This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft File: BhgYSeLF-TE-pgozl9xhRyrBGw0.mft (raw, json) Hash identifier: 0dMUjr5rnwXAt6RecR4RQIuRBU9anGvroNcwCrydNF0= Subject key identifier: DB:EA:E5:BD:AA:42:EE:4F:0B:F8:F6:40:21:DC:E8:83:9E:E7:9F:D4 Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D Certificate issuer: /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D Certificate serial: 06D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft Manifest number: 06BF Signing time: Sat 06 Dec 2025 21:10:06 +0000 Manifest this update: Sat 06 Dec 2025 21:10:06 +0000 Manifest next update: Sat 13 Dec 2025 21:10:06 +0000 Files and hashes: 1: BhgYSeLF-TE-pgozl9xhRyrBGw0.crl (hash: q5TtGvgSkpIkfGLVbEQz5KNHPh4P30rso44w0+YpHr8=) 2: 4F1694B4C87B11ED981CC523C4F9AE02.roa (hash: FWRlVE7qxAGVhNJeQGVLW3KvlIyEGk0A9fnepbZFOKE=) 3: E4205416B2F111EFBB14DE0FC4F9AE02.roa (hash: u41x8Ny1raTvp1vwnGwm7MW/cINQCDMdw5LO04vaVeU=) 4: C18726F486D711EBA06B0E64C4F9AE02.roa (hash: 46EUYT6r3IQXKkQnGUbOAbbi8lZTq+8CIfeQWVvyW6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1745 (0x6d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D Validity Not Before: Dec 6 21:10:06 2025 GMT Not After : Dec 13 21:10:06 2025 GMT Subject: CN=69349bae-72d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c9:06:c8:67:6e:41:7d:ea:9f:42:f4:2a:49: 76:a0:5b:eb:ba:59:8a:94:6b:04:f6:dc:1c:43:f7: 1b:26:60:ad:f1:f8:da:4d:7a:03:06:c1:47:6d:40: f7:ce:e4:f2:5e:ce:61:86:67:aa:16:85:3b:36:a3: 8a:73:99:95:fb:19:cb:7f:29:fd:67:5b:5e:cd:2e: b2:9d:b2:55:74:aa:e3:b4:98:b2:8b:a7:ed:27:95: bd:fc:70:8d:76:20:45:f6:fa:c1:74:ba:0e:0e:4f: c7:ce:62:6d:08:bd:c7:7d:c8:b6:a1:b4:00:64:06: 86:53:29:b0:75:fe:cf:2f:63:42:5f:86:bb:9e:dc: 71:12:20:ef:d3:01:e2:53:af:9d:a4:90:7c:f9:94: 35:85:e5:26:f8:2d:d2:08:84:70:c4:b3:9f:5e:b2: d4:cf:4a:a9:39:95:72:dc:5f:21:cd:30:53:d9:7e: be:a2:e7:aa:87:11:56:cc:43:c2:e2:a9:33:ae:14: 20:68:cf:d8:2d:3b:13:a1:62:5d:1f:cf:0a:c2:0e: 5d:13:bc:c2:7e:03:77:38:b6:27:f3:b7:50:47:c7: dd:2b:38:1b:d4:24:79:e6:12:f5:3f:fb:e3:72:9f: 70:21:da:9a:fa:54:9d:8d:f4:37:42:a1:65:82:d9: 17:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EA:E5:BD:AA:42:EE:4F:0B:F8:F6:40:21:DC:E8:83:9E:E7:9F:D4 X509v3 Authority Key Identifier: keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:e5:da:bc:0d:b3:ec:e4:4c:0d:50:c9:41:57:c9:89:b8:63: