This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json) Hash identifier: Mj4ewkIW+3LltFFAeXwzPrtYm2b9qfxwR47YkWmwK2M= Subject key identifier: B7:68:92:A2:10:72:0B:8B:5A:C5:2E:17:DD:DA:D3:8A:43:73:8E:1A Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0C99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft Manifest number: 0C7C Signing time: Thu 04 Dec 2025 17:58:47 +0000 Manifest this update: Thu 04 Dec 2025 17:58:47 +0000 Manifest next update: Thu 11 Dec 2025 17:58:47 +0000 Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: M/kTpTw6/6VygiSyKG06oqZ9VXxJZAauD4otsJsYDv0=) 2: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: YvJPp5TLJmmNMFrXdStXJanbJJfuz5ICtmKerDM4nQo=) 3: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: 6O0VKauTuWTfzmPjcovFKdSm/+YMqCBqWG3p+BX8OSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3225 (0xc99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Validity Not Before: Dec 4 17:58:47 2025 GMT Not After : Dec 11 17:58:47 2025 GMT Subject: CN=6931cbd7-b5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:78:ae:72:85:b3:19:9f:9a:9b:d8:74:d9:88: 0a:e2:8f:42:0d:f5:18:9b:5f:be:c7:c8:fd:74:a1: 40:3b:8e:00:21:50:54:b3:50:61:07:02:63:c7:8a: dc:b8:94:e9:51:57:8c:79:58:a5:01:01:44:38:c1: 03:4e:e9:21:7c:2c:36:c9:c4:98:62:15:53:d9:e1: ee:64:f7:e2:89:4b:d1:40:18:66:61:7a:da:93:0b: 1e:b6:d7:c2:6e:1c:d9:78:23:1e:d0:19:e8:1d:fa: ee:bb:aa:6a:84:4d:68:2d:8c:95:e7:8d:23:c4:28: 57:2a:1a:76:4e:38:1c:f8:8b:04:20:6a:f1:05:d4: 0d:25:3c:a8:7e:ae:eb:2e:b1:8f:ca:c8:5e:56:8f: 82:1d:f9:1f:c9:ed:42:6e:a4:42:01:f7:59:74:93: c3:54:43:57:5e:50:be:7f:b5:8a:cb:8e:9a:a3:30: 25:22:b0:79:15:54:66:5b:de:5e:6b:e5:5b:48:a9: 88:7f:de:79:7a:9d:6b:6a:84:55:51:0d:99:d0:a2: a5:f4:5c:df:62:71:dd:0d:f4:f0:46:98:7e:0c:30: d5:db:d0:f5:0a:dd:f8:c7:5a:34:4e:83:c8:49:d8: 49:4d:e9:cc:13:a8:e2:35:91:f2:91:35:e3:56:bd: 10:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:68:92:A2:10:72:0B:8B:5A:C5:2E:17:DD:DA:D3:8A:43:73:8E:1A X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:2a:70:ba:67:80:48:a0:6a:84:0e:1c:19:6d:09:06:fb:72: 33:08:d5:f6:63:fe:1f:da:44:8f:b0:35:73:42:a2:07:ac:5e: 40:04:7e:e4:69:6f:a5:06:21:9b:ee:f6:1d:58:ae:60:75:f0: 34:d8:f3:ef:75:4f:cd:3f:39:30:68:06:01:fc:0d:8a:4d:9f: a2:6a:03:e3:1b:28:cc:c8:0e:89:02:cd:6d:41:90:b6:66:78: 71:c9:9f:85:3b:79:b2:23:06:92:10:56:c0:f5:6f:b4:31:c9: f9:e5:e2:22:b8:8f:2e:c5:d1:1b:19:92:5c:5a:4e:1e:f0:e9: 28:19:36:bb:88:4e:f8:c5:14:63:be:23:c2:f4:0a:19:b3:f4: 3f:40:01:64:99:0f:45:d9:2a:4f:fc:d0:54:4d:32:df:66:96: 2e:ab:95:86:3a:90:4f:ef:76:1e:e7:5b:9f:8b:2e:1a:de:a2: 20:4b:11:88:29:34:28:8f:8f:03:8e:df:ba:82:45:66:0c:4f: 77:82:3c:c3:c9:66:a6:5c:a9:7d:e3:69:7b:e8:a4:ca:65:85: f6:0e:ae:b6:87:0b:2a:e9:f1:10:1e:c1:18:38:78:4d:5c:c3: 04:2b:4c:cd:89:bb:6f:ef:a8:7a:43:c8:0b:5a:ee:2a:65:29: b6:19:31:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjUxMjA0MTc1ODQ3WhcNMjUxMjExMTc1ODQ3WjAYMRYwFAYD VQQDEw02OTMxY2JkNy1iNWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XiucoWzGZ+am9h02YgK4o9CDfUYm1++x8j9dKFAO44AIVBUs1BhBwJjx4rc uJTpUVeMeVilAQFEOMEDTukhfCw2ycSYYhVT2eHuZPfiiUvRQBhmYXrakwsettfC bhzZeCMe0BnoHfruu6pqhE1oLYyV540jxChXKhp2Tjgc+IsEIGrxBdQNJTyofq7r LrGPysheVo+CHfkfye1CbqRCAfdZdJPDVENXXlC+f7WKy46aozAlIrB5FVRmW95e a+VbSKmIf955ep1raoRVUQ2Z0KKl9FzfYnHdDfTwRph+DDDV29D1Ct34x1o0ToPI SdhJTenME6jiNZHykTXjVr0QlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdokqIQ cguLWsUuF93a04pDc44aMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMxMi84NTkyRTQ4ODBGNjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJF bjdPMm00YVJ6eURBRW5lYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcKnC6Z4BIoGqEDhwZbQkG+3IzCNX2Y/4f2kSPsDVzQqIHrF5ABH7k aW+lBiGb7vYdWK5gdfA02PPvdU/NPzkwaAYB/A2KTZ+iagPjGyjMyA6JAs1tQZC2 ZnhxyZ+FO3myIwaSEFbA9W+0Mcn55eIiuI8uxdEbGZJcWk4e8OkoGTa7iE74xRRj viPC9AoZs/Q/QAFkmQ9F2SpP/NBUTTLfZpYuq5WGOpBP73Ye51ufiy4a3qIgSxGI KTQoj48Djt+6gkVmDE93gjzDyWamXKl942l76KTKZYX2Dq62hwsq6fEQHsEYOHhN XMMEK0zNibtv76h6Q8gLWu4qZSm2GTGA -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:27 2025 by rpki-client