This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft File: BXOVtIePsaZ_y61YJhe3uq8sMf8.mft (raw, json) Hash identifier: Qg4P9YmTinZZ1yjuldi/WB5eaKEO5PDkTpQG9jmc3K0= Subject key identifier: 65:85:C6:6E:7A:0E:8E:8A:30:10:E3:11:EA:B3:39:5C:7A:5D:37:12 Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft Manifest number: 0125 Signing time: Sun 21 Dec 2025 04:26:43 +0000 Manifest this update: Sun 21 Dec 2025 04:26:43 +0000 Manifest next update: Sun 28 Dec 2025 04:26:43 +0000 Files and hashes: 1: BXOVtIePsaZ_y61YJhe3uq8sMf8.crl (hash: iro1xTaGxjLvi1tXayUnUsdqgYmZsduuyPJhsN7kluk=) 2: B0D3DA64107B11F097717C77C4F9AE02.roa (hash: 1d9wCsU9aWCRZr3QZQY+xUb1UN+Bs6Q6ncyy7XvW10Q=) 3: A8F83B2E202911F08EABDC87C4F9AE02.roa (hash: CPH/9LGGv2Qb1QUYpywLXh/H9jmUzaUp17YNcG9enxA=) 4: 7EFD7D08A10211EFBF75467FC4F9AE02.roa (hash: vsSxWPv3xEP3XML1AoQ7xUsTBNpQ7V7GqfC2jYKkI8o=) 5: E0CDA376596E11F0B19AF24BC4F9AE02.roa (hash: FJSeI7xu3Suas48K0kKSfoAbigbE/yhUfYxCE1a9B6A=) 6: FA414880107B11F09A6AF277C4F9AE02.roa (hash: Wy+W7yleCCjdnmkiTTzTQjidmhHRdCgVI8wgnocThQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Validity Not Before: Dec 21 04:26:43 2025 GMT Not After : Dec 28 04:26:43 2025 GMT Subject: CN=69477703-78c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7a:32:1e:df:1a:7c:bf:a8:2d:88:38:e0:a7: 30:50:a5:71:18:00:de:e5:31:a7:2b:79:10:a8:17: c8:03:c6:f2:27:03:41:af:d5:39:a7:24:93:ed:cf: 8d:9f:36:1a:fe:97:58:e1:3a:34:75:86:a1:63:bd: 6f:98:74:44:84:56:e9:e2:43:d8:a9:5d:3e:35:08: 22:f4:b8:9d:ab:ec:48:45:8c:4b:89:f6:48:07:92: 08:20:cf:3b:e7:5c:9b:45:84:55:23:43:84:9b:aa: e7:b6:55:22:77:82:30:a4:a6:5c:24:5f:24:c5:4f: b0:57:00:33:38:37:40:e9:36:36:59:8a:96:dc:50: e8:64:0f:a1:88:a0:89:a3:2d:97:df:4f:e4:73:42: 32:84:d6:0d:cd:8d:cd:0e:55:cf:e0:c1:31:82:89: ce:44:c4:ea:4f:8b:5d:b2:b0:2f:34:ff:f7:05:7c: 37:14:e3:6f:d7:d1:a1:05:0b:b3:30:23:c7:c7:9c: 6d:24:dc:2e:be:6f:4c:1a:49:95:69:cb:15:4b:39: e1:1f:1f:b8:fc:1c:f9:71:2c:22:b0:15:f5:98:85: bd:56:55:61:8a:3f:93:c6:db:28:c5:99:d3:44:c1: 5c:ac:ba:20:29:e8:bc:2a:5a:b9:16:62:86:c8:f1: e2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:85:C6:6E:7A:0E:8E:8A:30:10:E3:11:EA:B3:39:5C:7A:5D:37:12 X509v3 Authority Key Identifier: keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:ba:e1:95:40:fe:03:12:f7:60:c7:a7:f9:21:b6:de:3d:f5: 