This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft File: bKayrB3RewFNtsdnJ50Ixm5O_AU.mft (raw, json) Hash identifier: ExPDlp1wOdU0QDXjnHoKsHEjPBafGV84tRZ/S0rE2pA= Subject key identifier: C3:6F:EC:5D:25:21:5F:8F:5D:73:A6:44:D2:30:24:E3:52:B9:27:BE Authority key identifier: 6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05 Certificate issuer: /CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05 Certificate serial: 1006 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft Manifest number: 0FDE Signing time: Tue 02 Dec 2025 17:07:56 +0000 Manifest this update: Tue 02 Dec 2025 17:07:55 +0000 Manifest next update: Tue 09 Dec 2025 17:07:55 +0000 Files and hashes: 1: bKayrB3RewFNtsdnJ50Ixm5O_AU.crl (hash: zdkkOhopxxQ9WNAEKVjn7CTPCUzUnbiv8RJigD2oBfA=) 2: 61A85BEE21CF11EBA0C85857C4F9AE02.roa (hash: FEdMa9ZJBaoWQIx6djE/7tcciw4VTrjU3qrHgN23mo8=) 3: FD22BBAE231F11EB99F53580C4F9AE02.roa (hash: XXa6SJA5QTgmd2S25JSyBGpv+kardlTpnYOCPB9Kf1Y=) 4: 425BF5FE7A4711EBAD125258C4F9AE02.roa (hash: OQe13tIv3uovK7+LLI22t0SruIOPUw/wbyXtMiDbVn4=) 5: A850C476026E11EBB2E0E72FC4F9AE02.roa (hash: MUbgi1W9az5Y+OqycFqv9bQ0JgxdrpLfybU7ZdOSDHk=) 6: 5FB07B1421CF11EBA0C85857C4F9AE02.roa (hash: OmYQIIbzZk6dmH6VxHcDDfUOUOfBGcECAJW72iuPNeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 17:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4102 (0x1006) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6B4, serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05 Validity Not Before: Dec 2 17:07:55 2025 GMT Not After : Dec 9 17:07:55 2025 GMT Subject: CN=692f1cec-ce20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:57:99:d4:d0:d0:1c:63:68:82:80:39:2e:5c: 0c:c7:74:38:4d:5f:8e:20:93:a4:b4:a4:c5:8e:66: d7:08:99:95:4c:b3:73:3f:ab:a8:7e:06:0e:21:36: ec:b8:6d:bc:63:d1:df:40:2f:84:5a:89:67:9b:62: 2e:5d:0f:8d:8b:bf:18:c0:61:7a:8f:85:3a:49:59: 3a:76:3e:bc:fb:e0:4a:54:17:37:e5:01:8b:66:ee: d8:11:fd:0a:cd:51:cb:54:18:e9:72:b7:38:b7:fa: 4d:1d:1c:af:54:4f:bf:a7:d2:cf:71:dc:7e:33:b5: a2:b2:26:ca:85:56:99:b0:e4:86:ea:ec:d8:f2:49: 39:4a:91:01:2a:f0:24:7d:b3:83:70:c1:85:e3:8d: 8a:67:a8:c9:e1:e8:1e:66:e4:ff:ce:9d:93:88:21: 5e:fb:b9:0b:26:5b:57:62:d4:da:d6:66:ea:28:a7: 16:ce:68:08:83:53:e9:6a:a8:1e:9c:2c:59:e6:b7: 5b:5b:04:75:4e:41:44:08:c2:5c:29:3a:0e:b5:3e: 7d:69:c4:cd:e9:f8:22:d0:bd:13:4a:dc:2b:84:19: 7f:fa:10:e1:84:1c:a6:33:75:05:9c:04:74:b9:df: 3a:1b:7b:f4:e1:2e:dd:6c:e7:34:c9:d9:7c:5d:e4: bc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6F:EC:5D:25:21:5F:8F:5D:73:A6:44:D2:30:24:E3:52:B9:27:BE