This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json) Hash identifier: +YfaOQz2eNmXB/Lx7HFMlR1ZOif5RSxqsApI+SVPLNo= Subject key identifier: 0D:45:37:09:25:BB:1D:AE:BA:40:EB:1B:E3:DF:E8:6C:D3:E8:F3:36 Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0D10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft Manifest number: 0CD8 Signing time: Thu 04 Dec 2025 17:48:25 +0000 Manifest this update: Thu 04 Dec 2025 17:48:25 +0000 Manifest next update: Thu 11 Dec 2025 17:48:25 +0000 Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: VtO6w4Hq1faEmYolGdIEIL1o3OXM/qMF4LfJWFvG7xA=) 2: 12561046368911EEA0CB766BC4F9AE02.roa (hash: ZsNiLxfxjjXIOR9efOK6g19RpsthQOBE4XYCmM1hnq8=) 3: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: UuY5qtUwk8Dlu801YZxvnO/xKQaWGop0bKAvOOHuar0=) 4: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: e/Kuo5QdtsaM/mztDHYG4XkizjKIPPrgUEb1ap1W45w=) 5: 22E63812221211EF9624DB0CC4F9AE02.roa (hash: tEtTFQOPTziC3M/Up8UOSv6VFGJx+4dP/cUQCVWj4l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3344 (0xd10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: Dec 4 17:48:25 2025 GMT Not After : Dec 11 17:48:25 2025 GMT Subject: CN=6931c969-e2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c1:02:77:c5:09:52:66:33:83:90:e5:cd:b5: d4:e2:6e:48:17:9f:85:1f:79:b2:f8:a0:4b:70:e1: a9:34:62:14:cf:31:b4:61:f7:f8:c8:f6:69:ad:eb: b3:56:51:e6:2a:25:12:1a:e8:68:da:bc:1b:4e:3e: 9b:51:ce:e2:cb:4c:23:52:cd:17:4d:fe:5a:f1:50: 05:e8:c3:d5:34:8d:eb:25:65:1c:ad:60:86:a7:e7: bc:38:41:8a:f8:69:48:ee:ff:90:19:6e:cb:c1:8b: 03:ec:2e:17:88:b5:77:b8:aa:3b:f5:7a:79:01:a9: ea:38:72:9e:04:bf:60:77:52:2a:9b:0c:1a:4d:9e: 3f:49:dd:1b:77:9b:aa:13:a9:12:9c:22:7a:40:c8: 25:54:5c:0b:81:dd:68:72:10:a9:97:b5:67:cc:78: d2:25:ce:69:05:6c:dd:e9:8f:43:83:b0:b9:e9:d9: 36:f0:ae:38:b8:3c:09:38:12:c6:b7:1d:52:77:e2: 6f:aa:ef:54:a6:82:b8:6c:49:2d:4f:fc:2d:a2:b0: c7:c0:2b:71:27:cf:2b:d3:56:0a:92:9e:27:e9:20: e6:9a:df:f2:3d:fb:ae:d5:e9:f4:3d:bc:26:84:1d: 02:72:a5:cb:44:a6:e9:f9:97:89:cb:79:ec:51:b2: 00:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:45:37:09:25:BB:1D:AE:BA:40:EB:1B:E3:DF:E8:6C:D3:E8:F3:36 X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:44:9d:91:a8:f8:88:fb:f7:69:1b:01:dd:51:73:6a:b3:7b: 52:03:99:2a:29:95:98:db:e1:8b:82:3d:b1:f4:07:91:9f:01: a4:ee:2a:74:e7:2f:81:18:5e:5f:0f:45:eb:06:a8:49:d9:e7: cf:98:dc:24:cc:6c:d3:51:96:de:a7:22:7b:47:14:4b:ae:4d: 7d:55:69:31:3e:3e:fa:cd:60:81:14:4e:fe:04:17:94:7d:4f: af:6f:eb:b5:bc:d7:13:4d:f0:bf:6b:a1:30:c9:28:13:30:35: ab:ae:75:b6:71:5a:49:83:d8:31:bd:1e:4f:05:5c:33:c5:db: 7d:8b:31:c2:25:78:cb:5f:4e:32:2a:58:3f:f0:00:b7:d9:c7: a3:12:de:50:e7:03:6d:b4:96:5c:c4:58:bf:d2:27:11:9c:e9: f2:f8:b0:8d:c4:85:6d:8b:40:1f:d5:ef:92:d7:db:09:6c:bb: 69:d2:fc:83:6b:21:9b:2f:60:33:ef:d7:d9:ae:c8:41:21:74: 74:63:8c:77:1e:92:8a:46:4e:0d:50:8e:7d:5a:94:7b:cb:46: e7:2e:6b:b2:8d:df:b3:63:74:a7:fe:f5:51:04:06:c6:98:b4: 5b:89:24:1f:63:9c:1d:26:ca:49:2e:4c:8f:52:5e:c1:cf:ca: 22:da:2b:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjUxMjA0MTc0ODI1WhcNMjUxMjExMTc0ODI1WjAYMRYwFAYD VQQDEw02OTMxYzk2OS1lMmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48ECd8UJUmYzg5DlzbXU4m5IF5+FH3my+KBLcOGpNGIUzzG0Yff4yPZpreuz VlHmKiUSGuho2rwbTj6bUc7iy0wjUs0XTf5a8VAF6MPVNI3rJWUcrWCGp+e8OEGK +GlI7v+QGW7LwYsD7C4XiLV3uKo79Xp5AanqOHKeBL9gd1IqmwwaTZ4/Sd0bd5uq E6kSnCJ6QMglVFwLgd1ochCpl7VnzHjSJc5pBWzd6Y9Dg7C56dk28K44uDwJOBLG tx1Sd+Jvqu9UpoK4bEktT/wtorDHwCtxJ88r01YKkp4n6SDmmt/yPfuu1en0Pbwm hB0CcqXLRKbp+ZeJy3nsUbIAgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1FNwkl ux2uukDrG+Pf6GzT6PM2MB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE4MC9COThFODFENjA1QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3kt Q0dqY0M0X0tJOVNsOEgxM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFRJ2RqPiI+/dpGwHdUXNqs3tSA5kqKZWY2+GLgj2x9AeRnwGk7ip0 5y+BGF5fD0XrBqhJ2efPmNwkzGzTUZbepyJ7RxRLrk19VWkxPj76zWCBFE7+BBeU fU+vb+u1vNcTTfC/a6EwySgTMDWrrnW2cVpJg9gxvR5PBVwzxdt9izHCJXjLX04y Klg/8AC32cejEt5Q5wNttJZcxFi/0icRnOny+LCNxIVti0Af1e+S19sJbLtp0vyD ayGbL2Az79fZrshBIXR0Y4x3HpKKRk4NUI59WpR7y0bnLmuyjd+zY3Sn/vVRBAbG mLRbiSQfY5wdJspJLkyPUl7Bz8oi2ivx -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:13 2025 by rpki-client