This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft File: bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json) Hash identifier: hjB9bOnBDvx9pjlnIzP7rq6wovTQLsZishSGzlW8oKo= Subject key identifier: 25:29:4B:6E:CD:47:4D:9C:28:E2:38:C5:9D:BE:F9:82:2C:BF:E9:A6 Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft Manifest number: EF Signing time: Tue 23 Dec 2025 04:28:23 +0000 Manifest this update: Tue 23 Dec 2025 04:28:22 +0000 Manifest next update: Tue 30 Dec 2025 04:28:22 +0000 Files and hashes: 1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: ToQWT6zacJ9zjz+DFyrb7FAVs3NzrXWZMv9MskFxHOk=) 2: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: mbFfYSX+BdjEnhF4lUo27j9bjQ0kInCW9ZTNXOQrp2Q=) 3: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: bYiGlJTSCLhia07K1lJYXHC5JgOu+61a9mLQrwhq6HI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Validity Not Before: Dec 23 04:28:22 2025 GMT Not After : Dec 30 04:28:22 2025 GMT Subject: CN=694a1a67-db06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:23:e3:08:46:b4:40:b9:b1:99:a7:93:5f:f3: 30:86:2a:46:6b:cc:81:5e:fe:72:f8:f5:54:59:ee: 8d:a3:14:65:06:a9:7f:7a:4d:17:9c:17:9b:9d:0e: d1:63:b4:d0:ba:0e:58:ac:2b:cc:8f:99:d6:3e:a4: ba:f9:7e:fa:93:e3:53:38:85:8f:c5:a8:f4:b7:6a: 03:44:89:59:7a:b4:c5:7d:b2:c1:d1:f2:68:fd:fb: ce:2b:bd:49:2b:5e:51:3c:e6:0a:cf:d9:77:6e:24: 13:80:c6:6b:9b:a6:ad:8b:0e:ad:e6:46:66:2a:a4: 55:d1:88:12:c8:56:4f:77:c5:0c:5f:19:a6:17:a7: b4:82:ce:cb:6a:6b:37:4d:85:3a:23:c0:b1:7d:d1: cf:03:a3:1e:1a:70:25:18:5a:5e:11:fa:f8:ec:5f: b0:63:72:91:fc:4b:5e:57:56:b6:cc:29:21:48:6a: 91:6a:9e:b3:0d:97:00:df:6e:7f:01:2a:16:a6:c9: 1c:b3:2e:14:4f:72:f8:d0:e5:f5:c0:cd:ff:34:31: 91:ae:6e:d9:0f:31:1a:f2:1d:24:7b:1b:63:6f:a2: 73:cf:52:49:f8:89:0d:e9:60:ab:51:51:38:ca:c4: 3e:55:67:f4:7a:d5:18:f9:e9:ea:fc:91:82:e9:3b: 32:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:29:4B:6E:CD:47:4D:9C:28:E2:38:C5:9D:BE:F9:82:2C:BF:E9:A6 X509v3 Authority Key Identifier: keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:49:dd:29:71:68:56:fa:11:74:34:a7:a4:10:07:64:72:59: d9:93:a1:62:e0:87:f2:c7:63:0e:03:7b:c2:47:e4:f1:7d:1e: ac:93:6f:92:fa:64:ab:02:e3:68:7f:38:8c:a6:8d:b9:1c:ad: ca:5a:1e:13:4b:eb:e3:9c:2f:c6:7a:ed:9c:54:9c:3d:30:19: 63:b4:5b:67:99:06:95:50:ac:38:e7:2d:b7:8e:a4:df:83:43: c5:16:2a:64:10:ac:76:d0:71:ac:f6:39:eb:4e:7e:89:9b:38: 22:a0:31:81:69:a4:bc:ad:1c:82:a0:e9:fc:92:9f:49:0c:a6: 8e:24:ac:4e:30:ec:91:d4:6e:bf:10:ab:5a:e8:6f:7c:45:63: 7c:e9:d1:e7:52:87:a7:f6:e3:79:b9:18:51:d3:19:3f:66:46: dc:92:9e:a3:d7:50:b9:9d:a8:8c:96:fc:ab:ff:8b:d5:ae:93: 83:98:0e:36:98:a8:b8:e7:3b:e2:9b:96:3f:e2:30:f9:cb:78: ed:9a:83:5b:5f:34:09:fa:fd:a3:7c:71:bb:e6:46:2d:3d:a3: 2d:48:f4:75:61:bb:92:c9:f1:bb:24:73:d0:00:a8:83:cf:2e: 10:95:4f:9f:1b:15:b2:b5:ce:3e:68:15:ac:96:aa:e1:b8:90: 94:94:ff:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDZDMkM3QzE0Mjg5RTZCQjVCNzI3NUIxQUE2QkZERkEw MjI3QjkwODYwHhcNMjUxMjIzMDQyODIyWhcNMjUxMjMwMDQyODIyWjAYMRYwFAYD VQQDDA02OTRhMWE2Ny1kYjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SPjCEa0QLmxmaeTX/MwhipGa8yBXv5y+PVUWe6NoxRlBql/ek0XnBebnQ7R Y7TQug5YrCvMj5nWPqS6+X76k+NTOIWPxaj0t2oDRIlZerTFfbLB0fJo/fvOK71J K15RPOYKz9l3biQTgMZrm6atiw6t5kZmKqRV0YgSyFZPd8UMXxmmF6e0gs7Lams3 TYU6I8CxfdHPA6MeGnAlGFpeEfr47F+wY3KR/EteV1a2zCkhSGqRap6zDZcA325/ ASoWpskcsy4UT3L40OX1wM3/NDGRrm7ZDzEa8h0kextjb6Jzz1JJ+IkN6WCrUVE4 ysQ+VWf0etUY+enq/JGC6Tsy3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUpS27N R02cKOI4xZ2++YIsv+mmMB8GA1UdIwQYMBaAFGwsfBQonmu1tydbGqa/36Aie5CG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS9EQUY4MUM0NDg2 RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3VzNKMXNhcHJfZm9DSjdr SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS9EQUY4MUM0NDg2RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3 VzNKMXNhcHJfZm9DSjdrSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYSd0pcWhW+hF0NKekEAdkclnZk6Fi4Ifyx2MOA3vCR+TxfR6sk2+S +mSrAuNofziMpo25HK3KWh4TS+vjnC/Geu2cVJw9MBljtFtnmQaVUKw45y23jqTf g0PFFipkEKx20HGs9jnrTn6JmzgioDGBaaS8rRyCoOn8kp9JDKaOJKxOMOyR1G6/ EKta6G98RWN86dHnUoen9uN5uRhR0xk/Zkbckp6j11C5naiMlvyr/4vVrpODmA42 mKi45zvim5Y/4jD5y3jtmoNbXzQJ+v2jfHG75kYtPaMtSPR1YbuSyfG7JHPQAKiD zy4QlU+fGxWytc4+aBWslqrhuJCUlP8L -----END CERTIFICATE-----Generated at Tue Dec 23 20:35:10 2025 by rpki-client