This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft File: BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json) Hash identifier: U85Gzyc4bNkxa5iR9bxaBsJHaxgzw6uYErsqP7V3mU0= Subject key identifier: 9A:75:D2:63:13:F9:B9:5F:F2:C5:AF:10:7E:A4:9F:D0:F4:2C:95:A3 Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft Manifest number: 01EA Signing time: Sun 21 Dec 2025 01:55:04 +0000 Manifest this update: Sun 21 Dec 2025 01:55:03 +0000 Manifest next update: Sun 28 Dec 2025 01:55:03 +0000 Files and hashes: 1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: shhaEnucHYSRkPlyJKhWEyvmTKLkDm+KQnvLfqtHDxk=) 2: EA22589E373C11F0909EF25DC4F9AE02.roa (hash: pK7K0oDGB09OEHam5uLFYf312YyVDqFKY5nBRiwk3eo=) 3: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: Q3/I4xZV8CvWyhr+A+P9zzW5K8pcc6S3V6pLPjC2BoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Validity Not Before: Dec 21 01:55:03 2025 GMT Not After : Dec 28 01:55:03 2025 GMT Subject: CN=69475378-221a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:66:a4:c6:ba:26:09:f2:79:22:12:ee:bc:1a: 15:d2:6c:0b:e3:ba:83:2e:e3:b9:bf:02:58:79:95: 08:53:dc:15:0b:4b:21:25:38:54:37:b7:1f:2f:2d: ac:7f:88:e3:05:b4:6e:d2:fb:2b:f8:48:22:f5:46: 86:4c:c2:2c:aa:86:62:af:7f:e8:f3:47:17:c2:55: 1d:9b:32:b9:06:08:b0:3f:2f:a3:f3:34:23:ee:05: 95:ea:b3:f5:ef:4f:b9:1a:d3:69:30:a1:50:be:c7: 6e:b3:96:4b:cb:a7:a7:94:d1:ca:8f:eb:26:8a:a6: 30:7e:3b:76:f3:26:e6:cc:cd:7d:3a:02:78:cb:bf: 11:85:20:c9:b2:be:76:60:89:67:00:68:58:2d:a0: ae:16:66:87:2d:ce:fa:f4:38:ed:07:1a:23:de:2d: d2:e6:c3:33:aa:6b:77:47:82:e7:d5:47:20:44:25: 0e:16:6f:8f:7f:e9:80:06:59:94:47:72:1b:78:b7: e1:1d:9b:65:42:c1:00:55:c8:04:e3:2c:d2:2f:bd: 0a:85:09:8e:e7:e7:c0:ac:27:72:53:de:32:4e:fd: a3:9c:33:9d:98:ab:7f:d4:29:94:16:e4:24:af:30: 05:25:16:fe:dc:85:a2:5a:74:12:b6:a2:85:65:04: b0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:75:D2:63:13:F9:B9:5F:F2:C5:AF:10:7E:A4:9F:D0:F4:2C:95:A3 X509v3 Authority Key Identifier: keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:87:55:11:ac:d1:0a:e7:49:a9:a0:5f:f9:80:7c:42:c5:da: 2e:22:22:1e:11:64:62:a3:bf:9b:ed:1a:86:b1:99:23:c4:87: d6:f9:be:1c:27:fe:e8:a2:98:5b:51:80:01:cc:64:c0:67:ed: 93:12:1d:86:54:70:fa:32:72:9d:7d:0d:da:f7:89:06:8f:24: f5:70:a0:b9:4d:48:15:0b:d5:e4:c6:e1:ad:62:d6:5f:74:5c: cb:1f:7c:c2:39:ef:4d:de:3e:46:49:d1:19:32:a2:f2:a5:57: 4c:ba:42:0b:f4:71:6a:16:05:ce:2a:95:61:7e:50:00:b2:59: c7:9d:61:88:bd:8c:65:ac:1f:6a:e0:63:4d:98:d0:90:1b:13: 12:a5:9e:99:6f:04:dd:2b:1c:65:46:64:83:e8:ad:6e:1b:eb: 20:4d:fb:e7:a1:6a:75:1e:2e:10:5f:16:c5:41:07:67:9b:32: c7:7f:f1:b7:79:93:69:34:f0:ea:00:ca:e5:2d:78:85:45:b4: d3:9c:b5:c5:1f:04:2d:dd:b4:3a:1d:c3:70:a1:14:66:66:bf: ae:42:38:6b:1b:62:cc:ed:8c:13:8d:e5:f4:42:3b:ff:9f:ea: 76:39:08:c8:2a:cf:91:d7:fa:ec:62:19:22:df:03:98:c4:af: b6:9d:46:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFBNzkxMTAvBgNVBAUTKDA1Mjk4NUYyQkUyOEM3OUU3NEVGRjREQjRDNzE0MjI4 NDU0NzczNUMwHhcNMjUxMjIxMDE1NTAzWhcNMjUxMjI4MDE1NTAzWjAYMRYwFAYD VQQDDA02OTQ3NTM3OC0yMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2akxromCfJ5IhLuvBoV0mwL47qDLuO5vwJYeZUIU9wVC0shJThUN7cfLy2s f4jjBbRu0vsr+Egi9UaGTMIsqoZir3/o80cXwlUdmzK5BgiwPy+j8zQj7gWV6rP1 70+5GtNpMKFQvsdus5ZLy6enlNHKj+smiqYwfjt28ybmzM19OgJ4y78RhSDJsr52 YIlnAGhYLaCuFmaHLc769DjtBxoj3i3S5sMzqmt3R4Ln1UcgRCUOFm+Pf+mABlmU R3IbeLfhHZtlQsEAVcgE4yzSL70KhQmO5+fArCdyU94yTv2jnDOdmKt/1CmUFuQk rzAFJRb+3IWiWnQStqKFZQSwdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJp10mMT +blf8sWvEH6kn9D0LJWjMB8GA1UdIwQYMBaAFAUphfK+KMeedO/020xxQihFR3Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUE3OS9ENENBMTVDMEY5 NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1NTA3X1RiVEhGQ0tFVkhj MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JTbUY4cjRveDU1MDdfVGJUSEZDS0VWSGMxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUE3OS9ENENBMTVDMEY5NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1 NTA3X1RiVEhGQ0tFVkhjMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSh1URrNEK50mpoF/5gHxCxdouIiIeEWRio7+b7RqGsZkjxIfW+b4c J/7oophbUYABzGTAZ+2TEh2GVHD6MnKdfQ3a94kGjyT1cKC5TUgVC9XkxuGtYtZf dFzLH3zCOe9N3j5GSdEZMqLypVdMukIL9HFqFgXOKpVhflAAslnHnWGIvYxlrB9q 4GNNmNCQGxMSpZ6ZbwTdKxxlRmSD6K1uG+sgTfvnoWp1Hi4QXxbFQQdnmzLHf/G3 eZNpNPDqAMrlLXiFRbTTnLXFHwQt3bQ6HcNwoRRmZr+uQjhrG2LM7YwTjeX0Qjv/ n+p2OQjIKs+R1/rsYhki3wOYxK+2nUbt -----END CERTIFICATE-----Generated at Tue Dec 23 00:09:13 2025 by rpki-client