This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft File: bBl9pJIs_dxOmMiEbgOn19DkC3E.mft (raw, json) Hash identifier: Z96LJ0wqVUSzeqYlNbzSuvN/yrc5UcmFwvQ+0FtEeYQ= Subject key identifier: 21:8B:7C:F0:64:8C:47:2C:F9:06:70:96:38:C4:64:C9:F5:4B:32:77 Authority key identifier: 6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 Certificate issuer: /CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Certificate serial: 06DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft Manifest number: 06CA Signing time: Thu 04 Dec 2025 20:57:07 +0000 Manifest this update: Thu 04 Dec 2025 20:57:07 +0000 Manifest next update: Thu 11 Dec 2025 20:57:06 +0000 Files and hashes: 1: bBl9pJIs_dxOmMiEbgOn19DkC3E.crl (hash: a1AqhUmcz6NyUqOThefaKLR8F1aCwPpTb7IQ28QR3T4=) 2: ECCDCA04809A11EB9093216EC4F9AE02.roa (hash: //P4Dwc0yC8aNI6dL5grZWmAPuUGPAB2QMNisS1s91o=) 3: 397ED08A2F7911ED93B17C0FC4F9AE02.roa (hash: sO+5ZUlz1ZfgN4m9jGacz4xKmgRg5xQ7WfaHnr5n8EY=) 4: 7D6F53547F0411EBB8CAEE2BC4F9AE02.roa (hash: VneqGQNP18iG+RzoK9rzGT1v0y/EKMK88ucBZjMvCCE=) 5: 08C849682F6E11EDA8ABA74BC4F9AE02.roa (hash: hmEwq8j3GlUgHO4QkFMDsLDsFyKYgDX+OadwrR+PhRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1759 (0x6df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF2E1, serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Validity Not Before: Dec 4 20:57:07 2025 GMT Not After : Dec 11 20:57:06 2025 GMT Subject: CN=6931f5a3-2383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:be:d0:39:44:35:c1:0f:40:9d:75:7a:af:ba: 8a:a8:e0:8d:e7:24:69:13:70:9b:a5:17:ae:72:7a: c1:de:29:ca:29:9e:4e:bd:eb:c4:12:c4:d4:0d:5e: 32:c6:5a:a2:8f:fb:53:a6:2d:72:d1:af:c6:a1:05: ea:fd:ba:51:7d:1d:3f:4c:50:bb:d1:b4:23:3c:62: 91:2e:6a:e4:82:eb:d0:33:af:e0:89:54:6f:a0:80: c3:db:4e:9b:da:24:d0:d8:52:43:fd:8e:e2:ab:04: 00:24:3d:a6:1a:4c:1c:ce:73:0d:db:3e:5c:22:e0: 87:2b:1b:58:d2:33:41:96:4c:49:fc:4e:f9:4d:0e: 2f:84:4f:46:bf:a7:d4:e0:3f:a7:7e:eb:80:08:65: 4e:35:06:ef:24:08:e8:1f:c8:30:0e:49:f7:3c:91: 6e:ec:b1:01:d1:53:26:b7:e8:76:66:64:b4:8b:1d: f1:93:98:78:61:7f:92:dc:e6:f0:20:44:db:8b:11: 68:35:7b:32:1c:10:36:1f:68:26:fb:89:1e:1c:3c: 8c:dc:2b:c2:96:a8:2e:04:b7:f0:7c:92:45:83:29: 11:5d:9e:1e:98:26:00:3e:d8:75:a7:91:f3:b6:33: b4:72:76:17:95:33:ea:01:7a:6b:85:98:f2:fb:b0: 25:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8B:7C:F0:64:8C:47:2C:F9:06:70:96:38:C4:64:C9:F5:4B:32:77 X509v3 Authority Key Identifier: