This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft File: BiJAzedW2VtXd-JnqnsGVPg09JM.mft (raw, json) Hash identifier: XaYmJQGyr6XJR9A8c0g1t18WwE58vP/Qi2uh1yjsftE= Subject key identifier: 43:65:FD:89:E4:E4:34:A4:1C:11:95:70:74:DB:B4:D7:B0:DA:D2:32 Authority key identifier: 06:22:40:CD:E7:56:D9:5B:57:77:E2:67:AA:7B:06:54:F8:34:F4:93 Certificate issuer: /CN=A919DCE3/serialNumber=062240CDE756D95B5777E267AA7B0654F834F493 Certificate serial: 06A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft Manifest number: 069F Signing time: Mon 08 Dec 2025 21:08:32 +0000 Manifest this update: Mon 08 Dec 2025 21:08:32 +0000 Manifest next update: Mon 15 Dec 2025 21:08:32 +0000 Files and hashes: 1: BiJAzedW2VtXd-JnqnsGVPg09JM.crl (hash: B+5T4fLopBCuHA9Skb6h/PNv0FUAb/xEgsDuQuDAiMM=) 2: E9610376903B11EBB91C8B5DC4F9AE02.roa (hash: 8EJ9t0dHzPuImjiYAPoyaHv+e1oWlijq5dSgwTFlJ+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.crl rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 21:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1700 (0x6a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DCE3, serialNumber=062240CDE756D95B5777E267AA7B0654F834F493 Validity Not Before: Dec 8 21:08:32 2025 GMT Not After : Dec 15 21:08:32 2025 GMT Subject: CN=69373e50-9739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fd:37:7e:6a:20:6d:60:7e:90:c4:d3:85:80: 78:58:be:ec:67:1e:19:88:6b:11:26:b6:2a:e7:2c: be:58:65:ea:4e:c2:ca:bb:a3:59:ed:54:bc:c4:80: 8a:c3:40:fd:18:8c:04:cd:19:fa:f8:09:b2:52:68: 9c:1b:68:1f:2a:1b:59:9b:3c:bc:cd:7c:87:49:fd: 80:4e:59:4b:37:21:11:29:1e:c3:54:af:1f:6b:fb: cf:c7:ea:7c:53:c8:13:3b:3f:93:0f:71:17:3e:04: f1:29:88:da:40:e2:12:d7:8f:05:5e:ce:51:2a:ba: 86:10:e9:92:18:6f:57:43:60:0c:d9:56:e2:5a:7d: ee:6e:91:e2:0c:2f:e3:9c:df:11:ab:91:62:3e:4e: 98:3f:2a:53:dd:3a:ee:64:d1:f3:e5:df:13:dd:4f: 8b:e8:6d:92:03:b3:2f:6a:7d:d4:c7:a0:9d:cd:93: 2e:06:44:5e:e9:6d:6c:a5:d3:67:dd:fa:dd:8f:6c: b7:ed:9e:06:b7:cd:db:e0:51:9f:22:73:78:4d:6c: 3c:f2:00:79:33:57:b5:db:ea:e0:87:b4:ff:5e:2d: fa:fb:3f:6b:72:55:37:81:2d:c0:07:b8:57:5b:f4: 44:6a:09:42:2c:7e:82:49:09:4c:c0:6e:94:51:cb: a6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:65:FD:89:E4:E4:34:A4:1C:11:95:70:74:DB:B4:D7:B0:DA:D2:32 X509v3 Authority Key Identifier: keyid:06:22:40:CD:E7:56:D9:5B:57:77:E2:67:AA:7B:06:54:F8:34:F4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:e3:c4:b6:55:0f:38:fc:71:e6:ec:e2:2a:b8:6e:8e:5f:0f: 