This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft File: bz4CYgDVU58n4POqUNMgokUo1X0.mft (raw, json) Hash identifier: l3P69a88ab4d5OXjV4K0p/dz6aG7J3NC2SdReC8s3eo= Subject key identifier: B3:A8:C2:08:52:2F:C0:F0:98:BA:99:BB:80:BD:2F:3D:31:98:83:EC Authority key identifier: 6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D Certificate issuer: /CN=A91B732A/serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft Manifest number: BD Signing time: Fri 05 Dec 2025 04:01:26 +0000 Manifest this update: Fri 05 Dec 2025 04:01:26 +0000 Manifest next update: Fri 12 Dec 2025 04:01:26 +0000 Files and hashes: 1: bz4CYgDVU58n4POqUNMgokUo1X0.crl (hash: w0T50geT8FXnpsb1jvruznLkBtIA5F9VspCi6RX5+y4=) 2: 31EC2E5CBAAB11EFA97B2C66C4F9AE02.roa (hash: QpBoEt1C2EBI43s0+/uUFeo0zNr6mDnCWlKa7GcSILU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B732A, serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D Validity Not Before: Dec 5 04:01:26 2025 GMT Not After : Dec 12 04:01:26 2025 GMT Subject: CN=69325916-4d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:67:1f:9a:72:f8:d6:9d:36:f9:e0:21:fe:1f: 56:6c:12:55:8e:e5:88:14:30:3d:fb:87:33:b0:0b: 91:76:fc:19:05:3f:ca:0b:2d:c5:bb:25:0b:e4:bf: 86:a5:aa:a7:29:06:c1:1e:96:6a:47:37:2c:59:21: 8f:c7:c1:6f:98:4c:87:95:41:32:3c:c8:53:39:dc: 28:25:5a:e3:e6:b0:df:75:a7:cf:b2:c2:f1:ff:de: 8d:c6:e5:90:cd:0e:26:6b:2e:fb:a0:9d:ab:37:ae: bb:be:e3:e7:63:54:40:d3:88:04:a3:ee:56:3f:b4: 57:26:ab:6b:53:84:00:5f:fe:04:08:6f:de:f8:63: d8:46:08:a2:96:df:ce:f9:72:85:15:17:85:dc:26: 5a:4d:5c:cb:c9:63:59:fc:2a:84:40:e3:9e:b8:e7: 72:f1:28:30:2a:ee:eb:e5:1c:a4:cb:9e:af:2a:ac: 6e:a2:04:7c:cb:46:e8:65:62:b0:d1:51:51:15:92: 1c:4c:7b:2e:e8:0d:6e:e2:2d:e5:5e:e6:ba:4b:88: 1b:63:41:fd:56:ae:31:e7:50:46:8f:48:4a:e6:46: b6:3d:de:d2:94:3a:a5:e0:cd:24:0c:d2:b1:f1:3c: 71:75:97:00:56:17:27:e1:3d:af:10:42:71:41:bf: d4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A8:C2:08:52:2F:C0:F0:98:BA:99:BB:80:BD:2F:3D:31:98:83:EC X509v3 Authority Key Identifier: keyid:6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ff:d1:b4:0b:09:35:52:01:0b:11:5c:b6:5e:42:86:e9:fa: ec:95:76:68:45:81:c0:42:bd:20:34:68:0a:f9:de:15:89:e4: 2e:c2:ad:42:e5:f7:4c:fa:15:cc:13:ad:50:f9:ff:cb:cd:46: 26:15:8f:ff:ac:17:9e:8c:cb:44:d1:2b:c5:a2:bc:dd:95:ee: 6e:70:70:e8:1b:41:58:a8:60:ee:ac:bc:e1:8c:e5:05:70:f3: 3d:e2:ea:e2:c1:c7:ed:6d:e3:c8:6d:14:c8:f2:d0:5b:c1:90: b5:5d:29:6c:6f:df:15:1a:9d:d3:05:f3:5d:86:ec:ee:09:37: 0e:62:58:d1:d4:44:90:46:fc:df:a4:36:8a:16:41:05:dc:00: f9:8e:4a:f8:7e:ce:37:b2:60:09:c4:1c:2f:67:9c:9b:a9:d4: 25:6e:89:92:2b:4e:8e:d6:37:5e:1a:6a:ed:f4:98:e1:3e:5e: 17:32:79:9e:d7:16:c9:71:1f:04:b8:8b:06:d8:2c:0d:69:31: e7:31:4d:c8:75:67:95:db:cb:24:55:d2:21:86:fb:3f:9f:e5: ea:a6:d8:b4:cb:4a:51:a5:5c:d7:88:25:cf:ea:92:d0:f0:cc: b8:e8:e5:5a:c8:fd:2b:2c:80:fc:43:31:ec:e3:a3:eb:cb:e0: f6:00:91:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjczMkExMTAvBgNVBAUTKDZGM0UwMjYyMDBENTUzOUYyN0UwRjNBQTUwRDMyMEEy NDUyOEQ1N0QwHhcNMjUxMjA1MDQwMTI2WhcNMjUxMjEyMDQwMTI2WjAYMRYwFAYD VQQDEw02OTMyNTkxNi00ZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22cfmnL41p02+eAh/h9WbBJVjuWIFDA9+4czsAuRdvwZBT/KCy3FuyUL5L+G paqnKQbBHpZqRzcsWSGPx8FvmEyHlUEyPMhTOdwoJVrj5rDfdafPssLx/96NxuWQ zQ4may77oJ2rN667vuPnY1RA04gEo+5WP7RXJqtrU4QAX/4ECG/e+GPYRgiilt/O +XKFFReF3CZaTVzLyWNZ/CqEQOOeuOdy8SgwKu7r5Ryky56vKqxuogR8y0boZWKw 0VFRFZIcTHsu6A1u4i3lXua6S4gbY0H9Vq4x51BGj0hK5ka2Pd7SlDql4M0kDNKx 8TxxdZcAVhcn4T2vEEJxQb/U8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOowghS L8DwmLqZu4C9Lz0xmIPsMB8GA1UdIwQYMBaAFG8+AmIA1VOfJ+DzqlDTIKJFKNV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzMyQS9GRkYyRTZBOEI2 MzAxMUVGQTJEN0ZCNjNDNEY5QUUwMi9iejRDWWdEVlU1OG40UE9xVU5NZ29rVW8x WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2J6NENZZ0RWVTU4bjRQT3FVTk1nb2tVbzFYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzMyQS9GRkYyRTZBOEI2MzAxMUVGQTJEN0ZCNjNDNEY5QUUwMi9iejRDWWdEVlU1 OG40UE9xVU5NZ29rVW8xWDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV/9G0Cwk1UgELEVy2XkKG6frslXZoRYHAQr0gNGgK+d4VieQuwq1C 5fdM+hXME61Q+f/LzUYmFY//rBeejMtE0SvForzdle5ucHDoG0FYqGDurLzhjOUF cPM94uriwcftbePIbRTI8tBbwZC1XSlsb98VGp3TBfNdhuzuCTcOYljR1ESQRvzf pDaKFkEF3AD5jkr4fs43smAJxBwvZ5ybqdQlbomSK06O1jdeGmrt9JjhPl4XMnme 1xbJcR8EuIsG2CwNaTHnMU3IdWeV28skVdIhhvs/n+Xqpti0y0pRpVzXiCXP6pLQ 8My46OVayP0rLID8QzHs46Pry+D2AJE+ -----END CERTIFICATE-----Generated at Sat Dec 6 20:03:04 2025 by rpki-client