This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft File: bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft (raw, json) Hash identifier: noYVoPnuKWcoOZwGnC6eTWK/ExEWKq5tYd5avJGGQ8w= Subject key identifier: AC:30:C1:1C:FE:68:9E:1E:51:12:96:AC:B0:51:80:FA:F3:CD:3D:41 Authority key identifier: 6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65 Certificate issuer: /CN=A91240E6/serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65 Certificate serial: 267F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft Manifest number: 2665 Signing time: Sat 06 Dec 2025 15:27:29 +0000 Manifest this update: Sat 06 Dec 2025 15:27:29 +0000 Manifest next update: Sat 13 Dec 2025 15:27:29 +0000 Files and hashes: 1: bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl (hash: QpgpDUCflYEzucHFNCdUGRORsuF8T5jqaRdPEtKIDqo=) 2: 8A721F4EB10C11E5BB6B2A16C4F9AE02.roa (hash: IwUXo20n+V2B2SbXh2brhMIgczh2mlcm0AjnKKmeoo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9855 (0x267f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91240E6, serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65 Validity Not Before: Dec 6 15:27:29 2025 GMT Not After : Dec 13 15:27:29 2025 GMT Subject: CN=69344b61-43f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:af:84:44:3e:a5:d1:d1:ab:83:b1:ae:f9: 86:61:22:c4:71:79:c1:ff:cc:45:52:e4:f9:97:24: 5a:95:33:3f:80:c6:d3:50:85:af:14:29:ad:5b:3d: d7:5a:3d:cc:1c:2f:c4:06:b2:ce:af:f4:f6:e5:8d: a2:11:dd:72:58:cc:81:b3:d7:28:3e:55:cb:28:2d: 7d:2c:f6:31:0b:45:43:ef:47:a9:6c:95:16:8a:d0: a3:b8:8c:aa:90:25:cb:9d:1a:90:99:78:4d:f9:86: 80:d2:1f:5f:6c:9c:e6:12:3f:ba:c1:3b:1a:4d:af: 5c:1f:ff:b5:da:a3:0b:58:04:d7:58:95:9d:3c:74: b7:cc:cb:1e:6c:26:52:26:23:a7:df:aa:6f:2e:18: 94:36:62:64:33:1b:2e:ce:6d:e2:24:b2:ec:c4:f5: 1e:06:36:e1:30:75:e9:a1:df:04:25:2e:05:83:5b: d9:40:e9:ed:30:eb:0b:df:2e:e8:88:57:23:25:1a: 52:93:5c:a4:56:f3:25:eb:80:c6:e0:ca:ca:7f:99: 45:25:7b:7b:b9:e0:98:65:d2:91:b7:5b:41:e5:eb: 17:1f:d6:74:7d:3f:86:37:5d:2d:02:3c:40:b3:25: 04:5e:5f:54:6e:75:0d:bc:94:a9:f0:8b:c8:a3:6d: 4c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:30:C1:1C:FE:68:9E:1E:51:12:96:AC:B0:51:80:FA:F3:CD:3D:41 X509v3 Authority Key Identifier: keyid:6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:91:ee:56:fe:83:03:83:46:61:dd:77:49:53:c8:39:80:c3: 28:d7:e0:b7:58:62:5d:56:57:04:c6:64:3c:0c:ae:0b:15:50: b0:02:a4:45:dd:1d:53:e5:1c:bc:4b:6a:dc:45:c4:61:1d:68: 05:d1:e2:ff:e6:f3:59:ed:ed:60:5d:79:fa:67:80:5b:59:74: e1:ad:bd:c6:87:f1:52:6b:98:7b:18:c0:ab:be:9a:80:88:33: 9d:bd:c0:c4:aa:ac:be:06:3c:c7:f8:7a:61:b2:23:72:5f:18: 04:15:9f:79:4b:db:8d:8d:2f:b6:47:56:c6:ce:d3:e4:3b:c3: c8:0c:4e:40:c3:0f:c4:78:fe:17:c2:9c:98:68:f6:bf:f2:45: 9e:6a:63:0b:5e:9c:ef:1f:e1:5c:f3:40:0b:ee:10:d9:ec:48: 93:8b:5b:5b:87:ab:4e:ba:1b:bc:c9:c9:46:82:d9:f5:97:3e: 83:74:7d:7c:82:14:49:49:ee:60:a1:8f:79:0c:37:f9:ed:29: 7b:db:31:fc:de:10:f2:6b:31:42:6b:08:13:91:f7:12:f7:8a: 96:d9:d9:6a:44:6c:b4:3e:49:9e:54:e5:45:8f:75:68:df:d7: e3:71:57:4c:70:08:c3:c6:54:da:bb:76:bc:2c:2c:ce:c2:2f: d2:f7:1e:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwRTYxMTAvBgNVBAUTKDZEQ0U1MkY5QTIyOENCRjZGMzBDRDU1RDQzMzg0RDEy Njg0ODdCNjUwHhcNMjUxMjA2MTUyNzI5WhcNMjUxMjEzMTUyNzI5WjAYMRYwFAYD VQQDEw02OTM0NGI2MS00M2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1c2vhEQ+pdHRq4OxrvmGYSLEcXnB/8xFUuT5lyRalTM/gMbTUIWvFCmtWz3X Wj3MHC/EBrLOr/T25Y2iEd1yWMyBs9coPlXLKC19LPYxC0VD70epbJUWitCjuIyq kCXLnRqQmXhN+YaA0h9fbJzmEj+6wTsaTa9cH/+12qMLWATXWJWdPHS3zMsebCZS JiOn36pvLhiUNmJkMxsuzm3iJLLsxPUeBjbhMHXpod8EJS4Fg1vZQOntMOsL3y7o iFcjJRpSk1ykVvMl64DG4MrKf5lFJXt7ueCYZdKRt1tB5esXH9Z0fT+GN10tAjxA syUEXl9UbnUNvJSp8IvIo21M7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwwwRz+ aJ4eURKWrLBRgPrzzT1BMB8GA1UdIwQYMBaAFG3OUvmiKMv28wzVXUM4TRJoSHtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDBFNi82NjA3NDJDOEZE MjExMUU0ODhBQjBDMzRDNEY5QUUwMi9iYzVTLWFJb3lfYnpETlZkUXpoTkVtaEll MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjNVMtYUlveV9iekROVmRRemhORW1oSWUyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDBFNi82NjA3NDJDOEZEMjExMUU0ODhBQjBDMzRDNEY5QUUwMi9iYzVTLWFJb3lf YnpETlZkUXpoTkVtaEllMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeke5W/oMDg0Zh3XdJU8g5gMMo1+C3WGJdVlcExmQ8DK4LFVCwAqRF 3R1T5Ry8S2rcRcRhHWgF0eL/5vNZ7e1gXXn6Z4BbWXThrb3Gh/FSa5h7GMCrvpqA iDOdvcDEqqy+BjzH+HphsiNyXxgEFZ95S9uNjS+2R1bGztPkO8PIDE5Aww/EeP4X wpyYaPa/8kWeamMLXpzvH+Fc80AL7hDZ7EiTi1tbh6tOuhu8yclGgtn1lz6DdH18 ghRJSe5goY95DDf57Sl72zH83hDyazFCawgTkfcS94qW2dlqRGy0PkmeVOVFj3Vo 39fjcVdMcAjDxlTau3a8LCzOwi/S9x7e -----END CERTIFICATE-----Generated at Sun Dec 7 02:35:00 2025 by rpki-client