65:df:0a:79:8e:4a:97:ed:1c:cf:c0:1a:5b:fe:84:a4:e4:b5: 21:e3:24:b2:b2:3d:dc:51:71:60:14:22:b6:10:72:6a:4a:96: c6:06:f2:2d:b0:db:9b:a6:b5:40:25:cc:22:30:60:63:16:d7: c5:9f:70:2f:bd:af:e8:90:d9:08:ec:2a:bc:63:c5:a2:7c:0d: 16:7b:1c:21:cf:b8:4a:4c:09:ab:78:23:11:c4:11:53:b2:d6: 9b:2a:6b:3f:3a:d0:f2:36:46:79:27:16:2e:2b:c4:42:b7:fc: 5a:2e:b2:8f:9d:47:be:13:2b:62:34:39:bf:77:49:fa:2e:0b: 2a:8b:24:85:bb:ac:91:20:cf:3e:19:a4:a3:4d:9f:72:c4:4f: f8:68:11:e5:0d:a5:f1:27:3e:e6:c9:e9:56:af:a4:f5:42:de: 5e:95:88:15:87:b9:57:a6:8b:2f:5a:dc:0d:db:36:48:25:b4: 0d:f4:4b:12:1a:38:8c:3f:e7:5c:c7:40:5d:02:86:f4:50:43: 7c:85:73:a7:95:f4:e3:86:fe:17:87:60:ce:43:d5:d8:7f:9f: 6d:55:fb:e0:95:b7:18:8b:0e:df:82:68:47:8d:ff:c8:b2:6c: 34:44:9b:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDRTMxMTAvBgNVBAUTKDA2MjI0MENERTc1NkQ5NUI1Nzc3RTI2N0FBN0IwNjU0 RjgzNEY0OTMwHhcNMjUxMjA4MjEwODMyWhcNMjUxMjE1MjEwODMyWjAYMRYwFAYD VQQDEw02OTM3M2U1MC05NzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3v03fmogbWB+kMTThYB4WL7sZx4ZiGsRJrYq5yy+WGXqTsLKu6NZ7VS8xICK w0D9GIwEzRn6+AmyUmicG2gfKhtZmzy8zXyHSf2ATllLNyERKR7DVK8fa/vPx+p8 U8gTOz+TD3EXPgTxKYjaQOIS148FXs5RKrqGEOmSGG9XQ2AM2VbiWn3ubpHiDC/j nN8Rq5FiPk6YPypT3TruZNHz5d8T3U+L6G2SA7Mvan3Ux6CdzZMuBkRe6W1spdNn 3frdj2y37Z4Gt83b4FGfInN4TWw88gB5M1e12+rgh7T/Xi36+z9rclU3gS3AB7hX W/REaglCLH6CSQlMwG6UUcumawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENl/Ynk 5DSkHBGVcHTbtNew2tIyMB8GA1UdIwQYMBaAFAYiQM3nVtlbV3fiZ6p7BlT4NPST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RENFMy9CRDI5Qzk5Mjkw M0ExMUVCOTQwRjI4NURDNEY5QUUwMi9CaUpBemVkVzJWdFhkLUpucW5zR1ZQZzA5 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JpSkF6ZWRXMlZ0WGQtSm5xbnNHVlBnMDlKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RENFMy9CRDI5Qzk5MjkwM0ExMUVCOTQwRjI4NURDNEY5QUUwMi9CaUpBemVkVzJW dFhkLUpucW5zR1ZQZzA5Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB48S2VQ84/HHm7OIquG6OXw9l3wp5jkqX7RzPwBpb/oSk5LUh4ySy sj3cUXFgFCK2EHJqSpbGBvItsNubprVAJcwiMGBjFtfFn3Avva/okNkI7Cq8Y8Wi fA0Wexwhz7hKTAmreCMRxBFTstabKms/OtDyNkZ5JxYuK8RCt/xaLrKPnUe+Eyti NDm/d0n6LgsqiySFu6yRIM8+GaSjTZ9yxE/4aBHlDaXxJz7myelWr6T1Qt5elYgV h7lXposvWtwN2zZIJbQN9EsSGjiMP+dcx0BdAob0UEN8hXOnlfTjhv4Xh2DOQ9XY f59tVfvglbcYiw7fgmhHjf/Ismw0RJv0 -----END CERTIFICATE-----Generated at Wed Dec 10 05:24:45 2025 by rpki-client