This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft File: bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json) Hash identifier: LN+COVCyZwwLUPVhyU0jDZTxy0gPcNmfQEfp9TMm6uc= Subject key identifier: BF:EB:06:8B:15:6B:FA:B8:61:9C:43:FF:6A:E3:F9:07:E5:0E:E8:F6 Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 Certificate issuer: /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Certificate serial: 086A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft Manifest number: 0864 Signing time: Mon 22 Dec 2025 20:00:31 +0000 Manifest this update: Mon 22 Dec 2025 20:00:31 +0000 Manifest next update: Mon 29 Dec 2025 20:00:31 +0000 Files and hashes: 1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: Sq0Ouvrt5ijTF9TU4MhY7wR3khpylGdnNrfBakyMWzI=) 2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: 2kaLA3OXyUts1hifmBFAJDN2z6cyzPCnOT2p5MOkteQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2154 (0x86a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Validity Not Before: Dec 22 20:00:31 2025 GMT Not After : Dec 29 20:00:31 2025 GMT Subject: CN=6949a35f-df7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b3:d8:a6:1e:e4:5e:ab:ed:6f:7e:ed:1f:72: 2a:8d:7b:0e:e9:d9:12:95:44:56:41:13:85:04:df: c3:06:5b:d6:b9:27:91:67:f4:1a:79:d6:db:91:94: 7c:c2:86:c6:f5:0a:5e:45:e1:7c:e9:77:1f:02:7c: 96:d1:11:05:70:91:96:af:a9:0c:18:14:af:6e:27: 29:05:59:ad:df:81:1f:ef:07:b8:29:ff:cc:eb:70: ba:e6:36:e3:e5:d0:b7:2a:30:5d:65:7b:85:a7:60: f0:55:23:e1:3c:03:68:08:1e:7f:a4:96:37:bd:4a: 5d:63:5f:54:b8:8d:8b:2f:bf:a5:4e:58:1a:65:f9: 2e:71:7b:78:19:95:25:6d:6b:31:f3:86:58:1e:69: 17:7d:74:c4:a3:1f:08:46:b9:63:fb:ed:f4:d1:2a: 84:18:bc:7f:90:21:33:c7:54:71:95:c7:3a:b9:86: 9b:17:88:0a:a5:94:94:fe:1f:ff:58:44:04:08:03: 8e:92:5e:2c:b2:e8:a8:c2:f6:5d:98:5d:ec:e7:65: 8f:cf:22:e3:3e:d0:d0:3a:2f:3d:fb:91:bb:97:14: 71:87:e2:9f:bf:11:b4:1f:02:0f:48:80:63:c0:b2: c6:de:3b:44:01:95:eb:c1:37:42:4e:35:55:29:49: 2e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EB:06:8B:15:6B:FA:B8:61:9C:43:FF:6A:E3:F9:07:E5:0E:E8:F6 X509v3 Authority Key Identifier: keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:f3:15:59:7a:a9:8a:c3:23:c3:0f:eb:12:7f:81:38:1f:38: 8c:45:18:f7:de:28:b2:47:b3:23:e7:e0:4f:f2:b7:c7:c7:d7: 17:8d:44:09:d1:7d:a5:d4:c8:50:31:d1:d1:c1:cc:b6:2b:18: 12:d9:a8:24:8e:76:02:a0:f3:c0:c3:38:47:b6:b5:f1:ee:8e: a3:fe:c8:e6:cc:87:38:74:8f:62:1c:12:54:9c:c9:f1:b9:29: 18:a9:38:0a:01:32:01:2f:7d:90:d2:b3:e3:55:26:67:d1:59: 84:4b:c1:20:5f:7b:46:4c:bf:29:39:90:f3:56:d9:a2:70:56: a9:10:1e:ad:6f:49:34:49:58:36:76:2f:54:fc:8b:73:05:bc: 27:5c:b8:b9:2f:2f:0e:51:08:64:f7:de:7f:cd:c3:e0:ce:64: 67:eb:d8:37:50:42:75:85:84:cd:63:4f:9e:18:18:ac:7a:99: a2:fc:02:b4:c0:e3:19:7f:97:dd:b8:90:78:9e:41:63:17:9f: f5:04:fc:bf:d7:34:2b:9f:cb:92:3b:e4:64:20:c3:f4:4b:f9: 27:4b:d2:75:7e:b7:a8:7e:30:7d:83:2f:25:6e:d1:92:63:58: c2:1b:a3:82:17:d8:3e:20:14:6b:1c:0c:ad:dc:91:41:16:c3: b1:21:8f:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5 MjQxMzY5ODEwHhcNMjUxMjIyMjAwMDMxWhcNMjUxMjI5MjAwMDMxWjAYMRYwFAYD VQQDDA02OTQ5YTM1Zi1kZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorPYph7kXqvtb37tH3IqjXsO6dkSlURWQROFBN/DBlvWuSeRZ/QaedbbkZR8 wobG9QpeReF86XcfAnyW0REFcJGWr6kMGBSvbicpBVmt34Ef7we4Kf/M63C65jbj 5dC3KjBdZXuFp2DwVSPhPANoCB5/pJY3vUpdY19UuI2LL7+lTlgaZfkucXt4GZUl bWsx84ZYHmkXfXTEox8IRrlj++300SqEGLx/kCEzx1Rxlcc6uYabF4gKpZSU/h// WEQECAOOkl4ssuiowvZdmF3s52WPzyLjPtDQOi89+5G7lxRxh+KfvxG0HwIPSIBj wLLG3jtEAZXrwTdCTjVVKUkucwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/rBosV a/q4YZxD/2rj+QflDuj2MB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL RTRpVTM4UklyZHlTUVRhWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/8xVZeqmKwyPDD+sSf4E4HziMRRj33iiyR7Mj5+BP8rfHx9cXjUQJ 0X2l1MhQMdHRwcy2KxgS2agkjnYCoPPAwzhHtrXx7o6j/sjmzIc4dI9iHBJUnMnx uSkYqTgKATIBL32Q0rPjVSZn0VmES8EgX3tGTL8pOZDzVtmicFapEB6tb0k0SVg2 di9U/ItzBbwnXLi5Ly8OUQhk995/zcPgzmRn69g3UEJ1hYTNY0+eGBisepmi/AK0 wOMZf5fduJB4nkFjF5/1BPy/1zQrn8uSO+RkIMP0S/knS9J1freofjB9gy8lbtGS Y1jCG6OCF9g+IBRrHAyt3JFBFsOxIY+2 -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:46 2025 by rpki-client