This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft File: Bzzm268iYrP6YRXW_6ezNCFe-g0.mft (raw, json) Hash identifier: 8P+ZywjO+OclIhwm9eJ3M3PPCxgW+iKfpN0fk+3nuaM= Subject key identifier: 93:34:4B:EB:B5:AC:1C:75:D6:79:67:D3:DB:4C:AF:D2:72:C8:14:60 Authority key identifier: 07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D Certificate issuer: /CN=A91859C2/serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D Certificate serial: 0689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft Manifest number: 0683 Signing time: Mon 22 Dec 2025 21:42:53 +0000 Manifest this update: Mon 22 Dec 2025 21:42:52 +0000 Manifest next update: Mon 29 Dec 2025 21:42:52 +0000 Files and hashes: 1: Bzzm268iYrP6YRXW_6ezNCFe-g0.crl (hash: /25jOxtCGrgFwHIJwH88WMFWADDPg3hQrbTXK8KzvrQ=) 2: A80223709F4411EB92132051C4F9AE02.roa (hash: x3MhCffNjPE2g6AmezXK16941rD0tDaIk9FU7i8nfrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91859C2, serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D Validity Not Before: Dec 22 21:42:52 2025 GMT Not After : Dec 29 21:42:52 2025 GMT Subject: CN=6949bb5d-f029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:64:52:4e:7f:8f:c4:a6:be:22:bf:ef:1e: d2:12:42:c0:ab:d2:32:00:ee:2e:35:21:8a:c1:42: 04:35:80:ab:19:e9:c3:80:59:69:57:ee:c5:a0:d9: 1b:71:fa:63:d5:bc:37:2b:a1:b1:46:20:3f:fc:ac: b5:93:00:75:99:1c:72:a5:27:17:b9:9c:1f:c8:3b: 89:0b:4f:b5:e1:d1:49:06:ec:55:c1:a3:c1:f6:9f: ae:d2:4e:7a:0c:78:51:93:e2:16:84:47:33:e6:45: ad:ac:9a:3e:7b:3e:5e:56:a8:b3:ad:cf:88:ab:00: 15:25:5a:73:7d:7b:21:64:fa:f9:09:7f:ad:de:06: 93:30:ff:4a:05:69:03:fe:81:80:fc:b5:10:36:f4: 10:bc:08:75:80:02:e3:5c:aa:52:67:0d:57:de:ee: 5f:a2:96:5b:e4:bb:ab:28:00:fd:e3:db:29:23:20: 83:19:b8:85:01:18:7c:68:4c:8b:69:c1:65:21:c9: ed:cd:b0:c5:6f:39:f0:cf:fc:5d:a7:9b:e3:a6:f9: 26:84:01:69:b2:3f:f2:29:54:cb:a1:60:b6:62:c4: 27:e1:0d:76:18:cc:ad:a2:aa:c6:7c:0e:a4:d1:ae: 0d:96:09:67:1b:88:a7:2a:ca:c9:5c:9f:44:5a:ff: 67:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:34:4B:EB:B5:AC:1C:75:D6:79:67:D3:DB:4C:AF:D2:72:C8:14:60 X509v3 Authority Key Identifier: keyid:07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:c7:dd:2c:d8:cc:38:63:92:2b:a5:d8:1c:e4:e3:6c:99:04: 75:5c:12:05:d3:7d:a8:c5:26:9c:f5:b9:37:5f:86:61:fc:d5: 9e:8a:41:54:8f:f7:9a:49:5e:3c:f3:7b:d6:11:db:ae:e1:d4: 0e:67:e8:13:b3:50:c6:dc:cb:73:f9:d6:43:0d:48:6a:e9:e7: d8:b4:97:58:65:1f:56:51:59:41:eb:17:d5:dc:c9:d7:38:43: e8:fd:ff:9c:fc:31:f2:13:b7:4b:ff:c7:b3:ef:ab:a8:d8:7b: c8:6f:47:e0:79:87:0d:e8:d5:4d:bc:c5:08:13:a5:0c:4f:29: 05:4c:8c:01:6c:e7:b2:89:c7:e2:be:7c:4c:b3:02:ff:b9:f0: a8:d9:1a:28:00:37:a5:0f:a9:f0:d3:64:9f:5a:fa:95:7f:f7: b6:3f:2b:3f:8f:2b:d0:36:b7:45:fa:9c:57:c0:fc:ed:fb:a3: af:5a:75:3f:cf:47:dc:e3:ac:dc:dc:4f:51:c9:6e:6a:8a:67: 68:21:d8:87:64:a7:4b:d5:ed:b7:25:74:d2:5f:d5:12:7c:1f: f4:ea:a2:e9:c9:7b:c0:bc:87:55:99:41:93:46:f2:e1:c3:3e: 5e:9e:a8:69:3b:b2:bc:cb:63:0d:e1:5f:8a:0e:e5:0b:ac:5d: 9d:2e:a4:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU5QzIxMTAvBgNVBAUTKDA3M0NFNkRCQUYyMjYyQjNGQTYxMTVENkZGQTdCMzM0 MjE1RUZBMEQwHhcNMjUxMjIyMjE0MjUyWhcNMjUxMjI5MjE0MjUyWjAYMRYwFAYD VQQDDA02OTQ5YmI1ZC1mMDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiZkUk5/j8SmviK/7x7SEkLAq9IyAO4uNSGKwUIENYCrGenDgFlpV+7FoNkb cfpj1bw3K6GxRiA//Ky1kwB1mRxypScXuZwfyDuJC0+14dFJBuxVwaPB9p+u0k56 DHhRk+IWhEcz5kWtrJo+ez5eVqizrc+IqwAVJVpzfXshZPr5CX+t3gaTMP9KBWkD /oGA/LUQNvQQvAh1gALjXKpSZw1X3u5fopZb5LurKAD949spIyCDGbiFARh8aEyL acFlIcntzbDFbznwz/xdp5vjpvkmhAFpsj/yKVTLoWC2YsQn4Q12GMytoqrGfA6k 0a4NlglnG4inKsrJXJ9EWv9nbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJM0S+u1 rBx11nln09tMr9JyyBRgMB8GA1UdIwQYMBaAFAc85tuvImKz+mEV1v+nszQhXvoN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlDMi9FN0MwMjIzRTlG NDIxMUVCOTIyRDM1NEZDNEY5QUUwMi9CenptMjY4aVlyUDZZUlhXXzZlek5DRmUt ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6em0yNjhpWXJQNllSWFdfNmV6TkNGZS1nMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTlDMi9FN0MwMjIzRTlGNDIxMUVCOTIyRDM1NEZDNEY5QUUwMi9CenptMjY4aVly UDZZUlhXXzZlek5DRmUtZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAx90s2Mw4Y5Irpdgc5ONsmQR1XBIF032oxSac9bk3X4Zh/NWeikFU j/eaSV4883vWEduu4dQOZ+gTs1DG3Mtz+dZDDUhq6efYtJdYZR9WUVlB6xfV3MnX OEPo/f+c/DHyE7dL/8ez76uo2HvIb0fgeYcN6NVNvMUIE6UMTykFTIwBbOeyicfi vnxMswL/ufCo2RooADelD6nw02SfWvqVf/e2Pys/jyvQNrdF+pxXwPzt+6OvWnU/ z0fc46zc3E9RyW5qimdoIdiHZKdL1e23JXTSX9USfB/06qLpyXvAvIdVmUGTRvLh wz5enqhpO7K8y2MN4V+KDuULrF2dLqTy -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:11 2025 by rpki-client