This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: ndDiWjORhZztUbFfmDbU+SfptUBsYkM3PF4Q8+aEQWg= Subject key identifier: 25:18:7E:27:B0:8C:DC:C9:A4:BE:74:44:25:90:2F:75:EB:39:4D:66 Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 0F85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 0F78 Signing time: Sat 20 Dec 2025 17:16:24 +0000 Manifest this update: Sat 20 Dec 2025 17:16:23 +0000 Manifest next update: Sat 27 Dec 2025 17:16:23 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: ZUmmNafRFnD3P8vNACs/+z/HyHSPSO6TXgb/9wvn2Bk=) 2: AA75695ACD2011F0B214A868C4F9AE02.roa (hash: J1q9B+GvWu0EHxlM4wrZ2tzbKSLE34bYP07mlS0yo3g=) 3: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (hash: ujwlh3xKcro8Gn6vri+ysk2OetBXOQN4CKfvRdsI/Ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3973 (0xf85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: Dec 20 17:16:23 2025 GMT Not After : Dec 27 17:16:23 2025 GMT Subject: CN=6946d9e8-5efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:47:87:7a:19:b7:05:db:22:33:ab:e3:b2:4a: 26:09:7f:0d:c4:a5:2a:f0:b0:0b:cc:c5:94:e7:bd: 38:1a:77:56:59:8d:8d:cc:c3:bc:cc:9e:58:72:86: 3b:59:df:43:ff:d5:a0:0c:1e:f7:8b:c9:c6:ef:90: 8a:f0:d6:9a:63:b8:5a:72:03:17:03:16:1b:66:66: a0:c1:72:bb:dc:d9:dd:05:94:6f:be:0e:53:54:a1: 88:2c:64:84:04:a3:f3:65:f2:d5:fc:5f:fc:7d:cc: 4b:83:47:25:af:9a:75:b7:03:6f:c7:24:a8:ba:fc: 3c:37:a9:08:13:57:b2:1c:e8:15:25:cf:fc:ee:b0: fd:b8:4b:38:b2:f9:f3:b3:50:69:75:41:84:94:83: ca:c0:b9:89:64:91:d3:66:67:38:3f:4d:a2:9c:01: 51:63:72:cc:84:7f:da:5b:95:05:b7:e7:44:30:db: 3b:61:ea:ec:95:94:0f:5e:a2:29:3e:c9:ba:d8:4d: 42:e2:3c:35:57:78:3c:02:6e:dc:77:29:3f:14:3f: 0b:98:63:08:91:0f:e3:62:51:1d:ce:d1:a2:32:6e: 41:da:83:04:16:41:9a:90:90:09:be:05:1b:16:fd: 1e:54:37:24:58:a2:20:92:76:56:d6:76:0c:a2:3e: aa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:18:7E:27:B0:8C:DC:C9:A4:BE:74:44:25:90:2F:75:EB:39:4D:66 X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:da:e6:75:0c:63:39:cb:67:4e:b9:49:3d:c7:8c:8f:8b:ac: 42:84:9d:76:3a:13:64:3f:0d:9e:c0:54:73:d2:ee:fa:b6:c7: 2e:0a:73:4d:fb:fe:41:05:c4:0f:c9:a1:71:6e:dc:c7:92:da: fa:6a:1d:30:35:b2:0f:43:d7:b3:66:46:05:ce:42:fb:2d:f7: 9c:43:6b:64:a6:e1:3d:8a:cd:b4:ec:f6:e7:51:56:fa:58:ca: 83:b6:75:19:56:3f:47:1f:fe:ed:68:ba:54:5d:9f:1f:a4:a4: ef:18:e7:78:b5:a0:88:33:c5:f9:6b:4f:e5:0c:1d:a6:d3:69: f8:f2:11:46:81:d8:ba:87:fc:d5:ca:31:ff:a5:6e:76:3a:ce: aa:19:ad:c4:84:21:46:f8:b1:e5:4a:df:74:85:b9:9a:03:87: 92:06:ff:7e:a4:03:84:df:af:6b:14:c7:fd:66:40:45:5e:36: 70:6f:60:4b:3c:d7:5c:f3:6a:9c:77:8c:21:62:d3:70:0a:03: e2:f6:ae:6d:72:e3:20:46:f5:43:e6:f8:95:52:dc:0e:89:d9: 3e:d0:f5:26:56:0a:f7:d6:da:aa:2c:31:68:53:08:51:2b:4b: 87:48:80:3e:3b:8c:10:41:64:33:43:b4:b4:c8:bd:fa:4c:62: aa:a0:db:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjUxMjIwMTcxNjIzWhcNMjUxMjI3MTcxNjIzWjAYMRYwFAYD VQQDDA02OTQ2ZDllOC01ZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6UeHehm3BdsiM6vjskomCX8NxKUq8LALzMWU5704GndWWY2NzMO8zJ5YcoY7 Wd9D/9WgDB73i8nG75CK8NaaY7hacgMXAxYbZmagwXK73NndBZRvvg5TVKGILGSE BKPzZfLV/F/8fcxLg0clr5p1twNvxySouvw8N6kIE1eyHOgVJc/87rD9uEs4svnz s1BpdUGElIPKwLmJZJHTZmc4P02inAFRY3LMhH/aW5UFt+dEMNs7YerslZQPXqIp Psm62E1C4jw1V3g8Am7cdyk/FD8LmGMIkQ/jYlEdztGiMm5B2oMEFkGakJAJvgUb Fv0eVDckWKIgknZW1nYMoj6qeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUYfiew jNzJpL50RCWQL3XrOU1mMB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDF2uZ1DGM5y2dOuUk9x4yPi6xChJ12OhNkPw2ewFRz0u76tscuCnNN +/5BBcQPyaFxbtzHktr6ah0wNbIPQ9ezZkYFzkL7LfecQ2tkpuE9is207PbnUVb6 WMqDtnUZVj9HH/7taLpUXZ8fpKTvGOd4taCIM8X5a0/lDB2m02n48hFGgdi6h/zV yjH/pW52Os6qGa3EhCFG+LHlSt90hbmaA4eSBv9+pAOE369rFMf9ZkBFXjZwb2BL PNdc82qcd4whYtNwCgPi9q5tcuMgRvVD5viVUtwOidk+0PUmVgr31tqqLDFoUwhR K0uHSIA+O4wQQWQzQ7S0yL36TGKqoNuO -----END CERTIFICATE-----Generated at Mon Dec 22 11:31:38 2025 by rpki-client