This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft File: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json) Hash identifier: l1KRugROqRCRkT23ysPdw6SU6Hgj9g8Dk1jaDKIFOqk= Subject key identifier: 38:6E:C1:CB:85:B5:56:0F:1C:5F:E0:05:4B:FA:93:E3:83:05:B2:58 Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 Certificate issuer: /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft Manifest number: 018A Signing time: Fri 19 Dec 2025 02:48:45 +0000 Manifest this update: Fri 19 Dec 2025 02:48:44 +0000 Manifest next update: Fri 26 Dec 2025 02:48:44 +0000 Files and hashes: 1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: PXvpllN3ATm1J8JtEOETFJYb6sAb83YYh4Ili6BJ0HQ=) 2: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: 1nis0P6SfwA6Mcq8SFQmwhxCRMw2QytQSM1sy/jc0jU=) 3: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: KgYF6AgzMh0SR6YaAVsJGBjcvKCcJWg6gXxqQiLpD64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Validity Not Before: Dec 19 02:48:44 2025 GMT Not After : Dec 26 02:48:44 2025 GMT Subject: CN=6944bd0c-49fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:49:08:ba:aa:df:bc:cc:db:7a:d2:06:f4:ce: 71:6c:11:1c:d8:76:66:ca:0d:f6:70:ca:66:5d:5c: 62:7d:00:77:11:42:8d:ac:5a:ce:8f:22:8c:7b:88: 59:b6:35:ac:89:94:71:87:80:cf:c8:8d:96:66:a4: 54:78:e3:f0:9f:6e:9b:16:b1:dd:ca:d6:ac:4d:21: a9:a5:83:06:08:44:1b:f3:d2:8e:85:81:6c:9a:c9: 79:06:77:9a:67:eb:9b:6d:fb:8c:4f:50:af:31:4c: 63:5d:45:aa:bd:3f:b9:c5:ec:e9:bf:6c:8c:9a:50: a4:f3:9c:0c:6e:84:58:db:a7:75:dd:aa:dc:35:d1: 79:86:be:e7:7d:0a:6c:3e:62:9e:e7:f5:01:07:3a: c3:bb:e9:df:4b:06:5e:42:af:dd:34:c3:2c:13:67: e4:5e:a1:e0:cd:13:43:8d:73:27:c1:6f:f0:4b:80: 54:c7:d8:c3:c5:d7:4d:c6:a0:37:d0:0e:78:8c:33: df:fe:cb:86:37:cf:34:86:69:c4:7e:14:ef:8f:de: 38:fa:82:a1:c8:2a:09:a5:8b:b7:5c:99:03:30:99: 4b:d5:84:c9:32:64:22:ea:b5:99:b4:ce:7d:35:02: 79:00:50:ca:33:87:ee:23:86:fa:2b:3a:91:da:c2: 7d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6E:C1:CB:85:B5:56:0F:1C:5F:E0:05:4B:FA:93:E3:83:05:B2:58 X509v3 Authority Key Identifier: keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:f7:2c:7a:41:6d:c4:80:9d:bd:83:f8:fa:86:0e:e8:55:7b: 52:d0:f8:bd:c5:93:3d:62:0b:32:c5:8e:d1:d6:80:81:07:c5: 8d:f1:31:25:98:d6:d9:17:c9:a9:f7:08:41:d6:fe:ba:f7:e9: 73:6d:7d:bf:19:56:04:69:d3:4d:d1:41:f1:32:ec:73:ef:b3: ba:cd:37:69:ba:12:a6:42:ef:e1:c6:fa:41:f5:20:c6:c0:9a: ef:90:af:46:b3:36:74:9f:3e:db:e9:45:5b:22:9f:71:b6:f7: 12:76:65:6d:20:0d:12:6f:64:84:d1:67:ee:9c:67:95:af:6d: 7d:de:48:d4:5b:98:86:a6:7b:fb:f0:fe:a2:47:66:ea:e8:55: fd:27:0c:a7:14:4f:60:94:27:fb:61:a4:46:f7:6d:5c:09:06: c3:f9:59:2c:b7:ef:2d:ec:90:ba:f6:86:bf:52:70:9e:e0:85: e9:33:1e:2f:9e:aa:4d:b3:5b:39:96:55:80:ed:04:d8:e7:73: 21:ea:90:50:30:ce:e6:e1:41:d3:9e:b5:0f:c8:de:df:d6:16: d3:18:0f:01:e5:60:2c:6a:78:f8:7b:61:b1:e8:17:17:d9:1a: d3:82:11:ea:d6:3c:55:1c:2b:fc:a4:43:ff:12:45:a7:2f:21: 9c:9b:6e:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzOUYxMTAvBgNVBAUTKDA3MUUyNTg1NUU2QTM1QjNEODA4RkY3QTYwQTA4Qjg3 ODEzNTYzNjIwHhcNMjUxMjE5MDI0ODQ0WhcNMjUxMjI2MDI0ODQ0WjAYMRYwFAYD VQQDDA02OTQ0YmQwYy00OWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEkIuqrfvMzbetIG9M5xbBEc2HZmyg32cMpmXVxifQB3EUKNrFrOjyKMe4hZ tjWsiZRxh4DPyI2WZqRUeOPwn26bFrHdytasTSGppYMGCEQb89KOhYFsmsl5Bnea Z+ubbfuMT1CvMUxjXUWqvT+5xezpv2yMmlCk85wMboRY26d13arcNdF5hr7nfQps PmKe5/UBBzrDu+nfSwZeQq/dNMMsE2fkXqHgzRNDjXMnwW/wS4BUx9jDxddNxqA3 0A54jDPf/suGN880hmnEfhTvj944+oKhyCoJpYu3XJkDMJlL1YTJMmQi6rWZtM59 NQJ5AFDKM4fuI4b6KzqR2sJ9uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhuwcuF tVYPHF/gBUv6k+ODBbJYMB8GA1UdIwQYMBaAFAceJYVeajWz2Aj/emCgi4eBNWNi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTM5Ri8yMkU1RjY1NjhB QzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5iUFlDUDk2WUtDTGg0RTFZ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J4NGxoVjVxTmJQWUNQOTZZS0NMaDRFMVkySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTM5Ri8yMkU1RjY1NjhBQzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5i UFlDUDk2WUtDTGg0RTFZMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn9yx6QW3EgJ29g/j6hg7oVXtS0Pi9xZM9YgsyxY7R1oCBB8WN8TEl mNbZF8mp9whB1v669+lzbX2/GVYEadNN0UHxMuxz77O6zTdpuhKmQu/hxvpB9SDG wJrvkK9GszZ0nz7b6UVbIp9xtvcSdmVtIA0Sb2SE0WfunGeVr2193kjUW5iGpnv7 8P6iR2bq6FX9JwynFE9glCf7YaRG921cCQbD+Vkst+8t7JC69oa/UnCe4IXpMx4v nqpNs1s5llWA7QTY53Mh6pBQMM7m4UHTnrUPyN7f1hbTGA8B5WAsanj4e2Gx6BcX 2RrTghHq1jxVHCv8pEP/EkWnLyGcm275 -----END CERTIFICATE-----Generated at Fri Dec 19 22:10:47 2025 by rpki-client