This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
File: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json)
Hash identifier: N9wYTElmX4zpr0xeTJpHSYlkaOtzeivdQb2c69uU3iE=
Subject key identifier: BA:27:79:9E:F0:A0:C4:B2:12:E6:E6:DB:8C:13:16:84:2A:3E:2A:37
Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
Certificate issuer: /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
Manifest number: 01EC
Signing time: Fri 05 Dec 2025 00:53:13 +0000
Manifest this update: Fri 05 Dec 2025 00:53:13 +0000
Manifest next update: Fri 12 Dec 2025 00:53:13 +0000
Files and hashes: 1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: d3VkfY6gLDd3sTStib7kFoc4WKP/1JEef/blYKdWscg=)
2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: JW1dKstiHv1728tfD/7nx2W9fc+YXOuPr0l8dOY2HWI=)
3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: 0kmwTMLlfi4JUkvLZl5hjiEibE5pPoiG3TS5y+XQg4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Validity
Not Before: Dec 5 00:53:13 2025 GMT
Not After : Dec 12 00:53:13 2025 GMT
Subject: CN=69322cf9-27b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:32:0c:74:03:44:f7:8a:00:0b:9c:3c:fb:
fe:40:4d:88:c4:18:50:cb:84:11:7f:24:a1:0e:8b:
2f:7c:e3:98:76:a5:35:44:e3:57:82:8c:92:dc:69:
9f:a0:ab:ce:69:12:e9:b0:7b:af:9e:29:fd:04:fc:
ab:14:f5:e5:be:7f:2e:3c:59:79:7f:5e:df:66:d9:
50:23:f5:fa:56:10:54:e5:ff:65:8a:06:ff:75:ec:
ff:ca:80:be:78:c4:e7:b9:78:a0:be:64:69:df:28:
7f:53:dd:62:28:80:2b:73:71:7f:c5:93:b8:6b:11:
7d:cf:11:ca:aa:1b:86:3e:20:bf:3b:7c:06:43:41:
58:54:d9:11:a0:56:3b:00:6e:2f:07:b9:4d:7b:0c:
c4:10:08:10:b6:d2:b1:92:7a:fa:75:47:a6:4f:1a:
86:07:31:31:c5:b9:ed:1b:85:fa:d7:6f:db:f7:7c:
49:ba:d8:ae:67:6e:f8:e7:0b:10:f4:f7:69:9f:9f:
60:0c:60:3b:74:b5:e5:72:ed:fa:24:35:cd:88:5c:
0d:bf:08:52:96:8a:a3:99:2a:85:5f:9a:b8:e0:e7:
80:36:d7:45:c1:4b:66:60:58:02:83:d6:60:cf:d6:
58:37:89:11:f0:7f:40:58:d7:70:5a:5f:9e:c2:23:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:27:79:9E:F0:A0:C4:B2:12:E6:E6:DB:8C:13:16:84:2A:3E:2A:37
X509v3 Authority Key Identifier:
keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:93:da:60:ee:cd:2d:a3:3b:61:d8:22:c7:74:fc:e5:70:6b:
bf:25:9c:a4:8e:fa:27:85:15:0a:c3:f6:86:21:0a:0f:6b:2f:
a0:4a:bf:44:62:d0:9f:d2:c8:e3:c1:bd:1a:ad:2b:93:15:f7:
5e:ea:69:c5:7c:70:9c:88:b0:b9:63:89:7a:35:13:de:66:1c:
1b:f3:f7:e9:78:14:ac:28:04:5e:4c:ac:8f:c3:73:65:d2:0e:
48:40:68:77:fc:7a:5c:25:72:f2:ce:16:61:cb:d8:e2:c1:e4:
35:cc:6c:c9:8e:ee:b4:55:2d:4e:e2:46:55:cd:3c:3a:e4:41:
95:46:10:a5:ba:83:5d:24:d9:33:0a:33:b8:70:9e:26:f1:f3:
fd:7c:e6:62:ac:e6:c9:6b:dd:f4:7c:19:6a:32:bd:b7:bd:63:
c6:d9:ac:0b:db:2f:4c:67:80:1a:2d:dc:84:2e:00:2b:0d:15:
90:af:f9:8a:bb:32:45:d6:18:49:e0:8c:69:d7:a3:ee:fa:1f:
9e:e7:59:9c:cf:21:39:30:30:e8:6f:69:05:a9:6a:5f:24:47:
c8:9c:65:ed:d6:a1:7c:85:4c:a8:0c:9a:6e:dc:01:75:f4:7f:
b8:52:40:0e:83:14:32:45:ca:99:48:9b:6f:07:bc:6a:30:b4:
10:a1:45:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:39:35 2025 by rpki-client