This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft File: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft (raw, json) Hash identifier: UCb0zeYYKU5ju27nmwB2pEiAynvGMBfMB0ufdI1emlc= Subject key identifier: 28:81:E7:A6:DD:14:01:1B:5D:93:5A:DF:9C:9C:85:8B:8B:E3:15:7E Authority key identifier: 04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1 Certificate issuer: /CN=A9160244/serialNumber=0434017186DB84CA89477570DDA10AD731597FF1 Certificate serial: 2520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft Manifest number: 2511 Signing time: Thu 04 Dec 2025 15:34:13 +0000 Manifest this update: Thu 04 Dec 2025 15:34:13 +0000 Manifest next update: Thu 11 Dec 2025 15:34:13 +0000 Files and hashes: 1: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl (hash: Pp+JFGcbuSak0kY/6ZXeWAwIjaRCc9Ly6Q84qiIGzN0=) 2: E1FACBC0B10D11E5894F4D1CC4F9AE02.roa (hash: FvWwS3Spm+rRrjY0/JRXkfVlZov8/+1jHfihNOtR95E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9504 (0x2520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160244, serialNumber=0434017186DB84CA89477570DDA10AD731597FF1 Validity Not Before: Dec 4 15:34:13 2025 GMT Not After : Dec 11 15:34:13 2025 GMT Subject: CN=6931a9f5-828c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c8:1b:ed:4a:01:77:bb:2b:78:0f:d3:30:1e: 3b:e4:50:1d:e3:6b:cb:19:a5:2f:f2:77:e5:50:ea: a9:ed:62:53:c0:21:35:4f:cc:70:3b:40:d1:52:df: 46:f8:95:30:b7:a4:c6:74:94:5e:e6:88:2c:c0:a0: 8e:eb:bc:4b:d0:16:8d:e2:47:ba:1d:b0:e6:35:75: 11:02:6c:6f:89:bc:89:d9:96:bb:ec:5e:b0:80:8b: 30:34:24:a2:0e:b3:09:41:18:bb:63:87:fe:70:8f: 96:38:ba:0a:7d:ba:8a:3e:bd:13:fb:c0:86:9c:74: 5a:c8:50:fc:d3:de:bc:37:35:9f:70:00:af:90:4d: a3:e9:d2:6f:57:27:d0:99:f4:00:b4:d6:bc:27:21: 11:b5:93:75:b1:f9:bd:06:50:e7:06:e1:31:f6:b8: 1d:83:d0:37:c3:e1:23:eb:7c:e5:d4:b1:31:79:60: 79:0b:59:98:14:43:b8:ac:e6:d7:bf:7f:6c:a9:8d: 41:48:9f:54:f4:ac:32:c9:d5:0d:f4:c7:8c:18:0d: bb:eb:86:82:3e:19:9e:d8:4d:f2:7e:2e:af:0b:6e: 5d:07:a5:52:96:69:11:ce:de:48:be:a9:b5:26:3a: 26:86:34:7e:cb:c0:d3:fa:9d:99:99:dc:4f:d8:e9: da:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:81:E7:A6:DD:14:01:1B:5D:93:5A:DF:9C:9C:85:8B:8B:E3:15:7E X509v3 Authority Key Identifier: keyid:04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3e:41:23:00:51:bd:bf:b8:f9:44:46:27:14:b1:55:85:3d: 57:f1:b4:58:17:d5:f5:4a:18:13:c6:09:17:55:33:18:cb:d1: fe:c4:f9:d8:5f:11:b2:6c:c5:10:56:d3:ec:ba:b8:30:cc:8e: e9:26:cc:f2:90:1d:20:91:09:c4:2e:0e:ff:77:cc:6a:8f:b4: ac:81:95:aa:63:6e:2c:59:33:09:25:2f:82:b0:63:01:97:6a: e5:0b:17:6b:ab:1b:00:10:61:12:2f:9a:e1:a1:66:3a:9a:1f: 12:a0:f6:5f:5a:f9:e3:ba:bb:d4:be:c5:30:61:5c:d4:1c:1d: 28:02:32:c3:58:aa:59:29:4c:73:7d:44:ba:91:8d:34:98:db: 46:6d:12:5c:83:cb:d6:d0:64:c0:6a:ba:91:16:23:2c:ff:d6: b3:f5:5f:89:18:0e:dd:5e:3f:43:21:5b:e8:a1:f1:fd:81:86: 13:20:62:c4:6d:cb:f5:70:06:9a:bc:ee:77:58:f4:33:19:6d: 64:5e:30:ca:c9:1a:28:55:8b:45:41:66:38:a5:75:e4:1f:c5: 8f:ab:99:50:e7:78:53:c1:31:49:82:08:f6:1a:b5:d2:f9:9c: e7:82:34:12:4f:a9:6c:ef:95:5c:14:9d:fd:ad:13:a1:6f:dd: 30:c6:42:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyNDQxMTAvBgNVBAUTKDA0MzQwMTcxODZEQjg0Q0E4OTQ3NzU3MEREQTEwQUQ3 MzE1OTdGRjEwHhcNMjUxMjA0MTUzNDEzWhcNMjUxMjExMTUzNDEzWjAYMRYwFAYD VQQDEw02OTMxYTlmNS04MjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8gb7UoBd7sreA/TMB475FAd42vLGaUv8nflUOqp7WJTwCE1T8xwO0DRUt9G +JUwt6TGdJRe5ogswKCO67xL0BaN4ke6HbDmNXURAmxvibyJ2Za77F6wgIswNCSi DrMJQRi7Y4f+cI+WOLoKfbqKPr0T+8CGnHRayFD80968NzWfcACvkE2j6dJvVyfQ mfQAtNa8JyERtZN1sfm9BlDnBuEx9rgdg9A3w+Ej63zl1LExeWB5C1mYFEO4rObX v39sqY1BSJ9U9KwyydUN9MeMGA2764aCPhme2E3yfi6vC25dB6VSlmkRzt5Ivqm1 JjomhjR+y8DT+p2ZmdxP2OnaGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiB56bd FAEbXZNa35ychYuL4xV+MB8GA1UdIwQYMBaAFAQ0AXGG24TKiUd1cN2hCtcxWX/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDI0NC83RUFGRUNCMDND MDcxMUU1QjE2Q0VGNjNDNEY5QUUwMi9CRFFCY1liYmhNcUpSM1Z3M2FFSzF6Rlpm X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JEUUJjWWJiaE1xSlIzVnczYUVLMXpGWmZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDI0NC83RUFGRUNCMDNDMDcxMUU1QjE2Q0VGNjNDNEY5QUUwMi9CRFFCY1liYmhN cUpSM1Z3M2FFSzF6RlpmX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbPkEjAFG9v7j5REYnFLFVhT1X8bRYF9X1ShgTxgkXVTMYy9H+xPnY XxGybMUQVtPsurgwzI7pJszykB0gkQnELg7/d8xqj7SsgZWqY24sWTMJJS+CsGMB l2rlCxdrqxsAEGESL5rhoWY6mh8SoPZfWvnjurvUvsUwYVzUHB0oAjLDWKpZKUxz fUS6kY00mNtGbRJcg8vW0GTAarqRFiMs/9az9V+JGA7dXj9DIVvoofH9gYYTIGLE bcv1cAaavO53WPQzGW1kXjDKyRooVYtFQWY4pXXkH8WPq5lQ53hTwTFJggj2GrXS +ZzngjQST6ls75VcFJ39rROhb90wxkKJ -----END CERTIFICATE-----Generated at Sat Dec 6 14:33:06 2025 by rpki-client