:5b:20:ba:19:ca:2c:eb:74:5d: 4a:1e:ff:cf:da:24:a6:3e:79:01:36:68:94:d1:5a:2e:54:90: 18:73:e1:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM5MUQxMTAvBgNVBAUTKDA1NkJFRjQ2QzczMTU4MzdFQkFERUE0MTc4MEI5RTQx QTNGQjdFQTAwHhcNMjUxMjIzMDAxOTU4WhcNMjUxMjMwMDAxOTU4WjAYMRYwFAYD VQQDDA02OTQ5ZTAyZS0yNDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqPiMxvmc//xHF3MXo/+pClLSqsvTnwU6OMP0/bcRiVPIt+ajVXYi5TpV5hv 9w3YJibjz8Sg3kXiRwv1ePir7afhG5Kuf2itQmROvrIFrgUgQIgUlldan0zVvW5k dOQAtFyVf84hI1weqYLrwftUKEUzqGbrwbzu5ZCtPQAk2+zTfxDT85bfmHYVa9pl nIZ7Nwbv17MeWvRYkpb2YHk2r09y3tx3+AFf6KOVSY05VtfNpy38iOPDWsqwePXs CVCTwNbKR62gaPHb9aHPwjwNIv3X4PKO7tTdYtpoSltr7aC0gQX/RLptsfZOk3uh mk3pt0lBqy+EjWcQawCIwgnV1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9Nxot4 wi87spcPzYK6U60q8D8hMB8GA1UdIwQYMBaAFAVr70bHMVg3663qQXgLnkGj+36g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzkxRC9CNTcxQ0NCRTBF RTExMUVEODQ2NzRDMEVDNEY5QUUwMi9CV3Z2UnNjeFdEZnJyZXBCZUF1ZVFhUDdm cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JXdnZSc2N4V0RmcnJlcEJlQXVlUWFQN2ZxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzkxRC9CNTcxQ0NCRTBFRTExMUVEODQ2NzRDMEVDNEY5QUUwMi9CV3Z2UnNjeFdE ZnJyZXBCZUF1ZVFhUDdmcUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoBBidYpjmPuvz9MMW0b22yuoYYUQE6Cy/yPOPQXq6IlMbfiXyeqQ2 MgNXR8MZOYeDRglpfbdKGtavozm0f43U7S6jCrHu8XWiI32ryzsOAZIFb+6ExP1A SFyBRvmpYxz8EpDQr05SUFHX/mxXtjRqz1BTGzMqLTXlwHTghEiXqnzHTYF+9YmB FRjfPmU0K2MYGPPO9axNZOrc3ksu/+6nO/pXcDmh9GakSvd7MKxy90f991cA7nf/ e+tBmHKPolY0iBNtrcqCH5EwwDnRDW9CHIc/OcWzcNQ/gEBJ4zxnCjJbILoZyizr dF1KHv/P2iSmPnkBNmiU0VouVJAYc+HS -----END CERTIFICATE-----Generated at Wed Dec 24 14:13:56 2025 by rpki-client