This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
File: BgI9tGNNXG41YYCoL7vPgLlHir4.mft (raw, json)
Hash identifier: q4P/RZB5qZ98GNnNtM3BJrq5XOnMgQWqtE9/bsBJ7ys=
Subject key identifier: 65:C4:54:20:06:FA:8F:E2:41:99:FA:B4:8F:E3:93:66:BA:D4:3E:D0
Authority key identifier: 06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE
Certificate issuer: /CN=A91490F7/serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
Manifest number: 01BD
Signing time: Sun 21 Dec 2025 02:17:18 +0000
Manifest this update: Sun 21 Dec 2025 02:17:18 +0000
Manifest next update: Sun 28 Dec 2025 02:17:18 +0000
Files and hashes: 1: BgI9tGNNXG41YYCoL7vPgLlHir4.crl (hash: U6gYrFWCtyhJYZRdklS0BeXwRrq9RA6HESgmj/d+mGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl
rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91490F7, serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
Validity
Not Before: Dec 21 02:17:18 2025 GMT
Not After : Dec 28 02:17:18 2025 GMT
Subject: CN=694758ae-97e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:6b:60:7d:a9:ca:0e:6d:85:91:0c:23:67:
5d:68:8a:7c:de:90:07:d9:71:83:21:87:ae:07:e8:
38:a3:ce:17:d7:64:07:ff:73:a5:6d:49:22:30:bc:
a0:0e:06:01:7f:a1:bc:4b:1b:cf:2d:fe:c3:0e:c9:
28:cf:21:47:a7:0d:99:a9:80:ff:e0:ea:12:00:ec:
8c:5b:77:4a:43:08:3a:8d:f5:80:9e:0f:93:3b:52:
40:b2:93:58:52:38:4d:c8:ad:a9:5c:d8:9d:06:eb:
be:0f:15:16:6b:3d:41:85:b4:95:ee:b1:db:44:7f:
2d:b3:f9:0e:6e:26:81:01:d3:7c:0c:eb:28:90:c1:
79:3d:cc:8a:68:8f:21:cf:f5:69:19:d8:8f:f8:5f:
49:dc:6f:bd:37:0e:f7:ca:fb:1a:05:0c:c9:2e:72:
4e:94:2d:d4:11:79:2c:c3:42:61:7c:6a:b9:8a:fd:
70:33:29:01:93:98:2f:cf:b7:b9:13:e0:a2:69:8f:
b5:13:34:9b:55:06:c6:90:f2:24:e0:89:56:89:4d:
5f:bc:74:e4:e9:a7:64:98:5c:42:b3:2a:74:4c:52:
b1:06:5f:a1:39:a1:bc:39:4d:c0:71:e0:72:ad:43:
e2:c0:a0:05:25:df:ab:cc:cb:b7:24:f5:ab:1c:36:
db:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C4:54:20:06:FA:8F:E2:41:99:FA:B4:8F:E3:93:66:BA:D4:3E:D0
X509v3 Authority Key Identifier:
keyid:06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:a5:9e:0f:32:2f:ad:d1:b7:18:e1:9e:55:c0:20:71:53:d1:
f7:dd:17:89:28:ab:fa:16:50:cf:62:82:c1:44:e9:85:7c:f3:
27:f1:51:f0:0a:f4:60:37:cb:ed:70:51:31:f2:bd:70:8f:50:
97:3e:5e:3e:9d:a3:9e:37:a1:16:d1:1c:01:5b:9d:04:00:7a:
d6:d7:c9:9b:bd:7d:82:7a:ff:66:45:eb:8f:97:1d:91:8e:56:
ae:25:e0:2d:05:fc:2b:a3:8c:c6:9e:70:67:1a:33:a4:fe:69:
25:cb:dd:b7:59:9b:50:5e:b1:a5:1d:1c:55:b1:be:a8:61:37:
80:3b:d6:b6:b1:21:0b:1f:61:d1:1e:44:1d:a7:7e:cc:b3:50:
4a:a3:27:a2:26:fc:a8:9b:18:e6:23:40:19:c4:72:b1:75:c2:
c4:c5:0c:78:77:8c:fb:50:c5:00:05:a5:09:ee:c3:0b:3b:b1:
6f:c3:86:9d:4f:96:a0:e5:18:24:82:a8:67:5e:43:c3:4a:98:
bb:03:0b:23:2e:6a:ab:3c:24:2c:37:0e:c9:db:d9:6c:97:86:
08:9e:fe:5c:90:4d:ea:a5:da:e6:30:f0:be:89:69:89:cf:d3:
77:ce:85:de:2c:6b:8a:86:3e:42:16:06:1b:98:55:c5:ba:8f:
a4:cc:60:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:29:13 2025 by rpki-client