fd:9d:47:2b:ec:a4:31:df:e5:32:dd:c9:47:05:0b:9d:33:07: 18:70:d5:65:83:c7:be:23:09:f8:7f:ea:20:79:02:bb:cd:f9: 39:97:6d:f2:41:0c:ed:a0:d3:48:ce:6a:c3:cd:44:de:fe:98: da:9d:78:4e:95:d6:06:17:b7:d4:a9:27:2b:a1:0b:59:9a:5f: 35:dc:76:32:bb:a3:4a:37:0c:2f:9e:10:95:65:c0:9a:0f:42: a2:79:fe:45:6c:63:6d:b6:12:80:d9:4c:04:eb:b0:5b:8b:2e: 77:8f:0e:28:60:6d:87:db:14:23:27:35:3a:9a:6b:73:52:3a: af:39:74:5e:40:16:08:74:76:e0:b0:71:c7:e3:33:e6:18:9b: 6b:33:7b:84:98:3e:95:ea:d7:37:fb:fa:00:19:e2:cb:03:79: 53:a0:b9:d3:43:d3:d2:62:32:4f:60:52:8a:00:4e:95:56:64: 7a:20:0c:d0:c8:0b:cb:3d:bd:77:ff:36:48:ac:60:53:fe:7e: 07:41:d3:05:2b:11:81:1a:38:b2:cb:9e:9e:d8:49:b9:01:ef: 87:5a:dd:9b:8a:e0:7c:93:4b:92:92:d1:2c:3e:ff:2e:b1:6f: 0b:ee:6a:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCQkMxMTAvBgNVBAUTKDA2MTgxODQ5RTJDNUY5MzEzRUE2MEEzMzk3REM2MTQ3 MkFDMTFCMEQwHhcNMjUxMjA2MjExMDA2WhcNMjUxMjEzMjExMDA2WjAYMRYwFAYD VQQDEw02OTM0OWJhZS03MmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18kGyGduQX3qn0L0Kkl2oFvrulmKlGsE9twcQ/cbJmCt8fjaTXoDBsFHbUD3 zuTyXs5hhmeqFoU7NqOKc5mV+xnLfyn9Z1tezS6ynbJVdKrjtJiyi6ftJ5W9/HCN diBF9vrBdLoODk/HzmJtCL3Hfci2obQAZAaGUymwdf7PL2NCX4a7ntxxEiDv0wHi U6+dpJB8+ZQ1heUm+C3SCIRwxLOfXrLUz0qpOZVy3F8hzTBT2X6+oueqhxFWzEPC 4qkzrhQgaM/YLTsToWJdH88Kwg5dE7zCfgN3OLYn87dQR8fdKzgb1CR55hL1P/vj cp9wIdqa+lSdjfQ3QqFlgtkX8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvq5b2q Qu5PC/j2QCHc6IOe55/UMB8GA1UdIwQYMBaAFAYYGEnixfkxPqYKM5fcYUcqwRsN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0JCQy8xNDBDMTc1Njg2 RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VMRi1URS1wZ296bDl4aFJ5ckJH dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JoZ1lTZUxGLVRFLXBnb3psOXhoUnlyQkd3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0JCQy8xNDBDMTc1Njg2RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VMRi1U RS1wZ296bDl4aFJ5ckJHdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ5dq8DbPs5EwNUMlBV8mJuGP9nUcr7KQx3+Uy3clHBQudMwcYcNVl g8e+Iwn4f+ogeQK7zfk5l23yQQztoNNIzmrDzUTe/pjanXhOldYGF7fUqScroQtZ ml813HYyu6NKNwwvnhCVZcCaD0Kief5FbGNtthKA2UwE67Bbiy53jw4oYG2H2xQj JzU6mmtzUjqvOXReQBYIdHbgsHHH4zPmGJtrM3uEmD6V6tc3+/oAGeLLA3lToLnT Q9PSYjJPYFKKAE6VVmR6IAzQyAvLPb13/zZIrGBT/n4HQdMFKxGBGjiyy56e2Em5 Ae+HWt2biuB8k0uSktEsPv8usW8L7moi -----END CERTIFICATE-----Generated at Sun Dec 7 09:01:49 2025 by rpki-client