keyid:6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:04:ef:9a:e3:e7:94:c7:df:af:78:5c:60:5f:80:dd:43:95: 5a:5c:14:cb:bb:4f:85:22:48:b3:96:61:6f:36:bb:b5:c1:53: b7:8f:6b:f2:c8:c0:23:37:87:5e:eb:39:1a:fa:c7:64:67:47: b3:7b:42:ce:37:6a:02:e5:3d:ce:92:3f:34:4b:c0:e7:71:a9: d8:10:b7:26:2a:ff:7b:69:85:d4:54:12:e6:99:ca:1c:5c:c6: 53:6d:79:0b:17:eb:27:94:34:1d:1b:3f:f0:6a:11:f6:a5:d6: 93:e7:f8:6c:b1:9b:f6:14:7f:45:71:b8:35:c1:c3:f3:c2:5f: ba:dc:21:20:f3:db:a2:0f:93:b4:f6:b6:08:8f:18:03:2a:51: 38:01:45:b8:b6:80:9a:bb:41:05:aa:af:84:df:1c:5c:b2:4e: 9b:d5:54:31:f9:62:68:98:64:01:51:35:b5:a2:fe:85:05:a1: 8d:d4:b7:7d:fd:4c:2c:d2:85:ab:21:c1:3c:72:85:5e:6c:00: 7c:9e:c8:69:5f:ea:48:e1:ab:e5:ea:38:80:7b:ed:82:18:ea: 5f:3f:fb:ce:ed:47:b0:a5:5d:95:42:7b:52:6a:b5:ed:94:c7: fe:f6:68:bf:36:03:2d:34:ec:86:fd:24:f4:a1:f4:99:bf:60: 7c:10:37:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyRTExMTAvBgNVBAUTKDZDMTk3REE0OTIyQ0ZEREM0RTk4Qzg4NDZFMDNBN0Q3 RDBFNDBCNzEwHhcNMjUxMjA0MjA1NzA3WhcNMjUxMjExMjA1NzA2WjAYMRYwFAYD VQQDEw02OTMxZjVhMy0yMzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr77QOUQ1wQ9AnXV6r7qKqOCN5yRpE3CbpReucnrB3inKKZ5OvevEEsTUDV4y xlqij/tTpi1y0a/GoQXq/bpRfR0/TFC70bQjPGKRLmrkguvQM6/giVRvoIDD206b 2iTQ2FJD/Y7iqwQAJD2mGkwcznMN2z5cIuCHKxtY0jNBlkxJ/E75TQ4vhE9Gv6fU 4D+nfuuACGVONQbvJAjoH8gwDkn3PJFu7LEB0VMmt+h2ZmS0ix3xk5h4YX+S3Obw IETbixFoNXsyHBA2H2gm+4keHDyM3CvClqguBLfwfJJFgykRXZ4emCYAPth1p5Hz tjO0cnYXlTPqAXprhZjy+7AlAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGLfPBk jEcs+QZwljjEZMn1SzJ3MB8GA1UdIwQYMBaAFGwZfaSSLP3cTpjIhG4Dp9fQ5Atx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjJFMS8zRjY5Q0M2NjdG MDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19keE9tTWlFYmdPbjE5RGtD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCbDlwSklzX2R4T21NaUViZ09uMTlEa0MzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjJFMS8zRjY5Q0M2NjdGMDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19k eE9tTWlFYmdPbjE5RGtDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArBO+a4+eUx9+veFxgX4DdQ5VaXBTLu0+FIkizlmFvNru1wVO3j2vy yMAjN4de6zka+sdkZ0eze0LON2oC5T3Okj80S8DncanYELcmKv97aYXUVBLmmcoc XMZTbXkLF+snlDQdGz/wahH2pdaT5/hssZv2FH9Fcbg1wcPzwl+63CEg89uiD5O0 9rYIjxgDKlE4AUW4toCau0EFqq+E3xxcsk6b1VQx+WJomGQBUTW1ov6FBaGN1Ld9 /Uws0oWrIcE8coVebAB8nshpX+pI4avl6jiAe+2CGOpfP/vO7UewpV2VQntSarXt lMf+9mi/NgMtNOyG/ST0ofSZv2B8EDe2 -----END CERTIFICATE-----Generated at Sat Dec 6 11:22:01 2025 by rpki-client