This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: cXtL1VTPYjmVFlG1G4XOvcePDb1rdON4hE9iE6/RdcY= Subject key identifier: ED:83:29:E2:FE:E1:89:A7:D4:84:27:42:7A:47:E3:20:1A:06:96:82 Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: A6 Signing time: Sun 21 Dec 2025 05:24:12 +0000 Manifest this update: Sun 21 Dec 2025 05:24:11 +0000 Manifest next update: Sun 28 Dec 2025 05:24:11 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: DBnbrf1zi7cVQHKaY0dAhZ1lSl1jwKe6VooRhdBRfug=) 2: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: b+8Vf+1PI1yNyvvstVRxJPifoMZ8KqBIQc0NBIzO5qc=) 3: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: /RmfZz46so9ge+fbPNaFv77MZSPZTzTOQnyx59sNwag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Validity Not Before: Dec 21 05:24:11 2025 GMT Not After : Dec 28 05:24:11 2025 GMT Subject: CN=6947847c-bc38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a7:b1:d5:04:59:95:eb:94:08:49:93:f8:b2: 59:12:cf:a1:40:59:08:cb:13:49:2b:bc:8c:d1:f8: 0b:86:dc:99:32:51:76:3d:3e:dc:82:a3:c3:6e:34: c8:61:75:b5:15:63:a2:61:4a:08:51:a8:6d:f6:9d: 83:52:08:c7:61:39:11:cd:61:2a:f0:54:1e:5a:73: 1d:07:71:c9:c2:de:38:7e:a3:6b:d7:ed:ee:99:3d: 39:42:4d:31:2a:4d:46:e6:14:74:03:5e:61:1f:9b: 0f:6d:15:70:db:c1:16:9b:e3:7f:7b:ba:c3:55:4b: 89:a2:68:99:1b:24:b1:22:b6:a8:68:62:51:4a:ea: 6e:6d:18:7e:d7:3c:97:41:a6:bb:6a:08:3d:97:11: 3e:3f:5b:7e:60:a0:42:cd:c1:da:16:3d:dd:ea:91: 29:d4:c3:74:e9:17:5b:c6:3e:31:d6:34:c2:6c:ac: e5:e0:b9:32:6f:cb:f9:a7:a5:bc:00:b5:a2:e5:05: 96:df:fa:34:b0:ae:65:b4:4e:3b:00:23:9b:22:1b: 30:80:d9:b0:6a:05:6e:d1:97:92:7b:0a:ff:fe:cd: 8d:b0:59:95:24:e1:69:5d:ca:0f:a5:9c:33:49:b7: 38:6f:ee:2f:ea:a3:95:55:2a:7e:ee:be:00:d7:96: 17:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:83:29:E2:FE:E1:89:A7:D4:84:27:42:7A:47:E3:20:1A:06:96:82 X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:18:03:42:40:f0:1e:d0:36:2b:67:e5:20:75:a8:82:a5:26: 50:69:e7:5e:0e:55:f4:2c:92:35:70:9e:4f:4e:b1:e0:a4:72: e8:0b:a2:56:e3:ba:41:0c:6f:4c:2a:ba:40:fa:e9:e1:33:ef: 36:8e:c6:50:92:23:ae:eb:f1:06:a4:78:cc:21:40:a9:a0:29: 32:36:01:93:05:16:9f:12:3e:87:6f:e3:16:e1:a9:5b:e2:c8: 88:b8:a4:59:4f:34:93:79:00:35:e9:8d:8c:a1:7c:ad:d5:24: ba:33:14:91:33:ea:72:f7:dc:17:f5:d2:be:76:fc:10:10:e2: 69:eb:93:36:22:52:3b:cf:7c:fc:5c:42:a2:43:82:78:ff:9c: 00:fb:0f:0b:46:6c:e1:16:6e:13:4d:0d:ff:3d:80:d9:7b:e8: fa:51:70:88:4d:73:bc:7a:b2:b4:9a:b4:8b:d8:54:91:d4:d8: 1d:44:0d:9a:e4:ba:54:c4:2e:04:87:45:8d:e1:25:53:e5:49: 6d:3a:9a:30:8b:d5:33:a8:f1:77:88:30:6a:9d:1b:81:cf:41: 46:ba:3b:fa:e0:f8:89:ca:93:e4:42:58:dc:89:0e:2a:ab:61: e2:e9:42:dd:29:42:64:67:d1:b4:83:08:d6:8e:12:01:01:1d: 7e:4e:7d:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QzExMTAvBgNVBAUTKDA0N0VGMUExQ0Y2NTk2NjM0OTg2Njc2NzY1NTY0OEVF RjkxMTBDNUEwHhcNMjUxMjIxMDUyNDExWhcNMjUxMjI4MDUyNDExWjAYMRYwFAYD VQQDDA02OTQ3ODQ3Yy1iYzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiqex1QRZleuUCEmT+LJZEs+hQFkIyxNJK7yM0fgLhtyZMlF2PT7cgqPDbjTI YXW1FWOiYUoIUaht9p2DUgjHYTkRzWEq8FQeWnMdB3HJwt44fqNr1+3umT05Qk0x Kk1G5hR0A15hH5sPbRVw28EWm+N/e7rDVUuJomiZGySxIraoaGJRSupubRh+1zyX Qaa7agg9lxE+P1t+YKBCzcHaFj3d6pEp1MN06Rdbxj4x1jTCbKzl4Lkyb8v5p6W8 ALWi5QWW3/o0sK5ltE47ACObIhswgNmwagVu0ZeSewr//s2NsFmVJOFpXcoPpZwz Sbc4b+4v6qOVVSp+7r4A15YX9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2DKeL+ 4Ymn1IQnQnpH4yAaBpaCMB8GA1UdIwQYMBaAFAR+8aHPZZZjSYZnZ2VWSO75EQxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRDMS8zNjQ0ODg3QUU5 QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxtTkpobWRuWlZaSTd2a1JE Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRDMS8zNjQ0ODg3QUU5QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxt TkpobWRuWlZaSTd2a1JERm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBGANCQPAe0DYrZ+UgdaiCpSZQaedeDlX0LJI1cJ5PTrHgpHLoC6JW 47pBDG9MKrpA+unhM+82jsZQkiOu6/EGpHjMIUCpoCkyNgGTBRafEj6Hb+MW4alb 4siIuKRZTzSTeQA16Y2MoXyt1SS6MxSRM+py99wX9dK+dvwQEOJp65M2IlI7z3z8 XEKiQ4J4/5wA+w8LRmzhFm4TTQ3/PYDZe+j6UXCITXO8erK0mrSL2FSR1NgdRA2a 5LpUxC4Eh0WN4SVT5UltOpowi9UzqPF3iDBqnRuBz0FGujv64PiJypPkQljciQ4q q2Hi6ULdKUJkZ9G0gwjWjhIBAR1+Tn17 -----END CERTIFICATE-----Generated at Sun Dec 21 23:44:45 2025 by rpki-client