This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json) Hash identifier: 2oc1td4KYNs6k5lkG6dPtdiQih8BSr3aPsV3JJiBP5I= Subject key identifier: 89:AE:2C:20:C6:B5:42:37:AF:37:2A:8A:CD:3A:02:2D:4A:76:EF:7F Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 0569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft Manifest number: 0555 Signing time: Mon 22 Dec 2025 22:35:55 +0000 Manifest this update: Mon 22 Dec 2025 22:35:54 +0000 Manifest next update: Mon 29 Dec 2025 22:35:54 +0000 Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: 0XM6tO3e4XbgXQpmDb3hoX08haeLcb2GHzNT6lBLzaE=) 2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: dmJCq+TfcdKcTzpkdOc2Oy+/xUlQZgSzYrK0BxujDDA=) 3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: klkni3QfAoaIepGFi9OaOnNpBqMIdWLlo8tnHjdjSxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1385 (0x569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Validity Not Before: Dec 22 22:35:54 2025 GMT Not After : Dec 29 22:35:54 2025 GMT Subject: CN=6949c7ca-810d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4c:08:fb:e2:ae:c1:68:76:ce:e5:d8:8c:35: 25:48:be:b0:bc:91:3a:a9:98:aa:9a:9f:bb:a0:a3: 78:9f:99:c6:9d:47:ae:16:5c:60:79:63:1a:e1:58: 47:f2:d5:c0:f6:15:1e:6e:a1:3f:46:25:d9:d7:c0: 60:ef:7b:f7:b2:e8:d2:16:01:80:89:3c:a3:e3:57: e6:bd:1b:e4:9d:db:22:31:c1:39:25:8b:62:81:e8: 0d:b0:1f:f2:4f:33:e8:82:6a:80:5d:13:40:c1:fd: a2:91:d1:13:cf:27:87:c6:ec:61:ee:d5:8f:41:79: 72:73:82:b2:c1:76:7c:2a:56:3d:d3:4a:1b:33:08: be:ba:b4:65:a6:59:bf:89:b6:67:62:78:d7:4f:b9: 38:18:e3:de:20:16:50:9b:91:1f:50:1e:f1:54:ee: 78:b3:5e:10:b7:6d:82:e8:87:7e:c7:37:8b:b1:c5: e9:d4:e7:da:d4:b0:ff:f5:45:c9:0e:8d:be:61:a1: dc:85:e4:25:98:cf:97:0f:d1:8d:eb:af:b4:de:ea: 1f:fc:14:a2:e5:5d:61:e2:c5:57:2c:16:e6:45:91: e5:fd:ff:9c:02:ff:8b:65:7f:03:fe:a6:61:2c:7b: 7e:fa:93:11:71:ac:84:58:7c:fe:4a:b8:a7:23:df: cb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AE:2C:20:C6:B5:42:37:AF:37:2A:8A:CD:3A:02:2D:4A:76:EF:7F X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:eb:a9:e9:29:30:bb:61:dd:0e:d8:26:80:e8:58:7f:46:23: d9:94:b4:a9:f0:13:81:7a:7d:2b:6e:83:5b:c7:28:f6:1c:e9: f4:5c:30:5d:7f:73:d8:c4:ce:dc:3a:e7:80:65:2c:4e:ba:fd: 49:6d:23:b4:c1:a8:df:ff:ba:f9:74:5d:2f:16:6e:68:3c:5d: 43:4d:ec:88:89:54:60:61:a3:86:7d:d5:c6:f4:05:bf:0a:60: 0d:29:62:b1:ed:ba:fb:32:74:23:6c:c4:6c:cf:01:cd:92:96: b0:e0:de:a1:9a:26:a0:db:67:0a:52:8c:27:46:98:55:06:d7: 30:3f:5a:37:df:be:6f:b0:14:36:ab:84:cf:61:fc:35:c4:90: e9:f9:84:ba:4e:66:fe:2b:08:95:4b:97:4b:77:2e:29:b0:97: bd:73:db:5b:01:e4:b7:ac:f1:f3:cc:d2:68:d3:3c:44:6d:73: 6e:5c:36:84:d6:d9:03:5f:11:f9:a6:f7:5e:b3:be:51:35:ff: 52:31:1c:86:a5:17:6c:7a:dc:a8:04:6d:9f:b8:b1:43:0b:c4: 67:44:15:52:ec:37:46:78:cb:7d:4f:ad:04:c5:9c:d9:46:59: a5:5a:56:44:b4:09:46:8d:ac:d2:04:a7:8c:e1:c2:26:3f:8d: a4:e9:b5:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjUxMjIyMjIzNTU0WhcNMjUxMjI5MjIzNTU0WjAYMRYwFAYD VQQDDA02OTQ5YzdjYS04MTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UwI++KuwWh2zuXYjDUlSL6wvJE6qZiqmp+7oKN4n5nGnUeuFlxgeWMa4VhH 8tXA9hUebqE/RiXZ18Bg73v3sujSFgGAiTyj41fmvRvkndsiMcE5JYtigegNsB/y TzPogmqAXRNAwf2ikdETzyeHxuxh7tWPQXlyc4KywXZ8KlY900obMwi+urRlplm/ ibZnYnjXT7k4GOPeIBZQm5EfUB7xVO54s14Qt22C6Id+xzeLscXp1Ofa1LD/9UXJ Do2+YaHcheQlmM+XD9GN66+03uof/BSi5V1h4sVXLBbmRZHl/f+cAv+LZX8D/qZh LHt++pMRcayEWHz+SrinI9/LRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImuLCDG tUI3rzcqis06Ai1Kdu9/MB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkU3MC9CRUM1Q0E3MjIxMUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3Bp SXRfTGtNSzBDa3Q1S1Rkbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ66npKTC7Yd0O2CaA6Fh/RiPZlLSp8BOBen0rboNbxyj2HOn0XDBd f3PYxM7cOueAZSxOuv1JbSO0wajf/7r5dF0vFm5oPF1DTeyIiVRgYaOGfdXG9AW/ CmANKWKx7br7MnQjbMRszwHNkpaw4N6hmiag22cKUownRphVBtcwP1o3375vsBQ2 q4TPYfw1xJDp+YS6Tmb+KwiVS5dLdy4psJe9c9tbAeS3rPHzzNJo0zxEbXNuXDaE 1tkDXxH5pvdes75RNf9SMRyGpRdsetyoBG2fuLFDC8RnRBVS7DdGeMt9T60ExZzZ RlmlWlZEtAlGjazSBKeM4cImP42k6bUL -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:13 2025 by rpki-client