This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft File: 1BO-Gf_T9trcEjTNxhmyQy6oA08.mft (raw, json) Hash identifier: 5SnXB9HFemdLRk0JFo4v7AAEI+4iLYuVLvIue9L9Jwg= Subject key identifier: 6C:68:37:70:E4:F7:DF:6E:36:01:40:CA:21:27:07:7B:EC:4C:FD:14 Authority key identifier: D4:13:BE:19:FF:D3:F6:DA:DC:12:34:CD:C6:19:B2:43:2E:A8:03:4F Certificate issuer: /CN=A91913D7/serialNumber=D413BE19FFD3F6DADC1234CDC619B2432EA8034F Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft Manifest number: 04 Signing time: Fri 05 Dec 2025 05:56:40 +0000 Manifest this update: Fri 05 Dec 2025 05:56:39 +0000 Manifest next update: Fri 12 Dec 2025 05:56:39 +0000 Files and hashes: 1: 1BO-Gf_T9trcEjTNxhmyQy6oA08.crl (hash: tPT0+qplJ8tXpvhseZQNh7cAsbnMM4sWeoUnAHvAxHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.crl rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91913D7, serialNumber=D413BE19FFD3F6DADC1234CDC619B2432EA8034F Validity Not Before: Dec 5 05:56:39 2025 GMT Not After : Dec 12 05:56:39 2025 GMT Subject: CN=69327418-af79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:11:60:98:a8:3c:08:82:56:5a:8e:94:fa: df:2b:61:60:ca:ac:64:85:43:d5:4e:d1:f2:95:7b: ac:67:50:f4:c7:ee:c8:07:cf:0a:69:41:b3:ef:19: 85:b0:52:7a:1d:56:6b:bd:fa:17:88:fc:1b:a1:e8: 64:b7:08:47:f4:7d:37:00:87:84:6c:40:ce:02:ad: e4:5e:03:b8:74:33:1a:65:00:f1:09:ef:3a:c7:74: 33:c3:dc:ed:e8:03:83:3d:2a:71:71:2f:73:ab:06: c7:e4:f5:29:35:93:85:5e:62:d3:94:de:37:11:aa: aa:1d:f0:d8:9f:9b:10:70:5e:2a:41:a9:2c:0f:2c: cd:dd:b0:f6:3e:95:09:fd:09:22:1e:f0:f4:fa:70: b4:9a:b2:84:83:6c:dd:32:c3:e7:93:70:b1:82:c4: 87:e5:02:91:f2:c6:27:ce:66:e4:9b:31:72:f7:6e: b6:16:09:72:16:39:4c:9b:93:e2:ff:3a:81:21:51: 5e:0a:55:b8:a8:ea:14:a3:14:93:66:0a:e5:ec:cc: ca:da:ef:01:6f:7a:cb:01:8d:2f:d4:77:fa:cd:d3: e3:32:8a:97:f2:6c:fb:75:8a:fc:27:81:93:5b:fa: 78:a5:dd:42:eb:66:9c:94:18:64:7d:99:fa:33:cc: cc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:68:37:70:E4:F7:DF:6E:36:01:40:CA:21:27:07:7B:EC:4C:FD:14 X509v3 Authority Key Identifier: keyid:D4:13:BE:19:FF:D3:F6:DA:DC:12:34:CD:C6:19:B2:43:2E:A8:03:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:85:5a:80:a3:0f:d1:ca:ca:14:81:ba:83:7a:33:68:7a:8b: 7a:41:68:22:82:4d:dd:41:a0:07:51:6e:5f:1c:73:e2:1c:49: 