This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: kWNpcsoPM/hCx+Eg/VB5gmphor/vzbD3mk3CxC1EeIM= Subject key identifier: 30:A3:7E:55:3A:DD:D0:90:E3:69:4C:72:05:20:F7:13:90:47:99:21 Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: 9E Signing time: Fri 05 Dec 2025 04:22:13 +0000 Manifest this update: Fri 05 Dec 2025 04:22:12 +0000 Manifest next update: Fri 12 Dec 2025 04:22:12 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: u8vLlfFIOK6zNw7H8wBL6npRN2yhwtP+SspMKGY9X2s=) 2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: /RmfZz46so9ge+fbPNaFv77MZSPZTzTOQnyx59sNwag=) 3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: b+8Vf+1PI1yNyvvstVRxJPifoMZ8KqBIQc0NBIzO5qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Validity Not Before: Dec 5 04:22:12 2025 GMT Not After : Dec 12 04:22:12 2025 GMT Subject: CN=69325df5-cb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c1:f1:c5:c7:7c:69:1f:8f:61:2e:f4:2d:a4: 33:4c:9d:f7:71:78:66:ca:42:12:28:d0:ce:ef:7d: 60:39:74:e5:85:9c:95:7f:a0:c6:f9:ed:a8:cb:02: 40:cd:3b:0d:2a:c6:ee:be:41:6d:f3:26:da:58:1f: f6:c7:23:f5:6a:03:44:4e:fd:7a:81:80:31:68:5c: 28:b5:e4:0b:86:bc:93:35:ea:4c:cf:3e:3a:d2:9c: 0c:e0:fd:f2:87:78:35:46:de:eb:10:f1:a6:2d:41: 71:2d:6b:80:45:24:84:b7:a1:3e:91:d1:3b:79:27: 97:7d:79:46:0f:5a:d7:31:99:d1:a9:2c:55:a0:84: f8:fc:15:01:dc:ae:e2:ee:7c:6f:48:bb:36:a8:9e: 4b:72:f3:5f:51:fe:bd:cd:e7:e3:c3:2d:6f:8d:01: ed:2a:77:8e:19:c9:66:56:94:d0:6f:ec:47:2b:e2: 7d:be:be:27:20:34:11:fc:01:b8:4d:7f:a0:a9:b4: 6b:ea:8e:ba:82:d4:cd:b3:c5:bf:b8:a7:ce:8a:95: 8c:18:cc:a8:c2:5f:47:82:69:df:81:80:65:5f:2f: 9d:bb:97:47:11:7b:af:b6:35:f8:12:36:0e:80:b1: 29:de:8d:97:19:ba:19:45:47:58:c8:a9:94:a2:c0: ea:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A3:7E:55:3A:DD:D0:90:E3:69:4C:72:05:20:F7:13:90:47:99:21 X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:44:3a:f2:4a:16:5c:86:d4:6e:6c:30:94:41:86:25:d6:1b: 5d:e5:80:9a:c4:37:f6:4a:c1:3a:87:aa:15:6f:80:85:66:f1: b0:46:fc:3a:28:b3:b2:93:a2:90:65:67:8f:93:8a:5d:d1:b9: 3e:4d:3e:fb:24:bf:52:1b:98:1d:23:11:9d:08:88:50:0c:02: 90:a5:4b:99:44:0f:03:f7:00:66:c3:0a:77:58:84:7b:c8:6e: 8a:87:73:29:3f:94:ca:c9:5e:c3:ed:52:42:e0:05:9f:2e:35: 19:00:24:0b:74:40:dd:b0:27:8a:2c:33:39:1d:ef:ba:63:c2: 65:e4:5f:b3:52:06:4a:e0:97:f6:25:04:4d:1f:7a:91:94:77: d4:39:4a:8f:1a:05:25:af:fb:92:4b:bb:fc:ce:ba:45:4a:99: fe:09:67:bb:5c:db:e0:2e:05:14:dc:8b:bd:63:36:b3:6c:0f: af:85:b6:4d:ee:b4:8a:a6:33:ce:d4:13:8b:ab:b3:76:b7:06: bd:a1:17:c6:44:35:63:2b:58:c4:7f:5b:00:c4:aa:cc:f7:82: 62:f0:00:55:0b:05:bc:52:eb:24:33:ca:e9:90:4c:0a:5e:25: a1:e2:f8:e4:9b:ed:f2:c7:08:ab:7d:16:68:06:0b:22:be:09: c0:60:a0:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QzExMTAvBgNVBAUTKDA0N0VGMUExQ0Y2NTk2NjM0OTg2Njc2NzY1NTY0OEVF RjkxMTBDNUEwHhcNMjUxMjA1MDQyMjEyWhcNMjUxMjEyMDQyMjEyWjAYMRYwFAYD VQQDEw02OTMyNWRmNS1jYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMHxxcd8aR+PYS70LaQzTJ33cXhmykISKNDO731gOXTlhZyVf6DG+e2oywJA zTsNKsbuvkFt8ybaWB/2xyP1agNETv16gYAxaFwoteQLhryTNepMzz460pwM4P3y h3g1Rt7rEPGmLUFxLWuARSSEt6E+kdE7eSeXfXlGD1rXMZnRqSxVoIT4/BUB3K7i 7nxvSLs2qJ5LcvNfUf69zefjwy1vjQHtKneOGclmVpTQb+xHK+J9vr4nIDQR/AG4 TX+gqbRr6o66gtTNs8W/uKfOipWMGMyowl9HgmnfgYBlXy+du5dHEXuvtjX4EjYO gLEp3o2XGboZRUdYyKmUosDqVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCjflU6 3dCQ42lMcgUg9xOQR5khMB8GA1UdIwQYMBaAFAR+8aHPZZZjSYZnZ2VWSO75EQxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRDMS8zNjQ0ODg3QUU5 QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxtTkpobWRuWlZaSTd2a1JE Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRDMS8zNjQ0ODg3QUU5QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxt TkpobWRuWlZaSTd2a1JERm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwRDryShZchtRubDCUQYYl1htd5YCaxDf2SsE6h6oVb4CFZvGwRvw6 KLOyk6KQZWePk4pd0bk+TT77JL9SG5gdIxGdCIhQDAKQpUuZRA8D9wBmwwp3WIR7 yG6Kh3MpP5TKyV7D7VJC4AWfLjUZACQLdEDdsCeKLDM5He+6Y8Jl5F+zUgZK4Jf2 JQRNH3qRlHfUOUqPGgUlr/uSS7v8zrpFSpn+CWe7XNvgLgUU3Iu9YzazbA+vhbZN 7rSKpjPO1BOLq7N2twa9oRfGRDVjK1jEf1sAxKrM94Ji8ABVCwW8UuskM8rpkEwK XiWh4vjkm+3yxwirfRZoBgsivgnAYKBE -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:08 2025 by rpki-client