This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft File: ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json) Hash identifier: p8pudezm7gycJMKkbvjoAFLmoqT5+FoWVaxQ3fp3sjA= Subject key identifier: E3:B2:72:52:DE:D4:6B:FB:82:A5:C5:91:00:F3:FD:53:51:FD:90:D0 Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17 Certificate issuer: /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517 Certificate serial: 095F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft Manifest number: 0936 Signing time: Mon 22 Dec 2025 19:40:56 +0000 Manifest this update: Mon 22 Dec 2025 19:40:56 +0000 Manifest next update: Mon 29 Dec 2025 19:40:56 +0000 Files and hashes: 1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: N5dzwTFh9tOh34dLIRqXmyJTed8i3Xs9Ff8sIFDOU1E=) 2: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: rHm1B/MSNJeVi9UgfBbJLqo7QtD6an1CT3aEkcYwbOk=) 3: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: LK9G1J83bi3BUz0/qqWD4cotPJRvK4iVMh7A+P/u8DA=) 4: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: oM6Sf/6xTPeOvH01knFGEFzZ6mpJcGKCSF9Jna1G/cw=) 5: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: jqFz3U7Y3jCz0qKu2eSK+/FBQRd4npoRB1g4Atfczgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2399 (0x95f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517 Validity Not Before: Dec 22 19:40:56 2025 GMT Not After : Dec 29 19:40:56 2025 GMT Subject: CN=69499ec8-6c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8b:de:64:d4:a8:9b:2a:0c:4f:d9:52:d6:2b: 8e:56:50:dc:bd:aa:ce:43:88:cb:bb:03:96:89:7d: 86:83:2e:8e:9a:ed:0e:49:7b:5b:f1:7a:71:8e:79: 9a:c8:70:da:d8:64:69:f8:20:e6:7a:98:c2:8a:68: ed:76:11:11:2a:5c:de:c4:d9:9b:b7:48:42:7c:d2: b3:77:85:d9:a5:f9:f9:f5:0d:d0:ec:9b:c8:2a:6e: 63:d9:9a:e4:3c:59:80:25:01:37:d2:e5:d8:fa:20: d6:76:df:5c:3e:60:16:13:34:ac:b6:23:06:ad:90: 60:4d:94:af:a9:a3:b9:61:b2:3f:35:78:e0:f1:b8: e4:09:93:7f:08:e7:d3:0e:e7:bd:bf:9c:c3:ee:68: 7c:47:31:27:c0:4b:76:8d:8f:31:56:38:cf:0e:2b: b8:6c:14:e6:5e:a6:77:69:82:9b:73:d4:82:cf:72: 47:72:7a:da:17:bd:c3:7d:fe:ff:45:28:5e:b6:a2: 50:bb:24:57:c8:cb:f0:7a:b2:dc:3d:91:de:fb:56: e1:dc:99:14:c6:eb:9a:e3:2f:81:a3:66:2e:a7:d2: 93:64:09:54:63:ec:3f:7e:9d:60:c1:32:dc:86:ca: fb:3f:fa:c6:14:cb:7e:ff:22:ff:88:62:bc:2a:a9: 25:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B2:72:52:DE:D4:6B:FB:82:A5:C5:91:00:F3:FD:53:51:FD:90:D0 X509v3 Authority Key Identifier: keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:91:54:d5:c1:8a:9c:63:cf:76:a6:6a:18:14:54:4f:d4:57: a7:49:7a:a7:63:86:dd:72:1d:e4:a5:79:b6:2d:7e:38:4d:12: 1c:92:d7:0f:6c:59:51:8d:c6:c7:b1:41:8f:ae:bf:24:40:86: ca:74:51:b0:a4:82:2c:09:a8:62:f1:ab:6a:fc:e0:1d:d3:ac: e7:dc:e9:6e:f6:d2:7a:01:16:ba:86:94:e6:82:f0:3c:ce:47: 3a:3d:d7:3a:ad:fd:74:93:13:84:de:92:3e:d5:29:f0:40:f4: 5e:14:e6:c3:1f:21:6b:49:bd:e8:ee:90:cc:88:90:76:60:d9: ed:93:a5:41:fe:ed:79:5a:14:fd:f1:04:09:3f:89:c9:29:95: fb:39:15:57:dd:a6:45:cc:0d:29:95:cb:a5:77:5b:a0:a3:46: fc:ec:19:bd:42:5b:8a:c5:91:86:70:5c:f7:6a:32:73:43:e2: 16:49:61:d1:58:62:ba:ed:d8:7d:e8:ea:2d:82:c2:8c:3b:67: 21:de:28:7c:ae:3f:7a:9f:66:b2:6d:3e:ad:30:d1:30:a9:74: 09:17:51:67:fb:b7:e6:4e:5f:02:a8:42:11:d5:d5:06:1f:be: 52:7f:1c:b4:8c:eb:11:da:f2:dc:f2:09:3b:2a:96:8d:dd:6c: 23:8d:77:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDQjExMTAvBgNVBAUTKDA3MkNERjY1MUIzMTJDQUZCREIwNDlBMzM1NjlGRUE2 RUY2Qzk1MTcwHhcNMjUxMjIyMTk0MDU2WhcNMjUxMjI5MTk0MDU2WjAYMRYwFAYD VQQDDA02OTQ5OWVjOC02YzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4veZNSomyoMT9lS1iuOVlDcvarOQ4jLuwOWiX2Ggy6Omu0OSXtb8Xpxjnma yHDa2GRp+CDmepjCimjtdhERKlzexNmbt0hCfNKzd4XZpfn59Q3Q7JvIKm5j2Zrk PFmAJQE30uXY+iDWdt9cPmAWEzSstiMGrZBgTZSvqaO5YbI/NXjg8bjkCZN/COfT Due9v5zD7mh8RzEnwEt2jY8xVjjPDiu4bBTmXqZ3aYKbc9SCz3JHcnraF73Dff7/ RShetqJQuyRXyMvwerLcPZHe+1bh3JkUxuua4y+Bo2Yup9KTZAlUY+w/fp1gwTLc hsr7P/rGFMt+/yL/iGK8Kqkl1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOyclLe 1Gv7gqXFkQDz/VNR/ZDQMB8GA1UdIwQYMBaAFAcs32UbMSyvvbBJozVp/qbvbJUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNCMS9EMDBERDQ5OEJD MDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExLLTlzRW1qTlduLXB1OXNs UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J5emZaUnN4TEstOXNFbWpOV24tcHU5c2xSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkNCMS9EMDBERDQ5OEJDMDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExL LTlzRW1qTlduLXB1OXNsUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNkVTVwYqcY892pmoYFFRP1FenSXqnY4bdch3kpXm2LX44TRIcktcP bFlRjcbHsUGPrr8kQIbKdFGwpIIsCahi8atq/OAd06zn3Olu9tJ6ARa6hpTmgvA8 zkc6Pdc6rf10kxOE3pI+1SnwQPReFObDHyFrSb3o7pDMiJB2YNntk6VB/u15WhT9 8QQJP4nJKZX7ORVX3aZFzA0plculd1ugo0b87Bm9QluKxZGGcFz3ajJzQ+IWSWHR WGK67dh96OotgsKMO2ch3ih8rj96n2aybT6tMNEwqXQJF1Fn+7fmTl8CqEIR1dUG H75Sfxy0jOsR2vLc8gk7KpaN3WwjjXfm -----END CERTIFICATE-----Generated at Tue Dec 23 08:40:34 2025 by rpki-client