This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft File: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json) Hash identifier: wjwkyOuaix7zZtQd/Zm8vs3uf+7CB3Aalqa6Dub1UBQ= Subject key identifier: 1A:26:90:A2:B6:86:E1:21:F9:22:AB:B7:F6:DF:8E:EB:8D:77:43:21 Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 Certificate issuer: /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Certificate serial: 0A5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft Manifest number: 0A51 Signing time: Tue 16 Dec 2025 19:21:05 +0000 Manifest this update: Tue 16 Dec 2025 19:21:05 +0000 Manifest next update: Tue 23 Dec 2025 19:21:05 +0000 Files and hashes: 1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: UMqTnHHEC+DNf8LFwak4pA+MxfPzCBy5ElgGN9/B50A=) 2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: HX1z061ITJ/Mm5axSNQ3ySg9hGI3PSjhgq8jl6nzC3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 19:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2650 (0xa5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91A2, serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Validity Not Before: Dec 16 19:21:05 2025 GMT Not After : Dec 23 19:21:05 2025 GMT Subject: CN=6941b121-06fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:21:d5:2a:34:ed:3b:7e:e8:20:ab:27:1a:7f: 4c:fb:d1:8f:64:29:b0:34:3f:1e:44:fb:9f:d4:3a: c3:d7:ad:ac:52:b8:48:29:ff:6d:ce:a2:fc:65:ee: 88:44:b4:c9:1d:4b:56:90:11:60:e8:76:7e:44:5f: 35:8e:e6:61:ab:bd:a8:99:43:ca:3e:b2:93:48:06: 42:fa:5f:c5:9a:a1:2d:ad:72:f3:de:5c:55:f7:1e: 59:b0:93:69:95:ea:62:4e:11:cc:7f:c3:fb:fa:e2: 47:8e:67:1f:ab:61:27:36:81:b7:f9:d1:ab:8d:9b: 26:f6:a6:d4:47:6f:7a:da:e1:95:63:f3:9c:68:f6: e4:3b:f7:ae:f7:ec:c6:7f:87:8f:e5:41:51:cc:9f: 4a:13:58:a5:9c:ff:4e:14:50:69:d1:3f:b8:51:24: 8c:d5:1b:53:86:1b:70:d6:2e:0c:4f:53:4c:15:da: 56:35:af:b7:91:50:d2:a7:c7:a2:d0:a1:f5:20:6f: 96:52:50:12:6a:7a:76:9f:cd:86:1d:4b:fb:e4:82: 0f:0a:f6:c6:d1:fc:b5:8b:e2:2f:64:57:0f:ed:ab: 00:1c:77:ee:f6:14:94:34:0b:a7:c8:f9:cd:4b:c5: 01:d4:ad:70:70:7c:cd:81:a9:32:8a:b9:f3:25:6c: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:26:90:A2:B6:86:E1:21:F9:22:AB:B7:F6:DF:8E:EB:8D:77:43:21 X509v3 Authority Key Identifier: keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:03:af:b0:26:52:58:d1:07:51:2e:e0:a7:a7:84:8e:69:da: f6:fb:3a:5b:fe:26:29:2c:32:f6:63:fa:78:5f:ea:fa:9b:6d: e0:dd:03:97:2f:98:77:bd:dc:a2:a4:21:16:a4:2c:73:86:b8: d0:77:0f:a7:d2:9d:35:8f:f2:25:d8:fd:5e:60:cf:99:0a:01: 77:e9:27:1d:5e:c1:dd:6a:e6:fa:05:ee:13:0a:b5:a5:c1:d4: ae:02:fc:24:38:47:d6:87:81:44:aa:8d:89:7e:2b:2a:ab:82: 08:32:cb:eb:ed:9c:13:9a:ad:0f:c5:40:86:2a:00:98:b0:46: cd:3b:db:14:f4:ab:fe:83:9e:23:9c:4e:1c:4c:1c:96:eb:d0: 78:2d:83:98:35:62:82:7a:08:11:68:11:4b:54:32:4a:a4:07: f4:b5:e8:27:e8:20:ca:cd:69:36:99:49:a1:f0:ca:93:0e:88: bf:17:11:ec:2c:fd:65:f8:16:7e:32:b3:19:1b:7b:c3:d5:d9: 6a:96:af:0b:cc:63:a9:54:8e:23:43:56:bd:4b:d0:cb:86:76: fe:c1:2e:22:57:6d:74:e8:b2:37:66:6b:4b:99:87:da:41:cc: e9:c6:3f:0b:e6:bc:ed:18:79:82:90:2a:e3:7d:7a:49:72:15: cf:b6:30:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQTIxMTAvBgNVBAUTKDZFOTI2QkNFNjE5RTRGNTAwQUJGQTQyNEZEQjA3NjRE MjU4Q0FCNTMwHhcNMjUxMjE2MTkyMTA1WhcNMjUxMjIzMTkyMTA1WjAYMRYwFAYD VQQDDA02OTQxYjEyMS0wNmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7iHVKjTtO37oIKsnGn9M+9GPZCmwND8eRPuf1DrD162sUrhIKf9tzqL8Ze6I RLTJHUtWkBFg6HZ+RF81juZhq72omUPKPrKTSAZC+l/FmqEtrXLz3lxV9x5ZsJNp lepiThHMf8P7+uJHjmcfq2EnNoG3+dGrjZsm9qbUR2962uGVY/OcaPbkO/eu9+zG f4eP5UFRzJ9KE1ilnP9OFFBp0T+4USSM1RtThhtw1i4MT1NMFdpWNa+3kVDSp8ei 0KH1IG+WUlASanp2n82GHUv75IIPCvbG0fy1i+IvZFcP7asAHHfu9hSUNAunyPnN S8UB1K1wcHzNgakyirnzJWyO7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBomkKK2 huEh+SKrt/bfjuuNd0MhMB8GA1UdIwQYMBaAFG6Sa85hnk9QCr+kJP2wdk0ljKtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFBMi84OTcxMzA5QzdC MTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQxQUt2NlFrX2JCMlRTV01x MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwSnJ6bUdlVDFBS3Y2UWtfYkIyVFNXTXExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFBMi84OTcxMzA5QzdCMTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQx QUt2NlFrX2JCMlRTV01xMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBA6+wJlJY0QdRLuCnp4SOadr2+zpb/iYpLDL2Y/p4X+r6m23g3QOX L5h3vdyipCEWpCxzhrjQdw+n0p01j/Il2P1eYM+ZCgF36ScdXsHdaub6Be4TCrWl wdSuAvwkOEfWh4FEqo2Jfisqq4IIMsvr7ZwTmq0PxUCGKgCYsEbNO9sU9Kv+g54j nE4cTByW69B4LYOYNWKCeggRaBFLVDJKpAf0tegn6CDKzWk2mUmh8MqTDoi/FxHs LP1l+BZ+MrMZG3vD1dlqlq8LzGOpVI4jQ1a9S9DLhnb+wS4iV2106LI3ZmtLmYfa Qczpxj8L5rztGHmCkCrjfXpJchXPtjAE -----END CERTIFICATE-----Generated at Thu Dec 18 20:08:52 2025 by rpki-client