X509v3 Authority Key Identifier: keyid:6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ca:49:db:19:30:87:64:ac:8f:bc:d4:d6:28:e6:5b:1d:4b: ea:17:7e:0c:e6:de:f9:a0:12:a8:50:04:41:fd:6d:22:ed:b3: 5c:8b:d9:b5:99:fc:cc:85:9e:32:df:b6:93:62:2e:22:81:cf: d4:fd:6e:93:e8:f3:39:f9:a6:58:8c:60:de:40:9f:70:a0:ec: 27:15:73:fb:51:c7:9c:3c:02:29:be:b3:6b:6d:95:76:b1:8d: 5d:90:41:65:47:c8:23:7d:d2:00:cb:33:fe:a1:c9:8a:af:15: 36:e2:e4:a5:f6:bb:5d:be:39:0b:a0:16:d9:2f:93:9f:b6:f4: 99:75:46:0f:8a:8d:e4:3e:5a:6b:09:b6:71:1e:6a:b7:48:a5: eb:56:74:37:ba:5f:cf:3a:21:a0:c2:c3:ae:88:6b:16:f5:3e: 10:0e:6e:e7:3e:2e:7f:78:30:a8:78:53:6c:f7:93:db:98:fb: 22:af:32:a0:9a:75:71:bf:6d:05:7f:f3:cb:6f:e2:dc:90:55: c7:bb:72:cd:9e:0f:71:01:5f:95:e6:11:fa:f7:e0:5a:13:75: 8f:5b:93:25:0c:6a:4d:e2:77:2a:74:65:ef:c7:b8:58:6e:85: bb:5b:09:7c:36:b2:0d:10:b9:1d:3f:8e:2c:3b:cd:8d:86:37: a1:1b:d8:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2QjQxMTAvBgNVBAUTKDZDQTZCMkFDMUREMTdCMDE0REI2Qzc2NzI3OUQwOEM2 NkU0RUZDMDUwHhcNMjUxMjAyMTcwNzU1WhcNMjUxMjA5MTcwNzU1WjAYMRYwFAYD VQQDEw02OTJmMWNlYy1jZTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1eZ1NDQHGNogoA5LlwMx3Q4TV+OIJOktKTFjmbXCJmVTLNzP6uofgYOITbs uG28Y9HfQC+EWolnm2IuXQ+Ni78YwGF6j4U6SVk6dj68++BKVBc35QGLZu7YEf0K zVHLVBjpcrc4t/pNHRyvVE+/p9LPcdx+M7WisibKhVaZsOSG6uzY8kk5SpEBKvAk fbODcMGF442KZ6jJ4egeZuT/zp2TiCFe+7kLJltXYtTa1mbqKKcWzmgIg1Ppaqge nCxZ5rdbWwR1TkFECMJcKToOtT59acTN6fgi0L0TStwrhBl/+hDhhBymM3UFnAR0 ud86G3v04S7dbOc0ydl8XeS8nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNv7F0l IV+PXXOmRNIwJONSuSe+MB8GA1UdIwQYMBaAFGymsqwd0XsBTbbHZyedCMZuTvwF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZCNC83MjZGNTFDMjYz RjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3Rk50c2RuSjUwSXhtNU9f QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLYXlyQjNSZXdGTnRzZG5KNTBJeG01T19BVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZCNC83MjZGNTFDMjYzRjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3 Rk50c2RuSjUwSXhtNU9fQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyyknbGTCHZKyPvNTWKOZbHUvqF34M5t75oBKoUARB/W0i7bNci9m1 mfzMhZ4y37aTYi4igc/U/W6T6PM5+aZYjGDeQJ9woOwnFXP7UcecPAIpvrNrbZV2 sY1dkEFlR8gjfdIAyzP+ocmKrxU24uSl9rtdvjkLoBbZL5OftvSZdUYPio3kPlpr CbZxHmq3SKXrVnQ3ul/POiGgwsOuiGsW9T4QDm7nPi5/eDCoeFNs95PbmPsirzKg mnVxv20Ff/PLb+LckFXHu3LNng9xAV+V5hH69+BaE3WPW5MlDGpN4ncqdGXvx7hY boW7Wwl8NrINELkdP44sO82NhjehG9hL -----END CERTIFICATE-----Generated at Wed Dec 3 12:43:27 2025 by rpki-client