This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft File: BFtcCGfeWB0rdIQv74BFwad76L0.mft (raw, json) Hash identifier: O2/FeCycgRDbsZZsMWEuvUU41A1u4BaCf66IJZWdDqc= Subject key identifier: 50:3E:31:24:DB:5F:76:03:C8:C9:BD:63:1A:EA:82:A6:08:13:EB:8C Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD Certificate issuer: /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD Certificate serial: 2459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft Manifest number: 241F Signing time: Mon 22 Dec 2025 15:38:11 +0000 Manifest this update: Mon 22 Dec 2025 15:38:11 +0000 Manifest next update: Mon 29 Dec 2025 15:38:11 +0000 Files and hashes: 1: BFtcCGfeWB0rdIQv74BFwad76L0.crl (hash: qoKQ8FF+TH4NRYHiYfbpHeh+QuGNinhwoc5+Wh8LnWA=) 2: FB87E4C4B10D11E5894F4D1CC4F9AE02.roa (hash: Xr4axXAE5xhZlqvtubxZ2pb3RMbCF82Tss/A5eKchFs=) 3: FCF0A580B10D11E5894F4D1CC4F9AE02.roa (hash: +2MMI4KCUim/55I1v/CcFFWM8c4do3z3Prc4iRx7/lQ=) 4: F9ED1B16B10D11E5894F4D1CC4F9AE02.roa (hash: fkO78SaWxLHL6UEeOmDkgAwdKa1QD3bVWVMip2dHju0=) 5: F8623718B10D11E5894F4D1CC4F9AE02.roa (hash: 2VqKtLp4I4n3i3xfxJ0a0zauep05yhz4m6vcbsayeiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9305 (0x2459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917412F, serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD Validity Not Before: Dec 22 15:38:11 2025 GMT Not After : Dec 29 15:38:11 2025 GMT Subject: CN=694965e3-061b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:38:a1:5c:32:43:87:00:15:1c:86:f4:fb: 8e:b1:7f:a3:e3:60:5e:b6:83:58:54:d0:e4:2e:ea: de:57:f4:cb:43:06:a8:cc:34:c6:d2:b9:dc:6d:14: 52:7b:1e:26:a1:a9:ce:41:23:a4:58:81:b3:14:64: 99:6f:35:2d:77:00:a4:8e:68:c4:7f:01:5a:3e:18: 63:46:81:7d:01:ff:1f:1a:c7:b0:fd:cf:b8:aa:05: 8a:a9:c2:40:f7:dc:60:70:a5:b1:1f:e0:e0:12:5d: 34:b3:96:fb:0f:96:6e:87:6d:15:fb:57:0b:e3:d6: d7:c6:c2:b5:bd:5a:96:fd:94:51:b6:70:3d:72:89: 8b:0e:24:d9:af:96:50:0d:e9:b4:7c:cd:bf:99:2f: 3f:06:c5:4d:c3:6b:1a:fd:b0:a7:af:f8:f7:f8:fd: 13:48:ee:79:4c:01:4c:3c:d0:4e:46:38:31:82:3f: 13:b6:12:ef:43:07:0e:c1:91:ad:64:6c:d2:f6:77: 2a:4d:ad:a7:35:0e:b2:5c:37:dc:1b:bb:d1:71:1b: 24:76:ea:9b:38:a7:c3:b0:74:50:84:33:48:95:43: b2:3f:c9:65:e6:d2:9f:7c:b4:45:0b:a0:4a:0d:21: 9f:cb:8a:79:36:af:35:99:65:03:c9:8f:4f:68:3a: 45:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3E:31:24:DB:5F:76:03:C8:C9:BD:63:1A:EA:82:A6:08:13:EB:8C X509v3 Authority Key Identifier: keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:a7:21:3a:c8:f7:50:1d:67:80:62:03:28:c9:5e:5d:df:0c: d9:66:71:35:23:6e:25:bd:7d:7f:a3:51:8a:4f:47:dc:7d:96: 9e:7d:1a:27:17:20:30:7a:f8:fc:94:cf:fd:b3:22:c2:af:99: 60:a9:b3:ab:3d:a0:3f:52:d7:34:9c:91:74:44:d3:12:a7:96: 63:fb:9e:47:60:1a:f2:46:37:73:77:df:c5:13:d9:ae:09:6b: 7b:a9:c2:c3:90:af:90:b7:ff:1c:4e:2d:50:0d:4e:d5:9f:3b: 2e:b5:f1:5c:22:af:e6:08:7f:a2:97:af:11:0b:f6:2e:0b:ae: 34:b7:66:e1:c6:0a:47:d2:a4:ba:e9:67:e9:65:34:80:bf:02: ae:33:66:e1:e1:14:4f:5f:af:d7:48:6f:92:4d:22:82:f8:bd: 26:dd:a7:90:30:9d:49:9e:33:e3:a3:54:9f:a1:21:0f:fd:57: 48:10:9f:78:cb:e9:0a:d9:b0:d5:22:8e:66:d0:3c:b9:36:7f: ee:bb:73:73:5b:7e:c6:3c:c6:4f:13:ac:c1:17:ad:4f:e6:89: 9b:f9:f4:34:90:90:0d:ba:02:83:c3:29:5a:81:fe:b9:c5:6f: c4:f9:9a:3a:d7:09:75:31:2c:90:77:ac:4f:df:c6:6c:e8:97: ed:b1:ed:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxMkYxMTAvBgNVBAUTKDA0NUI1QzA4NjdERTU4MUQyQjc0ODQyRkVGODA0NUMx QTc3QkU4QkQwHhcNMjUxMjIyMTUzODExWhcNMjUxMjI5MTUzODExWjAYMRYwFAYD VQQDDA02OTQ5NjVlMy0wNjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3k4oVwyQ4cAFRyG9PuOsX+j42BetoNYVNDkLureV/TLQwaozDTG0rncbRRS ex4moanOQSOkWIGzFGSZbzUtdwCkjmjEfwFaPhhjRoF9Af8fGsew/c+4qgWKqcJA 99xgcKWxH+DgEl00s5b7D5Zuh20V+1cL49bXxsK1vVqW/ZRRtnA9comLDiTZr5ZQ Dem0fM2/mS8/BsVNw2sa/bCnr/j3+P0TSO55TAFMPNBORjgxgj8TthLvQwcOwZGt ZGzS9ncqTa2nNQ6yXDfcG7vRcRskduqbOKfDsHRQhDNIlUOyP8ll5tKffLRFC6BK DSGfy4p5Nq81mWUDyY9PaDpFOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFA+MSTb X3YDyMm9YxrqgqYIE+uMMB8GA1UdIwQYMBaAFARbXAhn3lgdK3SEL++ARcGne+i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDEyRi9ENDExNDE0QzZE NTYxMUU1OTBEODc0NzJDNEY5QUUwMi9CRnRjQ0dmZVdCMHJkSVF2NzRCRndhZDc2 TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JGdGNDR2ZlV0IwcmRJUXY3NEJGd2FkNzZMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDEyRi9ENDExNDE0QzZENTYxMUU1OTBEODc0NzJDNEY5QUUwMi9CRnRjQ0dmZVdC MHJkSVF2NzRCRndhZDc2TDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJpyE6yPdQHWeAYgMoyV5d3wzZZnE1I24lvX1/o1GKT0fcfZaefRon FyAwevj8lM/9syLCr5lgqbOrPaA/Utc0nJF0RNMSp5Zj+55HYBryRjdzd9/FE9mu CWt7qcLDkK+Qt/8cTi1QDU7VnzsutfFcIq/mCH+il68RC/YuC640t2bhxgpH0qS6 6WfpZTSAvwKuM2bh4RRPX6/XSG+STSKC+L0m3aeQMJ1JnjPjo1SfoSEP/VdIEJ94 y+kK2bDVIo5m0Dy5Nn/uu3NzW37GPMZPE6zBF61P5omb+fQ0kJANugKDwylagf65 xW/E+Zo61wl1MSyQd6xP38Zs6Jftse0H -----END CERTIFICATE-----Generated at Tue Dec 23 10:02:35 2025 by rpki-client