7c:09:df:6f:38:78:6b:66:34:89:43:c7:a0:f3:81:91:7f:dc: e7:6a:5d:88:45:a6:60:40:72:61:ff:ba:2e:eb:96:cc:9f:9f: 90:10:ec:13:33:2f:3c:37:dc:af:4b:d3:44:8a:6e:95:8b:e6: 2b:49:2e:b0:97:74:84:b8:03:56:23:fd:ac:52:c4:38:db:b3: 5b:9c:57:90:42:18:9e:a8:e1:24:2e:0d:99:3d:85:82:aa:5d: 9f:16:d3:6b:99:5d:68:fd:06:51:de:8f:78:57:d7:00:21:dd: 30:9e:6c:6d:7a:8c:13:63:11:c3:72:5c:53:02:e9:be:ae:1c: 86:f5:32:ae:17:53:aa:ea:6e:c7:8a:3e:68:b0:52:0b:68:6a: 4f:b9:e8:e4:a3:18:74:51:88:eb:d0:78:a8:fd:d4:34:0c:3b: f8:a8:eb:67:66:4d:96:9a:02:18:27:aa:45:95:8d:5c:9e:ae: 18:78:f5:1a:2f:0a:13:bb:b7:22:8a:13:62:7e:77:28:1e:57: 6c:b6:01:54:ba:93:1a:ee:70:1b:3b:04:34:1a:3c:16:56:7f: 99:8a:b0:48:57:57:f3:fa:62:39:87:5b:5d:75:d6:8e:7d:c1: 40:87:f4:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDA1NzM5NUI0ODc4RkIxQTY3RkNCQUQ1ODI2MTdCN0JB QUYyQzMxRkYwHhcNMjUxMjIxMDQyNjQzWhcNMjUxMjI4MDQyNjQzWjAYMRYwFAYD VQQDDA02OTQ3NzcwMy03OGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3oyHt8afL+oLYg44KcwUKVxGADe5TGnK3kQqBfIA8byJwNBr9U5pyST7c+N nzYa/pdY4To0dYahY71vmHREhFbp4kPYqV0+NQgi9Lidq+xIRYxLifZIB5IIIM87 51ybRYRVI0OEm6rntlUid4IwpKZcJF8kxU+wVwAzODdA6TY2WYqW3FDoZA+hiKCJ oy2X30/kc0IyhNYNzY3NDlXP4MExgonORMTqT4tdsrAvNP/3BXw3FONv19GhBQuz MCPHx5xtJNwuvm9MGkmVacsVSznhHx+4/Bz5cSwisBX1mIW9VlVhij+TxtsoxZnT RMFcrLogKei8Klq5FmKGyPHiiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWFxm56 Do6KMBDjEeqzOVx6XTcSMB8GA1UdIwQYMBaAFAVzlbSHj7Gmf8utWCYXt7qvLDH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GQTBFMDVBNDZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNhWl95NjFZSmhlM3VxOHNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JYT1Z0SWVQc2FaX3k2MVlKaGUzdXE4c01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkM4Ri9GQTBFMDVBNDZCNUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNh Wl95NjFZSmhlM3VxOHNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtuuGVQP4DEvdgx6f5IbbePfV8Cd9vOHhrZjSJQ8eg84GRf9znal2I RaZgQHJh/7ou65bMn5+QEOwTMy88N9yvS9NEim6Vi+YrSS6wl3SEuANWI/2sUsQ4 27NbnFeQQhieqOEkLg2ZPYWCql2fFtNrmV1o/QZR3o94V9cAId0wnmxteowTYxHD clxTAum+rhyG9TKuF1Oq6m7Hij5osFILaGpPuejkoxh0UYjr0Hio/dQ0DDv4qOtn Zk2WmgIYJ6pFlY1cnq4YePUaLwoTu7ciihNifncoHldstgFUupMa7nAbOwQ0GjwW Vn+ZirBIV1fz+mI5h1tdddaOfcFAh/Ti -----END CERTIFICATE-----Generated at Tue Dec 23 04:11:44 2025 by rpki-client