This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json) Hash identifier: wvjeLjqkV5kAjVA92BWsnXxf2uRWu1/PsC3W0rCU8Gs= Subject key identifier: 0B:D2:4B:FB:F4:CC:25:29:BB:21:A2:3D:CE:EE:EC:87:66:6D:CB:5C Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1B92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft Manifest number: 1B8A Signing time: Thu 18 Dec 2025 16:09:30 +0000 Manifest this update: Thu 18 Dec 2025 16:09:30 +0000 Manifest next update: Thu 25 Dec 2025 16:09:30 +0000 Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: hXJtkfUqzW+6Wiwsz69I2Hp11WwRlRkMA3j6JccCL8w=) 2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: IqZZVcS21ii5zkxWPYMuKQR1NOi0O+Hj+XB33t8u/K8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7058 (0x1b92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: Dec 18 16:09:30 2025 GMT Not After : Dec 25 16:09:30 2025 GMT Subject: CN=6944273a-e4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:4d:b6:e6:fd:16:8f:a4:23:96:f4:af:86: b6:bc:37:43:9d:3f:aa:6e:bb:1b:20:3d:a0:34:9e: fd:39:c5:bb:e6:69:39:a4:75:55:a0:31:22:3d:8d: a5:9d:c8:04:3c:74:56:0e:57:08:0b:eb:47:7f:6d: 46:4a:b2:cc:41:06:32:39:ce:7b:1f:b3:20:df:48: fd:c7:ea:67:a0:36:99:a1:b6:40:d9:d6:92:e4:f3: f1:31:fe:52:c8:57:51:6a:eb:76:fe:b7:ae:2f:b1: 5e:ac:22:80:fd:95:13:74:10:db:c1:60:a2:03:c0: 5a:61:e4:74:60:d3:bc:45:f4:df:ce:6b:9e:1f:dc: 31:44:86:3c:9e:76:ca:e8:05:b0:62:87:7e:8c:4a: 55:f7:2e:c4:db:e6:24:0a:68:de:7d:28:90:67:74: c2:8b:f4:69:64:c4:f2:1d:b4:8a:4f:16:f6:fd:5d: 68:49:07:0f:32:e0:a1:15:f5:bf:50:b9:9a:5c:72: 96:72:14:a9:73:c2:82:39:b2:7b:e9:a3:f3:87:8a: 40:37:d2:ac:8d:4e:20:c0:d9:05:21:4f:29:2c:2a: 0d:99:13:d5:bd:0c:27:5f:90:7a:b3:91:ba:7b:91: 1a:9c:5e:8d:5b:2b:ba:57:5f:2c:cf:b5:a1:1c:56: 23:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D2:4B:FB:F4:CC:25:29:BB:21:A2:3D:CE:EE:EC:87:66:6D:CB:5C X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:63:d7:8c:7b:27:d0:23:01:39:29:46:ef:3b:bd:8b:39:d6: 71:ed:1c:91:96:12:d7:50:72:f3:eb:09:d0:c5:46:09:d0:b0: b1:6c:d5:f9:d0:c5:d3:ff:b6:75:3b:4f:07:12:ff:61:b0:99: c4:bb:90:3c:dd:b3:51:c8:1b:04:23:ca:97:78:7a:58:f9:24: 8b:34:f8:32:9d:ca:60:81:f9:27:a5:18:4f:2f:61:e3:90:2c: ce:21:22:5c:a7:6b:84:b2:b2:ea:86:de:a8:a2:64:91:70:36: d1:98:6a:ce:90:1e:f7:80:7e:b3:70:5d:d6:c6:67:42:21:db: fd:10:97:2e:7e:80:40:e5:ed:5c:fd:25:ac:da:9d:3b:31:53: 8e:10:99:02:4d:e4:62:06:81:b5:cb:3e:e2:47:e1:b5:41:20: 89:de:5c:d8:44:fe:ed:db:1a:1b:92:62:9e:a6:83:7d:99:6e: 5e:ab:a1:75:68:43:5a:43:08:66:c1:93:73:05:57:64:43:89: 1a:c3:d0:46:32:9b:58:bd:83:53:e3:3d:a3:da:37:a2:fc:0f: 6b:58:02:b3:88:26:ad:ad:4c:c6:cf:fa:cc:22:0a:d4:da:3d: 39:35:34:0f:28:aa:f8:b0:fb:ab:69:26:fc:2d:3d:c5:9a:ef: 6b:3c:56:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjUxMjE4MTYwOTMwWhcNMjUxMjI1MTYwOTMwWjAYMRYwFAYD VQQDDA02OTQ0MjczYS1lNGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKNNtub9Fo+kI5b0r4a2vDdDnT+qbrsbID2gNJ79OcW75mk5pHVVoDEiPY2l ncgEPHRWDlcIC+tHf21GSrLMQQYyOc57H7Mg30j9x+pnoDaZobZA2daS5PPxMf5S yFdRaut2/reuL7FerCKA/ZUTdBDbwWCiA8BaYeR0YNO8RfTfzmueH9wxRIY8nnbK 6AWwYod+jEpV9y7E2+YkCmjefSiQZ3TCi/RpZMTyHbSKTxb2/V1oSQcPMuChFfW/ ULmaXHKWchSpc8KCObJ76aPzh4pAN9KsjU4gwNkFIU8pLCoNmRPVvQwnX5B6s5G6 e5EanF6NWyu6V18sz7WhHFYjqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvSS/v0 zCUpuyGiPc7u7IdmbctcMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIxNC9CNDFBNTgzODE4RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RD M0dIMlJVRUN2ekdzYW9UOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXY9eMeyfQIwE5KUbvO72LOdZx7RyRlhLXUHLz6wnQxUYJ0LCxbNX5 0MXT/7Z1O08HEv9hsJnEu5A83bNRyBsEI8qXeHpY+SSLNPgyncpggfknpRhPL2Hj kCzOISJcp2uEsrLqht6oomSRcDbRmGrOkB73gH6zcF3WxmdCIdv9EJcufoBA5e1c /SWs2p07MVOOEJkCTeRiBoG1yz7iR+G1QSCJ3lzYRP7t2xobkmKepoN9mW5eq6F1 aENaQwhmwZNzBVdkQ4kaw9BGMptYvYNT4z2j2jei/A9rWAKziCatrUzGz/rMIgrU 2j05NTQPKKr4sPuraSb8LT3Fmu9rPFb5 -----END CERTIFICATE-----Generated at Fri Dec 19 12:53:27 2025 by rpki-client