This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft File: bgopAGEwM5uDbSj3ABgC9xpaTkI.mft (raw, json) Hash identifier: bFubxsdtcwZiB4dfKmVS4zeZzz0ze04YK/bj8D1lFgs= Subject key identifier: A9:E7:A5:FF:57:2C:80:02:8A:8A:BA:AD:26:F0:DB:54:B6:88:94:40 Authority key identifier: 6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 Certificate issuer: /CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Certificate serial: 033F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft Manifest number: 033B Signing time: Thu 04 Dec 2025 23:25:08 +0000 Manifest this update: Thu 04 Dec 2025 23:25:07 +0000 Manifest next update: Thu 11 Dec 2025 23:25:07 +0000 Files and hashes: 1: bgopAGEwM5uDbSj3ABgC9xpaTkI.crl (hash: wrKpHpgdQGv8imdxsEQOmrjJXwIXIHlmMvAkcOoCtIs=) 2: 3C3A98A4E71C11EC9128DF0BC4F9AE02.roa (hash: rY7SQuVKgC/AxWbpxkoT7pJkBb/Nudv0kRr7++VnHvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 831 (0x33f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166D1, serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Validity Not Before: Dec 4 23:25:07 2025 GMT Not After : Dec 11 23:25:07 2025 GMT Subject: CN=69321854-2ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:61:1b:69:00:f2:3e:39:78:fc:2d:ec:d2:f0: ba:61:a5:a6:0d:05:20:a0:90:93:95:be:a4:3f:b7: 7a:25:f5:a3:f1:57:2b:38:28:24:b1:7f:f7:38:87: e4:e6:d3:25:3a:38:d1:4f:fa:25:25:60:4e:12:ad: 66:1f:b0:c5:3a:8f:e4:50:fc:0e:f7:ad:24:8f:42: a5:7b:b1:6e:fd:f0:02:6b:ba:32:17:83:19:d4:ff: dc:13:95:19:e9:b0:f2:34:c8:9b:f4:cd:fc:ba:e0: bb:92:15:0f:2b:be:c2:9b:c3:27:e5:fc:43:ff:5b: 86:87:84:d3:c1:2c:bb:e2:f7:bd:b7:ff:20:a5:7f: 89:3c:eb:00:32:35:9a:fb:b9:64:88:43:9c:44:5a: 74:08:2c:13:d7:c8:7c:05:a3:2d:0c:14:a0:68:00: f3:d9:ef:d6:e7:e7:33:44:d0:6b:25:4b:28:eb:dc: d5:0b:3d:23:0a:fd:da:d9:e5:47:8c:39:2b:8b:a1: c7:5f:05:df:d8:23:1a:da:4a:17:3e:b8:5d:29:8b: 4e:c1:25:c7:fa:aa:dd:b4:09:6b:b8:ba:99:13:7d: 50:84:5a:b2:53:ae:e7:f1:04:58:20:61:03:8f:e3: 55:30:91:3e:3a:44:11:2f:a9:ac:a5:02:2a:6f:a1: 33:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E7:A5:FF:57:2C:80:02:8A:8A:BA:AD:26:F0:DB:54:B6:88:94:40 X509v3 Authority Key Identifier: keyid:6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:61:6f:da:fe:4f:8f:7e:03:72:ea:ca:8e:07:0f:e0:31:a8: 93:cd:20:37:c6:70:d1:4a:68:10:f4:47:76:8b:78:de:a1:ca: b9:9c:fc:68:d3:59:ed:55:fd:51:a1:39:a9:5e:86:4e:8c:af: 38:5e:75:13:66:13:63:3a:94:bf:e4:b9:03:c3:92:dc:25:37: d0:77:c8:50:14:e8:e0:6b:ee:45:07:9a:3c:51:78:79:ae:38: 75:f5:17:52:ab:37:44:58:12:37:0d:ff:26:fe:d1:86:62:72: 7c:9f:35:8c:f1:d8:ce:79:4c:98:b3:5a:de:eb:07:85:cc:09: c3:ec:cf:30:24:09:33:0a:44:1c:ad:5d:04:5d:95:de:4f:04: be:77:83:f8:5d:2e:6e:9e:3f:61:51:c7:cf:95:f6:70:4d:b9: 7b:08:5d:1b:3e:10:01:31:db:6b:c0:5d:17:f6:75:17:a2:4d: f8:58:83:a6:f7:49:f1:e8:8a:b9:81:15:bf:72:d2:5e:ad:d4: 18:13:91:d3:f9:3c:85:92:ea:41:d1:9b:cd:95:bf:28:31:09: 6e:c6:03:16:4f:52:05:c9:8a:f1:94:ba:f1:f7:91:79:94:fc: 2c:ff:d5:a6:4a:8c:16:81:1b:45:b2:4d:eb:0b:58:90:02:86: f3:3c:2f:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RDExMTAvBgNVBAUTKDZFMEEyOTAwNjEzMDMzOUI4MzZEMjhGNzAwMTgwMkY3 MUE1QTRFNDIwHhcNMjUxMjA0MjMyNTA3WhcNMjUxMjExMjMyNTA3WjAYMRYwFAYD VQQDEw02OTMyMTg1NC0yZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8WEbaQDyPjl4/C3s0vC6YaWmDQUgoJCTlb6kP7d6JfWj8VcrOCgksX/3OIfk 5tMlOjjRT/olJWBOEq1mH7DFOo/kUPwO960kj0Kle7Fu/fACa7oyF4MZ1P/cE5UZ 6bDyNMib9M38uuC7khUPK77Cm8Mn5fxD/1uGh4TTwSy74ve9t/8gpX+JPOsAMjWa +7lkiEOcRFp0CCwT18h8BaMtDBSgaADz2e/W5+czRNBrJUso69zVCz0jCv3a2eVH jDkri6HHXwXf2CMa2koXPrhdKYtOwSXH+qrdtAlruLqZE31QhFqyU67n8QRYIGED j+NVMJE+OkQRL6mspQIqb6Ez+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnnpf9X LIACioq6rSbw21S2iJRAMB8GA1UdIwQYMBaAFG4KKQBhMDObg20o9wAYAvcaWk5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZEMS9BQkRBNTE0MkU3 MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001dURiU2ozQUJnQzl4cGFU a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Jnb3BBR0V3TTV1RGJTajNBQmdDOXhwYVRrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZEMS9BQkRBNTE0MkU3MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001 dURiU2ozQUJnQzl4cGFUa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYYW/a/k+PfgNy6sqOBw/gMaiTzSA3xnDRSmgQ9Ed2i3jeocq5nPxo 01ntVf1RoTmpXoZOjK84XnUTZhNjOpS/5LkDw5LcJTfQd8hQFOjga+5FB5o8UXh5 rjh19RdSqzdEWBI3Df8m/tGGYnJ8nzWM8djOeUyYs1re6weFzAnD7M8wJAkzCkQc rV0EXZXeTwS+d4P4XS5unj9hUcfPlfZwTbl7CF0bPhABMdtrwF0X9nUXok34WIOm 90nx6Iq5gRW/ctJerdQYE5HT+TyFkupB0ZvNlb8oMQluxgMWT1IFyYrxlLrx95F5 lPws/9WmSowWgRtFsk3rC1iQAobzPC9c -----END CERTIFICATE-----Generated at Sat Dec 6 18:48:58 2025 by rpki-client