This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft File: bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft (raw, json) Hash identifier: LVIbeKajk2VIrfT4CbcR0F3Uy4iLa6pOiJLhb5QszwE= Subject key identifier: 8A:11:A9:CB:2D:30:BF:6E:43:2B:40:11:52:F2:24:6C:5A:E1:57:8D Authority key identifier: 6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A Certificate issuer: /CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft Manifest number: 01AC Signing time: Fri 19 Dec 2025 02:26:26 +0000 Manifest this update: Fri 19 Dec 2025 02:26:26 +0000 Manifest next update: Fri 26 Dec 2025 02:26:26 +0000 Files and hashes: 1: bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl (hash: dVkxGukrTbc/WG5Nou85FBUMEYefeC3uAwJ9mEDiq0M=) 2: 59923F2CA72011EEA63ABF4AC4F9AE02.roa (hash: eNZ801LzfUJJfFcQXfd+LEPeNYyxq0IQnV6OW/T3oK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912978E, serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A Validity Not Before: Dec 19 02:26:26 2025 GMT Not After : Dec 26 02:26:26 2025 GMT Subject: CN=6944b7d2-ed87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:90:ce:35:28:91:61:83:5f:e0:93:2b:43:52: 11:b6:a0:a3:d1:71:96:f2:7c:a6:34:6c:dc:2e:05: 34:4c:18:86:55:3d:9c:50:21:48:ef:20:25:85:3b: 62:3d:f7:c0:ca:08:1a:f2:d8:04:3d:e2:47:db:40: 4d:a4:7c:79:39:d2:ab:7b:73:f9:2e:d6:1a:2d:a5: 7e:f5:95:09:57:b2:96:49:ba:ca:36:79:86:79:a5: 74:6f:c0:87:fe:14:9d:f4:b2:c9:8c:3b:34:45:41: f0:d2:dd:88:c0:9a:6d:1e:5f:b2:a9:ba:11:d5:82: 48:ba:2c:3f:26:4d:30:33:74:ef:9d:5f:6d:00:8c: 85:b3:be:fe:78:83:92:f3:70:24:df:be:fd:c7:85: 16:a2:92:23:50:97:8d:89:6d:97:27:b4:0b:09:9d: 44:45:29:72:1a:a3:4b:b3:d5:e7:cb:29:95:e9:5d: d8:76:61:54:dd:15:85:27:dc:6a:dd:d3:70:ec:26: ac:ba:19:5a:ef:09:c8:d7:65:1b:8a:95:e1:e9:d6: 0b:37:c6:b4:37:e3:3f:36:75:12:92:fd:56:a2:4c: 6f:d3:75:d9:f5:c0:74:c7:67:75:fe:95:d0:1c:d8: c4:df:98:81:b2:35:1d:34:83:83:60:e8:d6:ae:f6: 54:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:11:A9:CB:2D:30:BF:6E:43:2B:40:11:52:F2:24:6C:5A:E1:57:8D X509v3 Authority Key Identifier: keyid:6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:8a:96:ab:7c:38:e0:2f:02:99:30:9c:8a:ad:69:f7:b0:d3: a2:5b:81:95:b3:8c:55:2d:b2:41:10:6f:27:cf:d8:3a:7e:bb: 3f:43:0c:8f:eb:56:15:49:96:21:80:98:6a:a4:62:75:4a:de: 7b:c2:47:7c:e2:89:d4:97:66:e8:35:93:9a:16:d2:b4:22:da: 38:4b:a7:f7:a8:d6:77:e1:23:8f:da:b9:24:ff:d9:6f:5c:05: 6f:d4:a3:c5:59:6c:be:38:30:f9:07:a6:0e:02:b2:30:8a:3a: 84:72:ff:8b:64:a6:75:59:94:da:8f:13:e6:dc:76:3c:91:68: f7:e4:f0:33:6f:34:3c:d9:8a:19:1a:0c:98:b2:3d:ac:9e:e8: ef:a8:8f:72:71:d3:74:c2:a0:c7:46:33:ab:d5:54:b7:31:f6: 02:62:43:9a:39:45:f1:14:5d:b6:de:a3:85:06:09:60:2d:70: 8a:94:75:f5:af:fc:08:d8:a6:80:8d:b6:8a:36:25:a0:ca:cf: a1:56:fe:55:06:05:85:ea:c1:2f:6e:4e:4e:0c:6a:70:29:4d: 77:39:c4:0b:f2:77:87:3d:2b:21:ca:30:7b:0c:90:d8:cb:28: 6a:b7:dd:d4:46:76:07:42:b4:4c:76:53:f2:1e:57:0a:9f:8d: 09:c6:50:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3OEUxMTAvBgNVBAUTKDZERjA5MzU2NjBCNTI0RDJBODA4MDY0MzY4QjBBRkM1 NjUzOEE2OUEwHhcNMjUxMjE5MDIyNjI2WhcNMjUxMjI2MDIyNjI2WjAYMRYwFAYD VQQDDA02OTQ0YjdkMi1lZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5DONSiRYYNf4JMrQ1IRtqCj0XGW8nymNGzcLgU0TBiGVT2cUCFI7yAlhTti PffAygga8tgEPeJH20BNpHx5OdKre3P5LtYaLaV+9ZUJV7KWSbrKNnmGeaV0b8CH /hSd9LLJjDs0RUHw0t2IwJptHl+yqboR1YJIuiw/Jk0wM3TvnV9tAIyFs77+eIOS 83Ak3779x4UWopIjUJeNiW2XJ7QLCZ1ERSlyGqNLs9XnyymV6V3YdmFU3RWFJ9xq 3dNw7Casuhla7wnI12UbipXh6dYLN8a0N+M/NnUSkv1Wokxv03XZ9cB0x2d1/pXQ HNjE35iBsjUdNIODYOjWrvZUgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoRqcst ML9uQytAEVLyJGxa4VeNMB8GA1UdIwQYMBaAFG3wk1ZgtSTSqAgGQ2iwr8VlOKaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc4RS9ENUFFN0ZBQzUz Q0ExMUVFODA0OTkzNUVDNEY5QUUwMi9iZkNUVm1DMUpOS29DQVpEYUxDdnhXVTRw cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JmQ1RWbUMxSk5Lb0NBWkRhTEN2eFdVNHBwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc4RS9ENUFFN0ZBQzUzQ0ExMUVFODA0OTkzNUVDNEY5QUUwMi9iZkNUVm1DMUpO S29DQVpEYUxDdnhXVTRwcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGiparfDjgLwKZMJyKrWn3sNOiW4GVs4xVLbJBEG8nz9g6frs/QwyP 61YVSZYhgJhqpGJ1St57wkd84onUl2boNZOaFtK0Ito4S6f3qNZ34SOP2rkk/9lv XAVv1KPFWWy+ODD5B6YOArIwijqEcv+LZKZ1WZTajxPm3HY8kWj35PAzbzQ82YoZ GgyYsj2snujvqI9ycdN0wqDHRjOr1VS3MfYCYkOaOUXxFF223qOFBglgLXCKlHX1 r/wI2KaAjbaKNiWgys+hVv5VBgWF6sEvbk5ODGpwKU13OcQL8neHPSshyjB7DJDY yyhqt93URnYHQrRMdlPyHlcKn40JxlC9 -----END CERTIFICATE-----Generated at Sat Dec 20 07:16:00 2025 by rpki-client