This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
File: BZOGVctKEp6P3fsJQsICA-N-G8E.mft (raw, json)
Hash identifier: Md1ex84y4riz1n+4QghYt0W8yW+LL7AkYXgBK6rauOo=
Subject key identifier: 34:8C:B6:04:8C:2C:79:2C:0E:F5:E9:BA:37:B0:4C:45:D0:D9:91:CC
Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1
Certificate issuer: /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
Certificate serial: 0401
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
Manifest number: 03FC
Signing time: Thu 04 Dec 2025 22:55:35 +0000
Manifest this update: Thu 04 Dec 2025 22:55:35 +0000
Manifest next update: Thu 11 Dec 2025 22:55:35 +0000
Files and hashes: 1: BZOGVctKEp6P3fsJQsICA-N-G8E.crl (hash: Svhw6UoNhvTw2vIWBbBw+oclsAiSTWosMDTkutsX9uU=)
2: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (hash: IDcKfjrcD970kwyhuo4LacbpxchYwfNjnBXBdXrdXbs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl
rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025 (0x401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF5AE, serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
Validity
Not Before: Dec 4 22:55:35 2025 GMT
Not After : Dec 11 22:55:35 2025 GMT
Subject: CN=69321167-38d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:97:bd:00:6d:67:5a:c1:c2:6f:c5:52:aa:
79:e6:b1:e1:c7:0a:ef:81:13:f8:5a:e7:6a:57:f4:
df:54:8e:98:8b:77:b1:d7:9e:a5:f8:4b:db:a5:10:
84:c2:9f:69:12:49:46:96:52:a5:22:57:63:f9:8e:
8f:27:20:67:78:62:32:51:9e:2e:f7:0f:cb:08:2b:
bb:28:4c:87:82:50:f4:b5:1a:ca:3c:6f:ea:c9:f4:
ec:a9:5c:f6:9c:cb:6a:0f:40:84:a0:5a:36:e4:5b:
84:d2:1a:bc:36:ba:b8:a8:ba:11:22:be:28:97:76:
d8:02:cd:30:d0:e7:0b:51:d4:d5:de:75:d3:14:12:
1d:8e:b4:93:8c:4c:9f:d0:15:66:f0:64:26:58:48:
37:44:2d:58:ca:91:05:18:eb:f7:ff:76:80:d7:06:
85:73:a1:83:43:ea:81:83:e6:d6:4e:c2:37:47:88:
29:d7:8c:97:5b:df:50:1b:ea:79:9d:7a:ca:2d:ca:
27:04:bf:4e:de:d2:42:f3:4d:e1:52:c5:33:dc:95:
9e:02:3a:6f:15:63:09:0b:5c:8b:d9:c3:8e:36:89:
31:d7:68:6b:69:68:71:12:0b:65:bc:af:fe:59:b4:
85:3e:f8:9d:2e:ba:bb:17:3a:60:fc:0b:00:02:f2:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8C:B6:04:8C:2C:79:2C:0E:F5:E9:BA:37:B0:4C:45:D0:D9:91:CC
X509v3 Authority Key Identifier:
keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dc:77:d0:de:c6:54:90:3f:c3:f5:fd:9c:dd:da:2d:2d:90:0a:
30:46:12:6a:38:8a:da:df:c8:61:cb:0f:cf:ce:05:a2:64:92:
e5:18:51:3a:c7:4e:12:5c:f5:72:78:8f:40:13:3d:cd:3e:85:
ca:5b:d1:f0:42:d1:8d:83:1d:37:dc:f2:43:42:31:ae:a7:10:
d8:0b:3c:a3:6a:e7:b8:01:67:21:b1:55:25:24:ad:e4:1f:60:
f4:48:a5:5c:e9:17:11:c2:00:6f:de:24:a0:3f:47:d3:37:70:
e9:3a:13:f8:d5:c8:7b:5b:50:7d:a5:d9:5e:9a:35:90:b5:d5:
66:e6:78:40:85:f8:84:b6:8d:45:27:a5:15:92:7e:97:7b:6b:
c2:ad:cf:d6:5b:c7:6f:5d:9e:8f:74:45:20:41:25:82:ef:81:
00:2c:e9:1b:cf:f4:f1:8c:82:c0:c0:22:f6:78:ce:46:cd:38:
45:f5:d9:fd:aa:35:51:cd:cb:66:ad:e0:5d:8c:13:9e:f7:3f:
8c:97:fd:af:b0:53:80:a9:7a:93:01:c4:e2:fa:3e:9e:af:5f:
5c:56:ac:db:e4:4b:77:d2:f7:09:4c:cb:81:b2:00:40:db:b2:
85:61:16:9c:75:c0:d1:73:cd:bd:72:0b:6a:b7:ee:18:38:c9:
37:29:e3:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY1QUUxMTAvBgNVBAUTKDA1OTM4NjU1Q0I0QTEyOUU4RkRERkIwOTQyQzIwMjAz
RTM3RTFCQzEwHhcNMjUxMjA0MjI1NTM1WhcNMjUxMjExMjI1NTM1WjAYMRYwFAYD
VQQDEw02OTMyMTE2Ny0zOGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtFKXvQBtZ1rBwm/FUqp55rHhxwrvgRP4WudqV/TfVI6Yi3ex156l+EvbpRCE
wp9pEklGllKlIldj+Y6PJyBneGIyUZ4u9w/LCCu7KEyHglD0tRrKPG/qyfTsqVz2
nMtqD0CEoFo25FuE0hq8Nrq4qLoRIr4ol3bYAs0w0OcLUdTV3nXTFBIdjrSTjEyf
0BVm8GQmWEg3RC1YypEFGOv3/3aA1waFc6GDQ+qBg+bWTsI3R4gp14yXW99QG+p5
nXrKLconBL9O3tJC803hUsUz3JWeAjpvFWMJC1yL2cOONokx12hraWhxEgtlvK/+
WbSFPvidLrq7Fzpg/AsAAvI7OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSMtgSM
LHksDvXpujewTEXQ2ZHMMB8GA1UdIwQYMBaAFAWThlXLShKej937CULCAgPjfhvB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjVBRS81RTZFMjA3ODlB
QTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0VwNlAzZnNKUXNJQ0EtTi1H
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JaT0dWY3RLRXA2UDNmc0pRc0lDQS1OLUc4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjVBRS81RTZFMjA3ODlBQTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0Vw
NlAzZnNKUXNJQ0EtTi1HOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDcd9DexlSQP8P1/Zzd2i0tkAowRhJqOIra38hhyw/PzgWiZJLlGFE6
x04SXPVyeI9AEz3NPoXKW9HwQtGNgx033PJDQjGupxDYCzyjaue4AWchsVUlJK3k
H2D0SKVc6RcRwgBv3iSgP0fTN3DpOhP41ch7W1B9pdlemjWQtdVm5nhAhfiEto1F
J6UVkn6Xe2vCrc/WW8dvXZ6PdEUgQSWC74EALOkbz/TxjILAwCL2eM5GzThF9dn9
qjVRzctmreBdjBOe9z+Ml/2vsFOAqXqTAcTi+j6er19cVqzb5Et30vcJTMuBsgBA
27KFYRacdcDRc829cgtqt+4YOMk3KePd
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:26:28 2025 by rpki-client