2c:33:67:25:4a:c4:04:a8:d0:7a:cb:03:2c:83:98:c2:12:ab: a3:65:b0:57:c5:6f:6a:75:fc:1a:13:23:13:7f:f3:ac:28:17: 12:6c:a2:71:c7:d6:54:cb:37:f9:a4:26:7e:d4:f9:7e:86:8f: f2:0b:ca:22:bf:d4:ee:c4:c9:0f:cd:81:b2:03:82:02:d5:eb: 8c:7c:00:62:16:f4:73:0e:af:43:3e:79:3e:e2:12:c7:e9:78: df:81:8c:9b:52:b6:3c:7d:ac:be:08:0f:87:4d:19:0c:87:31: 7f:3d:20:d3:de:02:bc:e1:93:7f:b2:45:57:76:7f:01:92:b9: 2e:5d:5c:20:2d:74:5e:75:6b:3f:95:76:4b:c9:12:79:17:55: 91:de:36:83:3a:46:f9:84:02:42:4d:74:e3:8d:9a:79:b9:e9: cf:a2:ad:97:15:cb:77:03:69:2f:77:54:ec:07:3f:03:ef:cb: b0:da:fa:45:c6:8c:22:92:61:45:7b:9c:ac:93:b4:e3:b6:2a: 36:c5:e3:13:d9:cd:f3:27:fa:f4:21:0d:c2:d3:85:5c:cd:6d: 9b:3c:4e:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTNENzExMC8GA1UEBRMoRDQxM0JFMTlGRkQzRjZEQURDMTIzNENEQzYxOUIyNDMy RUE4MDM0RjAeFw0yNTEyMDUwNTU2MzlaFw0yNTEyMTIwNTU2MzlaMBgxFjAUBgNV BAMTDTY5MzI3NDE4LWFmNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1JRFgmKg8CIJWWo6U+t8rYWDKrGSFQ9VO0fKVe6xnUPTH7sgHzwppQbPvGYWw UnodVmu9+heI/Buh6GS3CEf0fTcAh4RsQM4CreReA7h0MxplAPEJ7zrHdDPD3O3o A4M9KnFxL3OrBsfk9Sk1k4VeYtOU3jcRqqod8NifmxBwXipBqSwPLM3dsPY+lQn9 CSIe8PT6cLSasoSDbN0yw+eTcLGCxIflApHyxifOZuSbMXL3brYWCXIWOUybk+L/ OoEhUV4KVbio6hSjFJNmCuXszMra7wFvessBjS/Ud/rN0+MyipfybPt1ivwngZNb +nil3ULrZpyUGGR9mfozzMy/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbGg3cOT3 3242AUDKIScHe+xM/RQwHwYDVR0jBBgwFoAU1BO+Gf/T9trcEjTNxhmyQy6oA08w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxM0Q3Lzc5MTMyNEI4Q0U4 QTExRjBBQjRCRDc2OUM0RjlBRTAyLzFCTy1HZl9UOXRyY0VqVE54aG15UXk2b0Ew OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUJPLUdmX1Q5dHJjRWpUTnhobXlReTZvQTA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx M0Q3Lzc5MTMyNEI4Q0U4QTExRjBBQjRCRDc2OUM0RjlBRTAyLzFCTy1HZl9UOXRy Y0VqVE54aG15UXk2b0EwOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIeFWoCjD9HKyhSBuoN6M2h6i3pBaCKCTd1BoAdRbl8cc+IcSSwzZyVK xASo0HrLAyyDmMISq6NlsFfFb2p1/BoTIxN/86woFxJsonHH1lTLN/mkJn7U+X6G j/ILyiK/1O7EyQ/NgbIDggLV64x8AGIW9HMOr0M+eT7iEsfpeN+BjJtStjx9rL4I D4dNGQyHMX89INPeArzhk3+yRVd2fwGSuS5dXCAtdF51az+VdkvJEnkXVZHeNoM6 RvmEAkJNdOONmnm56c+irZcVy3cDaS93VOwHPwPvy7Da+kXGjCKSYUV7nKyTtOO2 KjbF4xPZzfMn+vQhDcLThVzNbZs8TnA= -----END CERTIFICATE-----Generated at Sat Dec 6 16:38:40 2025 by rpki-client