This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft File: bkVzNIaAMm09remFIV0iZii58Ws.mft (raw, json) Hash identifier: Nu+BKP6wTeiNTorHOfxRXhmPWvq0ONv0E6vUugCSwa4= Subject key identifier: CA:E8:AE:B9:52:00:C5:E8:46:73:D6:BE:68:57:D8:E8:84:47:A3:6C Authority key identifier: 6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B Certificate issuer: /CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft Manifest number: 013E Signing time: Tue 23 Dec 2025 03:29:40 +0000 Manifest this update: Tue 23 Dec 2025 03:29:39 +0000 Manifest next update: Tue 30 Dec 2025 03:29:39 +0000 Files and hashes: 1: bkVzNIaAMm09remFIV0iZii58Ws.crl (hash: T08bM3FfNJdxx1PGqng7oPW7A+BC02ed/aFhDq6Q9bo=) 2: 47B1ABEA005711EF9DA70542C4F9AE02.roa (hash: EKbBGVNf6UZGjGH5PT+x5TqElAgqJbm8pSoP/IIyglU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0FB, serialNumber=6E4573348680326D3DADE985215D226628B9F16B Validity Not Before: Dec 23 03:29:39 2025 GMT Not After : Dec 30 03:29:39 2025 GMT Subject: CN=694a0ca4-a547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:47:d7:b8:19:ad:b1:e7:d1:86:d6:bc:b7:22: d0:69:3b:46:2e:1f:a6:66:d0:0c:44:ed:f3:26:7d: 3d:3f:ca:2d:bf:49:d8:d8:3a:b9:96:76:52:78:bf: 4e:8b:8a:e8:70:7c:c5:45:fd:f7:11:53:1f:c3:43: ed:00:67:a3:1b:b0:72:19:43:f5:14:2d:32:3c:5f: e4:95:bf:df:92:2a:53:06:26:6f:e6:5e:40:99:9c: 55:77:64:cc:82:33:d8:7a:27:b6:d5:f3:42:11:22: 6a:c9:22:5f:58:29:9b:d4:d1:6c:3e:d9:19:2d:df: 30:b0:e0:c1:c1:df:86:b4:36:6a:fa:87:c3:a9:3a: 67:b5:c7:0f:65:b1:14:86:e3:48:fd:ef:5a:57:73: dd:51:b9:1b:02:a2:69:c1:ff:32:f6:fd:ec:5e:15: 3a:e5:f8:8c:e8:89:34:bc:df:2e:01:89:b2:98:2a: e7:bd:6c:8a:76:6e:db:c6:69:95:84:a0:2d:cf:00: 25:fa:5f:88:50:32:2f:e8:c2:8a:d7:3d:32:e4:a7: 9a:62:88:06:4f:58:ba:26:c1:d1:1e:01:47:77:9b: 60:d1:e6:d2:35:88:89:60:31:f4:5b:d6:95:c6:fc: 3b:24:55:9f:ec:31:04:98:a4:5f:38:92:4f:06:4f: d2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E8:AE:B9:52:00:C5:E8:46:73:D6:BE:68:57:D8:E8:84:47:A3:6C X509v3 Authority Key Identifier: keyid:6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:f6:5b:07:ca:80:77:4c:82:d2:88:9d:dc:db:9d:fd:ca:f5: 85:60:6a:d1:c7:7a:76:c0:c5:eb:17:1c:a4:cb:03:66:a9:20: 7f:74:93:9a:55:ec:6f:81:9c:59:5c:27:a7:99:26:d1:61:f8: 23:bb:83:9a:68:14:97:bf:22:3c:5b:e3:bd:41:98:8e:9b:94: b8:21:e5:06:f8:0a:5f:51:76:9a:bf:04:0f:04:ac:f5:24:5e: b6:65:4f:e3:5d:9c:6c:1f:3d:f8:18:5a:ba:88:8c:8e:47:a8: 7e:bb:e4:b8:72:3d:ac:56:53:83:ea:6a:94:ee:b5:d4:40:9b: ef:ed:d8:dd:e1:8c:27:3a:ed:08:c5:11:73:55:96:32:97:05: 86:da:2a:80:69:f4:5f:e5:2b:ac:97:66:e6:ef:fe:74:95:f3: fd:f3:b3:56:2d:00:b9:bb:26:74:99:02:f7:cb:87:2a:a3:af: 7c:85:80:cd:ec:46:07:65:96:b9:40:47:97:81:68:ff:11:d2: 5d:d3:6f:74:bf:6c:14:ff:8a:d3:51:87:8c:ef:13:f1:bf:65: 15:49:3b:8c:77:55:bf:d5:45:8b:66:1b:09:4b:a1:84:9c:aa: 68:f6:26:40:58:be:88:75:14:4d:be:d1:a0:0d:7b:30:6a:2d: 76:33:83:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRkIxMTAvBgNVBAUTKDZFNDU3MzM0ODY4MDMyNkQzREFERTk4NTIxNUQyMjY2 MjhCOUYxNkIwHhcNMjUxMjIzMDMyOTM5WhcNMjUxMjMwMDMyOTM5WjAYMRYwFAYD VQQDDA02OTRhMGNhNC1hNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kfXuBmtsefRhta8tyLQaTtGLh+mZtAMRO3zJn09P8otv0nY2Dq5lnZSeL9O i4rocHzFRf33EVMfw0PtAGejG7ByGUP1FC0yPF/klb/fkipTBiZv5l5AmZxVd2TM gjPYeie21fNCESJqySJfWCmb1NFsPtkZLd8wsODBwd+GtDZq+ofDqTpntccPZbEU huNI/e9aV3PdUbkbAqJpwf8y9v3sXhU65fiM6Ik0vN8uAYmymCrnvWyKdm7bxmmV hKAtzwAl+l+IUDIv6MKK1z0y5KeaYogGT1i6JsHRHgFHd5tg0ebSNYiJYDH0W9aV xvw7JFWf7DEEmKRfOJJPBk/ShQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrorrlS AMXoRnPWvmhX2OiER6NsMB8GA1UdIwQYMBaAFG5FczSGgDJtPa3phSFdImYoufFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGQi81MDU2QzhCMjAw NTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6TklhQU1tMDlyZW1GSVYwaVppaTU4 V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrVnpOSWFBTW0wOXJlbUZJVjBpWmlpNThXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBGQi81MDU2QzhCMjAwNTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6TklhQU1t MDlyZW1GSVYwaVppaTU4V3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA19lsHyoB3TILSiJ3c2539yvWFYGrRx3p2wMXrFxykywNmqSB/dJOa VexvgZxZXCenmSbRYfgju4OaaBSXvyI8W+O9QZiOm5S4IeUG+ApfUXaavwQPBKz1 JF62ZU/jXZxsHz34GFq6iIyOR6h+u+S4cj2sVlOD6mqU7rXUQJvv7djd4YwnOu0I xRFzVZYylwWG2iqAafRf5Susl2bm7/50lfP987NWLQC5uyZ0mQL3y4cqo698hYDN 7EYHZZa5QEeXgWj/EdJd0290v2wU/4rTUYeM7xPxv2UVSTuMd1W/1UWLZhsJS6GE nKpo9iZAWL6IdRRNvtGgDXswai12M4Pa -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:46 2025 by rpki-client