This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
File: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft (raw, json)
Hash identifier: MkUfSvcLMeHmCaSs+xCGD+0JVxZi+XmGaTAPrjEYT48=
Subject key identifier: 7C:84:96:C1:5D:0D:89:B6:A6:E2:85:BF:C5:40:19:89:7E:0E:13:A3
Authority key identifier: 04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB
Certificate issuer: /CN=A9196C96/serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB
Certificate serial: 06A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
Manifest number: 06A0
Signing time: Sat 06 Dec 2025 21:15:09 +0000
Manifest this update: Sat 06 Dec 2025 21:15:09 +0000
Manifest next update: Sat 13 Dec 2025 21:15:09 +0000
Files and hashes: 1: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl (hash: 40SJv6qByRCtJtEVWqNQuVas60wtp1TlCf538SwKIbU=)
2: D49D6040912311EB9DCD2A33C4F9AE02.roa (hash: B7d9BhaxiPHzHsGZIEAvOMFy+Yf582L14C6Oc27Kbfg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl
rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1702 (0x6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196C96, serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB
Validity
Not Before: Dec 6 21:15:09 2025 GMT
Not After : Dec 13 21:15:09 2025 GMT
Subject: CN=69349cdd-0c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:b2:8f:b5:43:5f:55:05:e1:da:6e:7f:c9:
88:d3:60:25:13:f7:f3:a0:88:c1:37:dc:3c:ca:1b:
d6:74:ba:8e:8b:de:a0:91:f4:a9:1b:7f:87:cf:e2:
fe:36:9a:4c:21:6e:d0:6e:da:1c:62:ab:e1:67:a5:
4a:ea:0a:3e:e4:a8:e8:f0:46:9b:fd:0d:30:00:9b:
df:ff:4b:16:a6:ad:a7:63:ac:5f:ee:2c:42:f2:7c:
26:ea:37:56:7c:30:4b:14:4c:36:bc:50:a9:6a:76:
58:28:c6:21:09:3e:d8:86:4b:ec:7b:40:01:09:df:
d4:9e:a3:ab:69:e0:82:bb:71:d0:ea:80:07:4a:5a:
7a:7c:42:d1:52:88:88:8e:98:a3:64:ac:97:d6:b2:
20:5a:88:8b:40:62:e6:62:70:bc:b2:1e:b4:99:9f:
26:6d:67:9a:a4:ea:5f:ff:df:66:88:95:f5:c8:33:
7e:34:fd:e6:4c:f6:20:b0:da:84:d8:bf:19:51:87:
2c:80:e7:4e:ce:fe:d4:af:76:e0:ad:a1:7d:79:57:
c2:02:98:55:9c:74:8e:7f:61:3c:4d:99:67:a1:85:
09:f2:0b:5a:58:3a:2c:6a:ed:04:ea:61:81:8f:85:
d1:7f:64:ca:56:2b:f4:b0:9a:73:22:e8:de:0b:ab:
dd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:84:96:C1:5D:0D:89:B6:A6:E2:85:BF:C5:40:19:89:7E:0E:13:A3
X509v3 Authority Key Identifier:
keyid:04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:1f:e4:49:f2:14:58:7c:f4:9f:a8:30:fc:58:77:80:c6:c5:
9c:7b:e5:5f:37:39:e1:61:57:39:18:91:e0:c2:39:cf:a0:70:
95:2e:4f:ee:dc:57:42:cc:4d:ad:a9:96:1a:e4:5b:ee:cd:dd:
08:c3:23:b0:3c:71:73:7f:05:49:9b:97:df:05:99:e0:f9:db:
ae:0e:2b:fb:b5:51:0a:9f:40:72:84:8c:42:6e:48:50:d8:9f:
64:78:47:47:8c:db:fa:84:fd:e2:c3:fb:ac:c3:6f:cf:16:fa:
cb:cc:53:0a:76:d3:4a:c1:89:3e:f1:0c:2c:6c:1e:37:68:9a:
57:7c:7c:75:1a:80:c7:d2:6c:e7:35:8d:3e:41:93:2d:f9:0a:
4f:c5:af:71:ec:b5:12:9b:a2:87:eb:87:0c:40:58:0d:27:41:
e6:81:d6:30:14:b8:42:ac:2e:b2:d8:2a:85:aa:77:ae:50:23:
cd:5a:ae:f6:b7:60:cc:21:3f:0a:2d:47:1a:7a:e6:f6:49:97:
4b:0e:77:9e:a5:a8:5e:35:4d:8d:87:82:76:d5:47:d1:f5:62:
d5:20:ba:e4:33:59:1f:7b:bc:32:cf:63:32:08:b8:21:e6:1a:
97:dd:50:bb:bd:d5:6e:df:3b:8b:91:f2:97:85:06:7d:0b:a5:
b6:84:ce:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZDOTYxMTAvBgNVBAUTKDA0NjI3RENDOUI4MDg0MkQ0MzYzNzFDNENEQzczRDE5
QUI3RTVEQkIwHhcNMjUxMjA2MjExNTA5WhcNMjUxMjEzMjExNTA5WjAYMRYwFAYD
VQQDEw02OTM0OWNkZC0wYzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu2Syj7VDX1UF4dpuf8mI02AlE/fzoIjBN9w8yhvWdLqOi96gkfSpG3+Hz+L+
NppMIW7QbtocYqvhZ6VK6go+5Kjo8Eab/Q0wAJvf/0sWpq2nY6xf7ixC8nwm6jdW
fDBLFEw2vFCpanZYKMYhCT7Yhkvse0ABCd/UnqOraeCCu3HQ6oAHSlp6fELRUoiI
jpijZKyX1rIgWoiLQGLmYnC8sh60mZ8mbWeapOpf/99miJX1yDN+NP3mTPYgsNqE
2L8ZUYcsgOdOzv7Ur3bgraF9eVfCAphVnHSOf2E8TZlnoYUJ8gtaWDosau0E6mGB
j4XRf2TKViv0sJpzIujeC6vdCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyElsFd
DYm2puKFv8VAGYl+DhOjMB8GA1UdIwQYMBaAFARifcybgIQtQ2NxxM3HPRmrfl27
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkM5Ni9BOEFFMEY5NDkw
NDYxMUVCQkI4NEIyMjdDNEY5QUUwMi9CR0o5ekp1QWhDMURZM0hFemNjOUdhdC1Y
YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JHSjl6SnVBaEMxRFkzSEV6Y2M5R2F0LVhicy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkM5Ni9BOEFFMEY5NDkwNDYxMUVCQkI4NEIyMjdDNEY5QUUwMi9CR0o5ekp1QWhD
MURZM0hFemNjOUdhdC1YYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDLH+RJ8hRYfPSfqDD8WHeAxsWce+VfNznhYVc5GJHgwjnPoHCVLk/u
3FdCzE2tqZYa5Fvuzd0IwyOwPHFzfwVJm5ffBZng+duuDiv7tVEKn0ByhIxCbkhQ
2J9keEdHjNv6hP3iw/usw2/PFvrLzFMKdtNKwYk+8QwsbB43aJpXfHx1GoDH0mzn
NY0+QZMt+QpPxa9x7LUSm6KH64cMQFgNJ0HmgdYwFLhCrC6y2CqFqneuUCPNWq72
t2DMIT8KLUcaeub2SZdLDneepaheNU2Nh4J21UfR9WLVILrkM1kfe7wyz2MyCLgh
5hqX3VC7vdVu3zuLkfKXhQZ9C6W2hM5N
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:39:04 2025 by rpki-client