This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json) Hash identifier: zj2x/AiGy8kF7uopbSBjRaJ4d1P3FmHExCsQkceO9DU= Subject key identifier: A0:FF:F1:75:0A:E1:BC:2E:06:52:5D:E4:4E:54:AB:97:D5:24:08:F7 Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0CB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft Manifest number: 0C96 Signing time: Sat 24 Jan 2026 18:07:02 +0000 Manifest this update: Sat 24 Jan 2026 18:07:02 +0000 Manifest next update: Sat 31 Jan 2026 18:07:02 +0000 Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: gGENFQPA9tFVNkM/qbN5FL69YlVViguBJ+ddvakgBUI=) 2: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: 6O0VKauTuWTfzmPjcovFKdSm/+YMqCBqWG3p+BX8OSE=) 3: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: YvJPp5TLJmmNMFrXdStXJanbJJfuz5ICtmKerDM4nQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3251 (0xcb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Validity Not Before: Jan 24 18:07:02 2026 GMT Not After : Jan 31 18:07:02 2026 GMT Subject: CN=69750a46-4099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:e2:ea:ae:81:01:ab:3e:e9:64:23:5a:35: 21:66:5f:0a:5d:a4:5d:c2:2f:7e:3e:7d:37:d9:b8: 1c:d9:0a:f0:23:00:b5:1d:ee:66:09:dc:4b:15:ba: 94:c1:cd:f8:d1:78:c9:06:60:de:a0:48:74:d4:b2: 20:01:99:45:89:48:81:7f:56:42:a0:85:52:44:ca: 32:25:03:e7:3d:60:31:ec:31:e8:28:a1:86:1f:84: 4d:da:97:6f:f1:95:e0:c2:fc:87:8f:c2:75:b3:49: 07:a1:7b:27:f5:ec:bc:8f:1b:c9:58:de:09:52:d1: e3:aa:42:c9:81:77:c3:78:a9:d3:51:6d:3b:64:55: 38:38:ce:cc:99:41:75:5e:1f:7f:2f:ef:f4:d7:54: 47:93:72:bd:b9:ff:8b:1b:b2:ee:4e:42:08:b1:03: 71:11:66:fc:41:7d:12:6c:47:c2:9a:ae:3b:4b:24: 2c:af:c4:bd:de:93:52:54:0e:1f:e3:d5:1a:5f:3d: 57:1b:86:14:b1:8e:0a:b8:d2:4c:0d:6d:b3:06:45: 9c:1b:3d:d1:49:ff:93:76:1c:00:1e:e4:fa:68:ad: 81:17:87:34:66:39:d7:fa:0b:e4:a4:aa:e1:26:49: 0e:b1:5e:40:bb:3d:dd:07:5a:23:07:24:50:93:97: 5f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FF:F1:75:0A:E1:BC:2E:06:52:5D:E4:4E:54:AB:97:D5:24:08:F7 X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:e4:a1:e2:78:c4:ed:4b:cd:6c:c1:03:c7:49:01:00:f4:5c: 4c:5d:e4:0c:58:f4:aa:63:cc:83:4d:db:34:bd:27:ae:0f:54: ef:6c:68:e2:12:16:cb:e2:c8:df:41:cb:b5:c7:1f:09:93:92: e8:06:0e:79:51:73:56:d5:03:54:98:31:f1:25:3f:e5:34:22: 81:aa:a9:11:0a:0c:8a:2d:3f:51:e7:88:b3:a7:9f:f2:fe:3a: 38:a9:87:68:67:61:d1:2d:0f:99:4b:25:86:0b:3a:b5:1a:58: e1:ed:fc:e9:3e:29:0b:09:14:b8:23:03:f4:15:d1:c3:01:9a: bd:cd:ac:33:bd:ed:db:75:8c:84:f0:cf:03:cd:20:e3:74:86: 33:5e:a5:2a:d2:4b:4c:2b:b1:c7:8f:59:1c:f6:43:6d:56:94: 49:29:79:ea:66:ce:63:3d:26:e0:3b:33:eb:6b:53:9b:0c:43: a6:36:a3:0d:4d:7d:6a:83:08:68:5d:08:95:31:33:4c:36:31: 06:46:67:81:e0:98:99:33:c4:1f:e5:15:4c:20:72:49:51:34: d4:bd:1d:9f:74:e6:96:92:d6:63:d8:bf:e7:f4:77:c5:df:01: 0c:2d:96:ca:03:75:0a:be:00:f8:c1:91:1a:6d:67:74:c3:16: dc:3a:a3:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjYwMTI0MTgwNzAyWhcNMjYwMTMxMTgwNzAyWjAYMRYwFAYD VQQDDA02OTc1MGE0Ni00MDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoefi6q6BAas+6WQjWjUhZl8KXaRdwi9+Pn032bgc2QrwIwC1He5mCdxLFbqU wc340XjJBmDeoEh01LIgAZlFiUiBf1ZCoIVSRMoyJQPnPWAx7DHoKKGGH4RN2pdv 8ZXgwvyHj8J1s0kHoXsn9ey8jxvJWN4JUtHjqkLJgXfDeKnTUW07ZFU4OM7MmUF1 Xh9/L+/011RHk3K9uf+LG7LuTkIIsQNxEWb8QX0SbEfCmq47SyQsr8S93pNSVA4f 49UaXz1XG4YUsY4KuNJMDW2zBkWcGz3RSf+TdhwAHuT6aK2BF4c0ZjnX+gvkpKrh JkkOsV5Auz3dB1ojByRQk5dfZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKD/8XUK 4bwuBlJd5E5Uq5fVJAj3MB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMxMi84NTkyRTQ4ODBGNjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJF bjdPMm00YVJ6eURBRW5lYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC45KHieMTtS81swQPHSQEA9FxMXeQMWPSqY8yDTds0vSeuD1TvbGji EhbL4sjfQcu1xx8Jk5LoBg55UXNW1QNUmDHxJT/lNCKBqqkRCgyKLT9R54izp5/y /jo4qYdoZ2HRLQ+ZSyWGCzq1Gljh7fzpPikLCRS4IwP0FdHDAZq9zawzve3bdYyE 8M8DzSDjdIYzXqUq0ktMK7HHj1kc9kNtVpRJKXnqZs5jPSbgOzPra1ObDEOmNqMN TX1qgwhoXQiVMTNMNjEGRmeB4JiZM8Qf5RVMIHJJUTTUvR2fdOaWktZj2L/n9HfF 3wEMLZbKA3UKvgD4wZEabWd0wxbcOqMB -----END CERTIFICATE-----Generated at Sun Jan 25 10:34:15 2026 by rpki-client