This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft File: bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft (raw, json) Hash identifier: KBvaMVW9WgwzQpKy1S3UeIvFYaG2iwRITr5jGxmg9dk= Subject key identifier: AE:C4:1F:D5:C5:C1:FD:3D:79:97:46:E7:1F:63:FE:84:76:E5:03:C4 Authority key identifier: 6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2 Certificate issuer: /CN=A912781D/serialNumber=6C2297F82E218374941392652C9C8B3055C863A2 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft Manifest number: 29 Signing time: Tue 23 Dec 2025 06:30:27 +0000 Manifest this update: Tue 23 Dec 2025 06:30:27 +0000 Manifest next update: Tue 30 Dec 2025 06:30:27 +0000 Files and hashes: 1: bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl (hash: gPgL08qLZOxWjA2MA0SGHZIL3NLy/pZM3fJHJ5hszsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912781D, serialNumber=6C2297F82E218374941392652C9C8B3055C863A2 Validity Not Before: Dec 23 06:30:27 2025 GMT Not After : Dec 30 06:30:27 2025 GMT Subject: CN=694a3703-5809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:09:e9:dc:21:e6:2f:a8:31:6c:e2:9b:09: 51:4a:e7:68:56:e6:bb:22:d9:ee:a3:a9:0d:4b:4d: ba:b7:dc:00:66:59:ef:08:6d:e1:8f:77:cc:53:9a: a5:2d:31:5f:2a:ec:9c:4a:5f:fd:4d:10:f1:de:99: d5:95:dc:22:96:2f:79:30:fa:d9:50:a1:ca:7f:78: df:2a:5e:4d:dd:84:c9:86:6c:9d:c6:6e:25:a2:c8: 05:f6:a4:66:97:32:96:e3:32:10:94:33:75:77:95: 3a:e7:d8:7f:32:69:dc:a5:a5:99:2b:12:fc:a7:4e: ea:5d:cd:e1:95:84:1b:3e:dd:66:ad:ba:12:ad:0b: 06:57:82:8b:17:ba:d9:1f:64:97:4c:67:85:a8:e2: 3b:6d:dc:2d:b2:dc:d5:33:60:c4:98:86:75:bb:5e: e7:a5:4e:50:d2:2d:c5:67:fa:5e:47:48:22:c2:a5: f1:7d:e5:cf:36:44:93:36:55:a5:82:cf:04:5e:70: 78:ae:6d:a7:46:55:f1:f2:eb:c5:ff:aa:d0:64:b1: 9b:d0:2c:21:c9:17:ab:4a:2f:cf:2d:5f:8a:da:b9: 21:41:25:59:4c:a0:aa:16:b6:72:f6:ff:1c:50:b5: 11:ca:ea:64:67:33:0e:73:6f:2a:a8:15:26:31:69: 65:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C4:1F:D5:C5:C1:FD:3D:79:97:46:E7:1F:63:FE:84:76:E5:03:C4 X509v3 Authority Key Identifier: keyid:6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c6:bb:e1:10:77:c4:97:47:77:ea:66:9c:1f:22:b8:18:22: 46:9a:dc:2b:c5:ef:64:24:fd:21:7e:1b:f6:fa:3a:75:71:d6: 0c:a0:23:75:3c:0b:c5:10:97:a3:67:5c:6a:4f:44:13:1c:39: 8d:94:40:c3:22:0a:cd:9b:10:d9:f7:4a:40:a7:4b:27:c4:3d: c8:f4:9c:8e:7f:a6:a7:78:60:02:87:a1:2b:2f:86:06:65:d3: b6:ed:c9:4e:38:c2:f7:2a:60:34:99:be:84:a0:db:cb:8e:76: ce:83:fa:eb:15:07:3f:57:f6:1f:4a:26:d6:57:35:70:6c:dd: 96:f0:99:6d:ff:38:a9:d2:6c:a7:a4:ec:3c:7e:c8:29:85:79: a9:03:c9:48:ec:5d:2b:ba:33:6e:ac:6e:02:e2:80:82:54:11: 71:0c:73:6b:b2:d0:3d:be:ec:0f:75:c5:68:ea:ef:16:fd:ae: 32:d0:fc:9e:10:45:30:12:61:05:bd:3c:66:7e:e5:43:8e:bd: 6d:46:15:72:0f:ce:a8:fb:96:f1:3e:73:11:96:b6:e3:24:20: c2:fc:e1:3d:cb:ff:f6:9e:bf:66:0f:be:d2:49:4a:1c:34:13: 7c:e5:18:9b:ad:f3:61:82:84:c8:83:a8:4b:ab:b5:09:ba:b9: c0:58:5b:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NzgxRDExMC8GA1UEBRMoNkMyMjk3RjgyRTIxODM3NDk0MTM5MjY1MkM5QzhCMzA1 NUM4NjNBMjAeFw0yNTEyMjMwNjMwMjdaFw0yNTEyMzAwNjMwMjdaMBgxFjAUBgNV BAMMDTY5NGEzNzAzLTU4MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD3Anp3CHmL6gxbOKbCVFK52hW5rsi2e6jqQ1LTbq33ABmWe8IbeGPd8xTmqUt MV8q7JxKX/1NEPHemdWV3CKWL3kw+tlQocp/eN8qXk3dhMmGbJ3GbiWiyAX2pGaX MpbjMhCUM3V3lTrn2H8yadylpZkrEvynTupdzeGVhBs+3WatuhKtCwZXgosXutkf ZJdMZ4Wo4jtt3C2y3NUzYMSYhnW7XuelTlDSLcVn+l5HSCLCpfF95c82RJM2VaWC zwRecHiubadGVfHy68X/qtBksZvQLCHJF6tKL88tX4rauSFBJVlMoKoWtnL2/xxQ tRHK6mRnMw5zbyqoFSYxaWURAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrsQf1cXB /T15l0bnH2P+hHblA8QwHwYDVR0jBBgwFoAUbCKX+C4hg3SUE5JlLJyLMFXIY6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3ODFELzI3NjY3NjNFQTM2 NDExRjBCRDEzNjczQ0M0RjlBRTAyL2JDS1gtQzRoZzNTVUU1SmxMSnlMTUZYSVk2 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkNLWC1DNGhnM1NVRTVKbExKeUxNRlhJWTZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 ODFELzI3NjY3NjNFQTM2NDExRjBCRDEzNjczQ0M0RjlBRTAyL2JDS1gtQzRoZzNT VUU1SmxMSnlMTUZYSVk2SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACHGu+EQd8SXR3fqZpwfIrgYIkaa3CvF72Qk/SF+G/b6OnVx1gygI3U8 C8UQl6NnXGpPRBMcOY2UQMMiCs2bENn3SkCnSyfEPcj0nI5/pqd4YAKHoSsvhgZl 07btyU44wvcqYDSZvoSg28uOds6D+usVBz9X9h9KJtZXNXBs3ZbwmW3/OKnSbKek 7Dx+yCmFeakDyUjsXSu6M26sbgLigIJUEXEMc2uy0D2+7A91xWjq7xb9rjLQ/J4Q RTASYQW9PGZ+5UOOvW1GFXIPzqj7lvE+cxGWtuMkIML84T3L//aev2YPvtJJShw0 E3zlGJut82GChMiDqEurtQm6ucBYW3s= -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:29 2025 by rpki-client