This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft File: ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft (raw, json) Hash identifier: RWPEv0xo8Zd0StwQukfvvWGWxxiwKVMMASnV+IJcYPk= Subject key identifier: 18:8C:6A:93:57:EF:24:5E:6B:52:89:3F:00:90:02:06:04:0A:4B:A3 Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Certificate serial: 0BCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft Manifest number: 0BC5 Signing time: Mon 22 Dec 2025 18:27:07 +0000 Manifest this update: Mon 22 Dec 2025 18:27:07 +0000 Manifest next update: Mon 29 Dec 2025 18:27:07 +0000 Files and hashes: 1: ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl (hash: D7Ba9DbZV79rD2EVaVaA4e6KgLoOAB+AI4tmZUIq/XY=) 2: 1A8553B831F011EAA18AC76AC4F9AE02.roa (hash: 2QDvhbtMSuUMKkHjiP/BzPb8Yd8fGPxfNmWlpQE2e54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3020 (0xbcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C7B6, serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Validity Not Before: Dec 22 18:27:07 2025 GMT Not After : Dec 29 18:27:07 2025 GMT Subject: CN=69498d7b-7168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:46:47:83:2c:35:61:7c:d6:79:c3:ca:60: 25:6c:26:a8:a6:d5:e7:5a:bb:6d:3b:18:9d:a5:bd: f1:cc:b9:68:db:8f:5e:59:1c:43:dc:63:32:77:a4: a8:a5:ca:6e:51:35:17:64:4c:bf:36:b8:b2:ff:1c: 45:b5:ef:0a:d4:47:ef:fb:42:d3:c5:8f:95:d3:2e: 71:cf:64:5f:ac:b2:7f:e5:44:87:e0:06:d7:d1:4b: b7:60:37:10:aa:6a:a8:7e:df:9e:c4:0b:91:d4:dd: c4:5f:05:d9:2e:a5:e7:2f:f6:71:0b:52:e5:45:ce: 65:4b:2f:78:9a:e1:a8:4f:d4:ca:32:31:db:54:90: 5e:19:60:cc:dd:16:de:62:39:04:af:84:4a:ff:c2: 61:6a:73:63:11:48:b4:a8:22:26:8e:8b:f9:b5:72: 1d:35:3d:30:83:a5:ec:a3:2f:b0:3b:f0:e2:af:2d: dc:e0:85:87:75:59:3a:b0:fc:61:b1:42:0c:fb:a4: 28:1b:ea:b3:29:97:6c:02:b6:a3:f4:d1:1b:8c:ab: 5d:ff:96:fe:7d:fc:2d:01:bb:3b:88:28:b8:a4:c0: e9:9b:59:72:3f:d7:30:b5:b4:7a:f5:a3:33:80:1d: c3:9f:30:08:3f:5f:4c:dd:bf:7d:25:9a:b8:62:38: 01:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8C:6A:93:57:EF:24:5E:6B:52:89:3F:00:90:02:06:04:0A:4B:A3 X509v3 Authority Key Identifier: keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:87:7c:d2:f2:88:2c:49:c0:90:17:94:70:29:1a:d4:8c:94: 5d:4b:7e:ec:62:77:87:8f:5f:b7:f3:01:9c:74:fc:30:68:7e: 8c:26:7c:ed:33:8a:65:cf:57:52:01:33:26:0b:77:8c:bb:dd: 90:ed:04:7d:22:47:e7:4c:5b:a9:e1:b2:3d:48:4a:17:4b:09: 36:91:92:39:1b:11:02:a1:f9:b4:07:56:13:82:c1:48:76:fd: 4e:c0:8b:eb:bc:28:68:b4:56:2e:46:d7:af:3f:a5:f6:46:30: de:0e:d0:a3:3d:92:b8:dd:07:d5:76:b1:9a:64:dd:95:b8:9c: a0:8a:c7:b7:9f:22:51:01:04:c3:11:a1:47:fb:b9:b3:73:88: f5:32:f8:db:83:5f:c1:c6:f3:38:9a:31:37:7b:de:af:47:aa: 33:22:6a:58:7b:75:f5:d3:5b:85:94:e1:16:a7:1f:b5:23:13: e9:03:90:e5:2c:19:26:2d:6e:c8:3f:cf:35:de:60:1d:63:75: b8:49:8c:20:ee:6e:0c:c3:b2:a3:ef:f7:d6:ee:af:fb:28:1f: c1:a1:de:89:04:eb:22:09:fc:9f:2d:1f:02:fe:d5:05:da:28: ba:22:40:33:94:26:f5:90:30:41:26:31:6a:00:ce:9f:02:f7: ef:3a:7d:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3QjYxMTAvBgNVBAUTKDQ5M0QzRUFGRTA0MDU3Mjg0MUU5RkFCMjU2RDBDNjA0 NENCODU4QzgwHhcNMjUxMjIyMTgyNzA3WhcNMjUxMjI5MTgyNzA3WjAYMRYwFAYD VQQDDA02OTQ5OGQ3Yi03MTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbRGR4MsNWF81nnDymAlbCaoptXnWrttOxidpb3xzLlo249eWRxD3GMyd6So pcpuUTUXZEy/Nriy/xxFte8K1Efv+0LTxY+V0y5xz2RfrLJ/5USH4AbX0Uu3YDcQ qmqoft+exAuR1N3EXwXZLqXnL/ZxC1LlRc5lSy94muGoT9TKMjHbVJBeGWDM3Rbe YjkEr4RK/8JhanNjEUi0qCImjov5tXIdNT0wg6Xsoy+wO/Diry3c4IWHdVk6sPxh sUIM+6QoG+qzKZdsAraj9NEbjKtd/5b+ffwtAbs7iCi4pMDpm1lyP9cwtbR69aMz gB3DnzAIP19M3b99JZq4YjgBMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiMapNX 7yRea1KJPwCQAgYECkujMB8GA1UdIwQYMBaAFEk9Pq/gQFcoQen6slbQxgRMuFjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzdCNi80M0Y2QTU3ODMx RUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5aEI2ZnF5VnRER0JFeTRX TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NUMC1yLUJBVnloQjZmcXlWdERHQkV5NFdNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzdCNi80M0Y2QTU3ODMxRUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5 aEI2ZnF5VnRER0JFeTRXTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbh3zS8ogsScCQF5RwKRrUjJRdS37sYneHj1+38wGcdPwwaH6MJnzt M4plz1dSATMmC3eMu92Q7QR9IkfnTFup4bI9SEoXSwk2kZI5GxECofm0B1YTgsFI dv1OwIvrvChotFYuRtevP6X2RjDeDtCjPZK43QfVdrGaZN2VuJygise3nyJRAQTD EaFH+7mzc4j1Mvjbg1/BxvM4mjE3e96vR6ozImpYe3X101uFlOEWpx+1IxPpA5Dl LBkmLW7IP8813mAdY3W4SYwg7m4Mw7Kj7/fW7q/7KB/Bod6JBOsiCfyfLR8C/tUF 2ii6IkAzlCb1kDBBJjFqAM6fAvfvOn06 -----END CERTIFICATE-----Generated at Tue Dec 23 07:40:57 2025 by rpki-client