This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json)
Hash identifier: 9nafM05OnZM4flXiQrPR7eMT6L5bvQJbop7TUj4OeF4=
Subject key identifier: D0:B3:D5:CD:73:F7:EB:9C:BC:53:E1:ED:4B:97:FB:EC:2F:09:17:73
Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C
Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
Certificate serial: 09FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
Manifest number: 09EC
Signing time: Sat 06 Dec 2025 19:07:57 +0000
Manifest this update: Sat 06 Dec 2025 19:07:57 +0000
Manifest next update: Sat 13 Dec 2025 19:07:57 +0000
Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: XvlBlzEJVLSLN7zwgoHlSRgVdoRytSPqtFSz1EkFXmU=)
2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: dpLf2qBFe220x5GKZk4KYPgV5wQJtggmyE0D/YCjeAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl
rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2554 (0x9fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
Validity
Not Before: Dec 6 19:07:57 2025 GMT
Not After : Dec 13 19:07:57 2025 GMT
Subject: CN=69347f0d-c9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:02:f0:f6:a6:e8:9a:a0:8f:91:85:13:3a:
61:8e:7d:74:1b:24:26:1c:f0:3a:61:05:50:ba:86:
aa:71:67:66:8c:09:e4:21:05:3e:c7:c1:91:c0:1c:
c6:30:4a:58:fb:6d:89:83:12:9f:50:a4:d6:c9:3c:
19:99:8e:d5:34:74:8c:81:97:33:de:3d:25:30:88:
e3:d0:eb:5c:31:62:ab:12:ba:64:a4:66:1f:c9:db:
08:08:8e:cb:25:db:04:24:db:8c:61:73:bb:4a:ae:
11:f4:bc:71:a0:a1:57:4e:20:be:d8:8d:14:af:35:
ff:2c:7c:09:e9:fe:92:82:44:84:bf:b0:0f:66:23:
02:a4:c8:fc:35:67:6b:aa:63:3e:47:85:e0:b9:11:
cb:4f:38:c4:1b:d3:40:93:b4:a3:5a:77:7a:42:fa:
a9:91:b8:eb:2b:67:1f:a8:40:21:c0:86:03:48:47:
d0:8b:60:18:d8:a1:4b:a0:5c:25:44:25:31:0c:07:
86:f8:b5:31:04:4f:35:62:44:54:f6:86:22:91:4c:
54:47:15:ec:ad:f6:4e:bf:cf:25:08:06:66:71:82:
a1:0d:cc:dd:cf:09:14:aa:c7:68:31:b6:f1:55:b2:
ad:dc:c3:b5:f8:f4:83:46:ae:3c:c2:22:84:8f:53:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B3:D5:CD:73:F7:EB:9C:BC:53:E1:ED:4B:97:FB:EC:2F:09:17:73
X509v3 Authority Key Identifier:
keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:6c:4f:6c:9f:a4:ee:cd:ab:ff:0b:64:ca:d0:ce:33:bf:d3:
7f:25:61:b6:6b:68:8a:b5:64:30:d3:87:bf:8d:65:e3:88:ca:
0b:bc:0b:7e:cc:8c:8b:d2:18:d2:e6:3d:3d:52:86:39:19:37:
d5:9e:ff:03:43:a9:38:89:f7:0f:5e:6a:9a:60:4f:47:b2:73:
75:35:7a:4c:a4:91:da:d7:26:2b:db:d4:4b:0e:28:8d:37:29:
4d:f9:7e:44:7a:8f:58:f3:b6:2a:1c:46:4e:b1:e5:3b:04:6b:
f7:11:87:0c:ab:23:f4:f6:7d:d1:47:21:92:9c:3d:58:d1:49:
6d:68:af:13:03:69:cf:2d:fc:42:82:0e:e4:43:67:b5:dd:2c:
27:86:40:5e:cb:75:92:7f:66:fe:10:a2:fa:1d:80:cc:d5:5c:
18:d8:09:66:af:c9:ea:db:3d:fb:23:45:00:e8:92:c5:1e:17:
cc:af:6c:12:f9:cd:a5:73:a1:6c:39:97:e5:97:dd:ed:e7:3f:
fd:f8:91:06:8c:f0:ac:4d:fa:dd:62:5e:e6:e0:d0:d0:d1:2c:
c4:8b:f8:59:9f:81:25:6f:3b:25:59:86:2b:c2:dd:90:18:2a:
9c:84:9b:f2:20:05:c8:87:3c:eb:00:eb:93:d5:00:1b:4d:11:
df:d8:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:43:22 2025 by rpki-client