This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
File: Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json)
Hash identifier: aXeyGNDxUMqk50qzRpVX9IUIdDKGQJUKpiegEhMtU7o=
Subject key identifier: 56:53:3E:5B:1A:94:8A:02:74:35:2D:23:14:F1:09:A0:C4:F5:87:70
Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Certificate serial: 04DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
Manifest number: 19DB
Signing time: Sat 06 Dec 2025 16:23:39 +0000
Manifest this update: Sat 06 Dec 2025 16:23:39 +0000
Manifest next update: Sat 13 Dec 2025 16:23:39 +0000
Files and hashes: 1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: x5YmXQFRsFm4foK9xm0+rcgDvIULAFyxs3wzoqlCAYU=)
2: 2A53DA54332011EF89CABD61C4F9AE02.roa (hash: XAFmHRo+hO35GWVsWHHscFE/9w85d60jx9W3Sf7aA0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1243 (0x4db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Validity
Not Before: Dec 6 16:23:39 2025 GMT
Not After : Dec 13 16:23:39 2025 GMT
Subject: CN=6934588b-a452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a3:11:63:20:76:53:4a:33:2c:c7:e9:35:4f:
9f:71:bd:36:64:73:59:13:29:41:63:e6:29:57:27:
b5:0a:f2:dd:7c:d4:7b:88:46:ae:23:97:b2:60:d6:
3d:11:8e:bf:d7:1b:77:e1:f1:8b:5e:93:36:5d:6e:
86:a4:2e:c7:09:7e:6f:9c:eb:27:94:73:1d:3c:93:
b0:97:35:2f:4f:fb:5b:2d:d3:8e:cd:2d:78:9b:da:
a3:b5:a6:b7:ed:5b:53:02:7e:45:1f:fe:91:d9:53:
1f:83:d6:0b:e4:cf:f5:de:1a:c7:15:b6:27:f4:c3:
ff:23:89:89:be:c7:24:f4:80:b3:f8:72:3d:8c:98:
26:74:ab:77:e3:c4:06:fd:55:5d:20:4a:66:b1:b7:
43:0c:0e:7d:d8:ac:ac:15:c8:99:12:6c:8c:be:3e:
c8:35:4b:bf:91:4b:97:db:a0:1a:72:d0:61:26:aa:
15:4b:54:40:6a:6c:db:61:1b:4c:58:a4:c7:97:96:
54:18:1b:ef:4f:58:f4:2d:29:e5:ef:82:b4:86:c6:
50:36:dd:4a:58:b0:a0:62:68:c3:e8:30:13:23:99:
f0:3f:0c:5d:e1:01:41:9f:15:b3:3d:90:33:87:b1:
c1:94:55:4e:fc:e3:39:04:f4:e7:9c:ec:fa:77:b5:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:53:3E:5B:1A:94:8A:02:74:35:2D:23:14:F1:09:A0:C4:F5:87:70
X509v3 Authority Key Identifier:
keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:38:62:27:ba:8d:db:db:ed:c8:f2:33:c0:7a:93:da:27:2f:
69:d9:3c:2e:fd:b5:7c:8a:b4:24:81:4f:bf:2f:20:a0:ce:25:
5d:b0:c0:3c:60:b7:39:bc:4e:18:58:f5:a3:72:d0:05:8b:46:
af:b5:c7:2c:93:26:52:bc:9b:48:18:bb:2b:ea:5f:97:7f:7b:
ef:2d:e9:d6:a7:ba:81:62:b3:25:c4:80:2b:fc:db:d7:2a:ba:
03:f1:b2:94:d4:66:46:1d:c2:5f:60:63:7e:c7:d8:3e:79:73:
02:59:68:97:d2:62:f6:4c:ca:f3:de:67:6e:22:57:26:d1:d4:
e3:63:0a:58:7e:31:44:41:f6:86:9b:eb:c4:59:5a:1c:09:4c:
f2:c6:42:cf:85:ae:ab:13:82:0c:79:a5:e7:56:34:bf:5d:35:
81:98:65:ab:8f:c9:2d:a7:5a:5a:b7:a7:58:25:73:df:84:52:
1b:71:86:31:cf:d2:81:78:22:6d:6f:b7:03:bb:d7:b5:d3:59:
d0:86:db:0b:42:81:d0:47:e4:63:1f:37:dc:fe:aa:ab:ba:dd:
be:04:ae:92:a8:2c:0d:b3:65:a4:3d:93:7c:66:13:d4:a1:91:
c5:0f:00:9b:b6:08:2c:90:d4:03:66:9d:53:b0:48:0d:f4:e4:
77:a5:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:55:51 2025 by rpki-client