This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft File: bgopAGEwM5uDbSj3ABgC9xpaTkI.mft (raw, json) Hash identifier: 7lvgRJYgIOkcQADtANyjC9hgR15zSvMtYSvUKnbpsN0= Subject key identifier: 18:A6:2A:36:A4:52:67:63:A5:65:7E:6B:5F:6C:75:67:26:43:05:6F Authority key identifier: 6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 Certificate issuer: /CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Certificate serial: 0348 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft Manifest number: 0344 Signing time: Tue 23 Dec 2025 00:00:12 +0000 Manifest this update: Tue 23 Dec 2025 00:00:11 +0000 Manifest next update: Tue 30 Dec 2025 00:00:11 +0000 Files and hashes: 1: bgopAGEwM5uDbSj3ABgC9xpaTkI.crl (hash: CVGggBO7Zt8BfkSRE2aUHi2TXgq4iUfFzsN29eqgYJw=) 2: 3C3A98A4E71C11EC9128DF0BC4F9AE02.roa (hash: rY7SQuVKgC/AxWbpxkoT7pJkBb/Nudv0kRr7++VnHvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 840 (0x348) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166D1, serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Validity Not Before: Dec 23 00:00:11 2025 GMT Not After : Dec 30 00:00:11 2025 GMT Subject: CN=6949db8c-9fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ed:27:a0:c6:1b:9d:52:8c:58:30:48:ce:6d: b9:70:4b:e3:d7:ca:39:e8:26:14:a4:72:33:a0:a7: e4:c8:bf:c7:b4:12:48:c6:c7:de:de:8d:2a:bc:e5: 15:d5:ae:88:7a:71:e5:93:07:79:8a:71:dd:98:f6: 5d:78:e9:76:05:d8:e0:5c:1e:3c:46:e7:09:5c:39: 45:b6:9b:1d:3b:d3:42:52:d2:b4:8a:c9:6e:2f:7d: 85:d8:4f:30:44:52:5c:2d:77:9c:e0:d8:d8:c6:9a: bc:49:92:fc:3f:22:73:e5:a7:51:9f:09:14:7c:32: 63:fa:26:71:12:60:01:10:82:c7:ea:ad:80:11:43: f7:e1:26:8a:8f:12:7d:b9:7f:68:2a:ec:35:57:f9: 7e:f4:14:c3:fd:83:0e:38:90:f9:16:02:d8:bc:ac: 0d:b3:de:68:23:97:24:68:e0:38:1a:13:6a:d3:2a: 33:57:c7:9c:aa:37:36:6a:a2:30:2a:bb:a8:01:8f: e5:86:5a:90:a7:21:c7:d1:bd:b4:a0:22:0f:0f:98: a4:7d:bd:ff:cf:79:71:b8:1e:fa:f3:fb:09:91:69: b5:72:c0:b8:ce:53:3c:94:d5:68:a3:10:af:7b:1d: a8:43:7d:f8:71:40:24:b1:cd:7a:d5:ef:70:0c:46: fc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A6:2A:36:A4:52:67:63:A5:65:7E:6B:5F:6C:75:67:26:43:05:6F X509v3 Authority Key Identifier: keyid:6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:4d:33:3e:e3:a4:46:62:5e:0c:75:6b:45:e9:3d:88:5a:68: ed:7a:c3:f0:6f:4f:f9:05:0a:e8:fa:c4:54:7e:6b:d1:46:83: 85:a0:58:64:b9:45:2e:00:f9:15:a4:58:3b:b4:86:c0:b1:eb: 78:cb:53:3c:8c:8a:d1:b9:05:d0:71:a2:f6:39:1c:f7:2a:cc: d2:9f:49:31:1d:00:d6:21:3c:05:c3:d9:ba:a8:a9:0c:5a:21: 82:61:5b:9c:f0:b9:a7:b4:52:b7:13:6f:98:b4:e7:c2:e5:d3: dd:c5:ab:84:bc:38:c3:d4:ed:5b:0a:6f:5f:16:74:f3:d8:2f: e9:ce:a9:7b:76:88:54:25:de:d7:b6:f1:52:bb:5f:37:b9:85: 4b:49:a2:a7:fd:a5:5d:3f:aa:74:17:84:b4:c7:68:2a:1b:c9: 4b:48:17:b6:72:54:2e:51:83:59:3f:86:11:77:92:54:9d:1e: 79:8a:75:2e:ad:46:d8:50:15:5d:da:3e:71:43:e7:e4:4e:6a: 3e:79:58:31:eb:37:dd:b1:11:b5:bb:a6:b7:cd:1c:bb:3b:0b: 40:e0:9e:b9:1f:7e:02:ae:a7:76:19:12:e5:a3:3a:5c:b3:97: 7f:c2:c2:41:99:a7:bb:38:1e:dc:dd:c3:4d:af:a3:7b:80:2b: 8d:95:52:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RDExMTAvBgNVBAUTKDZFMEEyOTAwNjEzMDMzOUI4MzZEMjhGNzAwMTgwMkY3 MUE1QTRFNDIwHhcNMjUxMjIzMDAwMDExWhcNMjUxMjMwMDAwMDExWjAYMRYwFAYD VQQDDA02OTQ5ZGI4Yy05ZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoO0noMYbnVKMWDBIzm25cEvj18o56CYUpHIzoKfkyL/HtBJIxsfe3o0qvOUV 1a6IenHlkwd5inHdmPZdeOl2BdjgXB48RucJXDlFtpsdO9NCUtK0isluL32F2E8w RFJcLXec4NjYxpq8SZL8PyJz5adRnwkUfDJj+iZxEmABEILH6q2AEUP34SaKjxJ9 uX9oKuw1V/l+9BTD/YMOOJD5FgLYvKwNs95oI5ckaOA4GhNq0yozV8ecqjc2aqIw KruoAY/lhlqQpyHH0b20oCIPD5ikfb3/z3lxuB768/sJkWm1csC4zlM8lNVooxCv ex2oQ334cUAksc161e9wDEb8nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBimKjak UmdjpWV+a19sdWcmQwVvMB8GA1UdIwQYMBaAFG4KKQBhMDObg20o9wAYAvcaWk5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZEMS9BQkRBNTE0MkU3 MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001dURiU2ozQUJnQzl4cGFU a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Jnb3BBR0V3TTV1RGJTajNBQmdDOXhwYVRrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZEMS9BQkRBNTE0MkU3MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001 dURiU2ozQUJnQzl4cGFUa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtTTM+46RGYl4MdWtF6T2IWmjtesPwb0/5BQro+sRUfmvRRoOFoFhk uUUuAPkVpFg7tIbAset4y1M8jIrRuQXQcaL2ORz3KszSn0kxHQDWITwFw9m6qKkM WiGCYVuc8LmntFK3E2+YtOfC5dPdxauEvDjD1O1bCm9fFnTz2C/pzql7dohUJd7X tvFSu183uYVLSaKn/aVdP6p0F4S0x2gqG8lLSBe2clQuUYNZP4YRd5JUnR55inUu rUbYUBVd2j5xQ+fkTmo+eVgx6zfdsRG1u6a3zRy7OwtA4J65H34Crqd2GRLlozpc s5d/wsJBmae7OB7c3cNNr6N7gCuNlVLJ -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:56 2025 by rpki-client