This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft File: BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft (raw, json) Hash identifier: 3Bgb7oHVITyWkhfaFPmgh5u5ZNxSk8IVdiRzr/dxFAo= Subject key identifier: 07:DE:7D:6F:B9:82:80:E8:F9:4D:69:32:25:52:60:FE:91:30:5D:87 Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Certificate serial: 0870 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft Manifest number: 0864 Signing time: Thu 04 Dec 2025 19:47:47 +0000 Manifest this update: Thu 04 Dec 2025 19:47:47 +0000 Manifest next update: Thu 11 Dec 2025 19:47:47 +0000 Files and hashes: 1: BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl (hash: P6/TFyfNo1RfN/kDENAGKsr6mpqF+ldfeOZJHY3Mh7M=) 2: 02F863F6C09211EC8950E57AC4F9AE02.roa (hash: CW8cYbzHOyc7H5WlbPNiikLuHtC0kPX2gHGH/bCo7qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2160 (0x870) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4AA0, serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Validity Not Before: Dec 4 19:47:47 2025 GMT Not After : Dec 11 19:47:47 2025 GMT Subject: CN=6931e563-2c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:59:be:ac:f5:c7:a5:46:55:aa:7a:bb:bd: cc:0d:8f:27:03:bd:80:35:e7:80:cd:dc:c4:e1:05: b5:6f:55:8e:b4:a4:1a:af:b1:42:7a:13:0f:ab:40: 75:0c:48:f0:a0:e5:3b:b3:11:b0:a2:bd:77:32:73: 96:20:fd:6f:6d:72:ac:88:b8:19:d8:97:92:f9:be: d6:c4:d2:30:53:3b:26:81:7c:d9:5b:dc:c9:e5:d6: a4:ed:e3:79:0d:a0:c9:d9:e5:c1:ce:5c:cc:60:64: cb:cd:3b:16:94:ee:85:37:39:5e:86:a4:2c:4b:e5: b5:5b:b4:b5:d1:67:40:88:9b:b3:f7:3c:4c:9b:39: 18:95:65:9c:b1:d0:e6:15:ea:84:5c:3f:f6:9d:28: 55:90:87:11:c9:8b:43:d5:1b:76:a5:70:3d:3c:6c: 9f:de:10:dd:29:3b:e9:e6:06:13:24:1a:7c:2d:5a: b2:ed:6a:40:69:ca:0b:23:ef:21:db:eb:a1:7a:c0: 32:a0:e2:3a:74:93:01:35:49:93:46:3d:a3:95:7f: 92:85:60:6a:b4:f1:54:a2:3e:d1:0a:13:b2:a6:b0: 76:c7:d9:77:fe:68:6e:db:25:07:60:d4:b5:ac:e8: 96:3b:6c:72:fd:93:ba:6a:e1:ed:da:3e:3c:2d:a4: 76:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DE:7D:6F:B9:82:80:E8:F9:4D:69:32:25:52:60:FE:91:30:5D:87 X509v3 Authority Key Identifier: keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:17:27:c7:5c:6a:f0:f1:93:60:be:cb:df:dd:ba:ee:58:99: e3:fb:f4:d5:9b:04:bd:d2:b3:79:44:7d:81:7c:64:b9:ce:0e: a4:8a:3a:2a:4a:e9:ca:3d:30:79:e3:6c:b2:de:ad:dc:39:9c: 6d:bb:d3:b7:cb:c8:9c:ca:67:cd:83:15:cd:e2:67:2c:69:ab: 35:54:14:1c:50:82:ea:44:8d:e3:23:4c:27:23:56:36:b6:1a: cb:e5:2d:8f:f6:48:35:6d:1f:49:f7:e6:01:22:b8:be:14:f2: 33:aa:ec:c0:63:c7:7e:72:3c:77:0e:04:6b:69:3a:4f:90:7a: 7e:19:18:72:6d:50:94:f4:b9:81:f6:5b:27:a8:e9:fc:7c:94: 05:27:f1:4c:cb:db:e0:58:26:23:25:ff:6a:48:ad:4b:60:61: a9:c2:fb:b1:6c:66:d4:dc:bb:59:47:84:2d:07:02:3e:e5:32: 4e:2e:3f:2d:a9:72:da:6d:94:0f:b9:4b:59:b9:78:be:59:80: 14:5a:b0:05:c1:1c:99:59:80:ce:9a:1e:89:d3:b9:5c:53:8d: 8e:9f:38:dd:7d:40:fc:57:80:c0:a3:78:00:59:d2:3c:9b:48: fc:bf:38:8d:eb:6b:cb:c8:f1:96:34:5e:cb:71:be:64:07:f5: c4:42:19:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRBQTAxMTAvBgNVBAUTKDA0Q0Y1N0YyQTdGRkNBNzJDMDc0NjhBOEM2RDVGMjQ1 MTdGRjQ2QjkwHhcNMjUxMjA0MTk0NzQ3WhcNMjUxMjExMTk0NzQ3WjAYMRYwFAYD VQQDEw02OTMxZTU2My0yYzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtc1Zvqz1x6VGVap6u73MDY8nA72ANeeAzdzE4QW1b1WOtKQar7FCehMPq0B1 DEjwoOU7sxGwor13MnOWIP1vbXKsiLgZ2JeS+b7WxNIwUzsmgXzZW9zJ5dak7eN5 DaDJ2eXBzlzMYGTLzTsWlO6FNzlehqQsS+W1W7S10WdAiJuz9zxMmzkYlWWcsdDm FeqEXD/2nShVkIcRyYtD1Rt2pXA9PGyf3hDdKTvp5gYTJBp8LVqy7WpAacoLI+8h 2+uhesAyoOI6dJMBNUmTRj2jlX+ShWBqtPFUoj7RChOyprB2x9l3/mhu2yUHYNS1 rOiWO2xy/ZO6auHt2j48LaR2vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfefW+5 goDo+U1pMiVSYP6RMF2HMB8GA1UdIwQYMBaAFATPV/Kn/8pywHRoqMbV8kUX/0a5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEFBMC8xMDQxRTVFQUUy QzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3luTEFkR2lveHRYeVJSZl9S cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JNOVg4cWZfeW5MQWRHaW94dFh5UlJmX1Jyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEFBMC8xMDQxRTVFQUUyQzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3lu TEFkR2lveHRYeVJSZl9ScmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQFyfHXGrw8ZNgvsvf3bruWJnj+/TVmwS90rN5RH2BfGS5zg6kijoq SunKPTB542yy3q3cOZxtu9O3y8icymfNgxXN4mcsaas1VBQcUILqRI3jI0wnI1Y2 thrL5S2P9kg1bR9J9+YBIri+FPIzquzAY8d+cjx3DgRraTpPkHp+GRhybVCU9LmB 9lsnqOn8fJQFJ/FMy9vgWCYjJf9qSK1LYGGpwvuxbGbU3LtZR4QtBwI+5TJOLj8t qXLabZQPuUtZuXi+WYAUWrAFwRyZWYDOmh6J07lcU42OnzjdfUD8V4DAo3gAWdI8 m0j8vziN62vLyPGWNF7Lcb5kB/XEQhmp -----END CERTIFICATE-----Generated at Sat Dec 6 16:45:23 2025 by rpki-client