This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft File: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft (raw, json) Hash identifier: ML64GUINBM9GdAtbVgzTLnCeNA7eKJ2IAirKIZakvxw= Subject key identifier: 85:EE:40:40:9D:AB:AB:57:0B:4D:75:8B:4C:1A:AC:95:12:A6:F5:45 Authority key identifier: F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4 Certificate issuer: /CN=A915E012/serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft Manifest number: 7C Signing time: Tue 09 Dec 2025 04:38:05 +0000 Manifest this update: Tue 09 Dec 2025 04:38:05 +0000 Manifest next update: Tue 16 Dec 2025 04:38:05 +0000 Files and hashes: 1: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl (hash: 5jzJ6/Y8+CVsuRMxyCVXI0neJCAv8U4l3ldbHhEEhbY=) 2: 28BBA728141411F08D862A74C4F9AE02.roa (hash: bM0rHlFCkCxESty36KKICwvwa1HEG8pgqoXnhaZGbjI=) 3: 2857C712141411F08D862A74C4F9AE02.roa (hash: q/LJ7SPvTkUYwfSCfg1Hilqw1bbJVMWb831qXikLEmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 04:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E012, serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4 Validity Not Before: Dec 9 04:38:05 2025 GMT Not After : Dec 16 04:38:05 2025 GMT Subject: CN=6937a7ad-c205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:3a:4c:95:82:55:11:70:be:b0:79:cf:ae: 36:d0:8d:be:2f:9c:df:5f:13:28:c1:50:eb:d5:81: 2b:e1:39:3c:be:cb:a2:56:67:37:d3:ef:3a:6b:1c: 3a:22:93:c1:d7:3a:6b:f2:ef:46:72:3a:0a:75:9e: 33:a3:92:f9:d3:c2:23:e4:be:c3:da:f8:1d:a7:db: ac:38:66:9a:4e:40:42:04:62:79:bd:3e:c1:52:79: 5c:87:af:36:cb:64:71:ec:a8:d0:d3:ba:85:5d:b6: 95:2e:2d:19:53:ec:96:f3:47:ce:c8:11:4b:02:43: 02:45:5d:12:25:5d:57:92:30:30:68:33:89:25:ce: fa:d9:47:65:42:64:b8:4e:e5:da:21:c4:95:b4:31: 85:53:ea:b5:f5:a5:62:55:cc:65:f6:cc:ac:c7:3b: 95:35:f5:04:e3:8f:18:2b:75:5e:a1:81:0d:0e:e9: ae:c6:ba:c5:d3:d0:3b:8e:df:31:47:ea:e3:84:6e: 07:b0:1e:ad:99:52:1f:88:99:00:af:c0:6f:7f:71: 7c:f3:71:5c:89:87:8f:3f:1a:43:b8:fc:2e:86:13: e8:a5:e5:82:c9:5f:68:fc:e8:07:e8:b2:2e:6c:c6: 71:05:ae:4f:a9:d1:48:21:02:4e:41:e0:21:92:9a: ea:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EE:40:40:9D:AB:AB:57:0B:4D:75:8B:4C:1A:AC:95:12:A6:F5:45 X509v3 Authority Key Identifier: keyid:F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4a:26:fa:16:bf:75:95:f0:52:e5:d2:74:6a:08:e7:cb:21: 9b:d5:cf:65:5a:f3:49:c8:18:da:f1:30:ef:74:d1:76:d0:e9: 67:2c:ed:1e:c1:9a:27:0e:53:c4:45:26:86:3e:67:a2:6a:4f: eb:f5:dd:0c:14:54:98:51:da:51:29:cf:e4:0f:ff:0d:5f:96: 32:95:8f:7b:4f:c5:32:f5:0b:10:b6:2d:59:36:35:1d:82:03: e0:b6:9c:88:e3:fc:84:92:d8:e8:c8:77:5c:5c:dc:22:f6:98: 4e:58:93:aa:f2:ce:38:df:b9:fa:41:93:ef:7d:ea:c6:10:0b: 66:cc:37:03:4e:f6:31:77:64:7b:58:2a:02:44:f6:75:fa:26: 41:f7:37:24:e4:c1:28:5a:c1:9e:ab:49:0b:44:1f:19:38:5b: 76:2e:ee:bd:2c:82:b0:76:f1:cb:76:7b:37:a1:d4:64:cc:22: b8:06:f2:05:67:76:33:bf:ae:67:1d:fc:34:32:1d:99:40:a7: 14:23:2d:e8:31:a5:ae:51:03:fe:4e:84:a3:13:5d:3b:e0:d4: 6d:4d:cf:73:c8:94:c1:d4:33:1a:f1:fe:85:38:80:27:9a:7e: 17:1e:0c:72:d9:6a:ae:2e:1b:0d:83:bc:45:9e:d6:20:2a:2f: 77:a6:91:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTAxMjExMC8GA1UEBRMoRjlCNDAyMkMwMjlFN0Q5RTVBNjM0OTY4RkRCQTRBMEU5 Q0Q2MjRFNDAeFw0yNTEyMDkwNDM4MDVaFw0yNTEyMTYwNDM4MDVaMBgxFjAUBgNV BAMTDTY5MzdhN2FkLWMyMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2KTpMlYJVEXC+sHnPrjbQjb4vnN9fEyjBUOvVgSvhOTy+y6JWZzfT7zprHDoi k8HXOmvy70ZyOgp1njOjkvnTwiPkvsPa+B2n26w4ZppOQEIEYnm9PsFSeVyHrzbL ZHHsqNDTuoVdtpUuLRlT7JbzR87IEUsCQwJFXRIlXVeSMDBoM4klzvrZR2VCZLhO 5dohxJW0MYVT6rX1pWJVzGX2zKzHO5U19QTjjxgrdV6hgQ0O6a7GusXT0DuO3zFH 6uOEbgewHq2ZUh+ImQCvwG9/cXzzcVyJh48/GkO4/C6GE+il5YLJX2j86Afosi5s xnEFrk+p0UghAk5B4CGSmurVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhe5AQJ2r q1cLTXWLTBqslRKm9UUwHwYDVR0jBBgwFoAU+bQCLAKefZ5aY0lo/bpKDpzWJOQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMDEyL0I4MUFBMjU4MTQx MzExRjBCNjhFNzM3M0M0RjlBRTAyLy1iUUNMQUtlZlo1YVkwbG9fYnBLRHB6V0pP US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWJRQ0xBS2VmWjVhWTBsb19icEtEcHpXSk9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MDEyL0I4MUFBMjU4MTQxMzExRjBCNjhFNzM3M0M0RjlBRTAyLy1iUUNMQUtlZlo1 YVkwbG9fYnBLRHB6V0pPUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA9KJvoWv3WV8FLl0nRqCOfLIZvVz2Va80nIGNrxMO900XbQ6Wcs7R7B micOU8RFJoY+Z6JqT+v13QwUVJhR2lEpz+QP/w1fljKVj3tPxTL1CxC2LVk2NR2C A+C2nIjj/ISS2OjId1xc3CL2mE5Yk6ryzjjfufpBk+996sYQC2bMNwNO9jF3ZHtY KgJE9nX6JkH3NyTkwShawZ6rSQtEHxk4W3Yu7r0sgrB28ct2ezeh1GTMIrgG8gVn djO/rmcd/DQyHZlApxQjLegxpa5RA/5OhKMTXTvg1G1Nz3PIlMHUMxrx/oU4gCea fhceDHLZaq4uGw2DvEWe1iAqL3emkQo= -----END CERTIFICATE-----Generated at Wed Dec 10 05:08:04 2025 by rpki-client