This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft File: BgI9tGNNXG41YYCoL7vPgLlHir4.mft (raw, json) Hash identifier: tvsVrlcuGru9/COmyxKG6F8wU/BEWGtBhXfRCSHI3cM= Subject key identifier: 9C:69:DB:6D:F3:B4:96:5C:43:68:4E:EC:9A:D0:64:5C:03:BE:30:D4 Authority key identifier: 06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE Certificate issuer: /CN=A91490F7/serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft Manifest number: 01BE Signing time: Tue 23 Dec 2025 02:03:12 +0000 Manifest this update: Tue 23 Dec 2025 02:03:12 +0000 Manifest next update: Tue 30 Dec 2025 02:03:12 +0000 Files and hashes: 1: BgI9tGNNXG41YYCoL7vPgLlHir4.crl (hash: RgkCdUbFbpFCpHRVkW4YyEoFXBjl1c9be3b51OkjAzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91490F7, serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE Validity Not Before: Dec 23 02:03:12 2025 GMT Not After : Dec 30 02:03:12 2025 GMT Subject: CN=6949f860-9d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cf:ae:b3:49:f4:68:4a:96:f0:9a:17:3c:14: ff:2d:9c:72:2f:c4:99:6b:11:6d:16:f3:86:d5:9e: 23:f5:a9:a7:c0:78:13:c5:9e:55:0a:85:43:99:e9: 92:b1:03:f7:b5:c8:fd:a0:20:a2:2e:fc:b1:b3:cb: 83:17:f1:36:b7:34:85:82:7b:93:bd:4d:3f:47:eb: 44:9c:bd:a8:ef:a1:71:40:02:88:46:49:9d:c6:98: 70:a3:ed:ec:17:a5:b9:65:74:74:aa:fa:b6:7f:ce: 63:fd:44:0c:92:8c:de:63:19:58:d7:b1:41:0f:a9: 95:27:00:fa:1a:0a:4a:4c:b9:77:a4:ae:8b:8f:55: 85:43:fc:0e:25:12:a0:25:46:28:9c:d5:9b:f1:ca: bc:e9:cd:1c:5d:a6:07:3c:bb:11:49:f9:f8:c7:d1: b5:f0:75:12:9e:87:61:43:7e:38:c0:98:b2:d3:70: 92:18:4d:5e:60:0d:fc:72:6b:dd:9d:b3:58:1e:55: 1b:aa:6b:cb:09:bd:6a:e0:65:6a:08:d6:f6:e9:2f: e1:4f:4a:ae:88:ea:4d:d8:ac:80:04:e8:d3:9f:c0: cb:dc:fc:1f:6b:09:5e:a8:d5:6b:2c:aa:4c:21:30: 51:8c:0e:7d:f0:52:17:93:72:ee:7a:4e:cf:c1:4b: 8d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:69:DB:6D:F3:B4:96:5C:43:68:4E:EC:9A:D0:64:5C:03:BE:30:D4 X509v3 Authority Key Identifier: keyid:06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2e:78:c7:e1:f5:55:c5:6f:4f:c2:aa:47:2c:f7:8e:a9:84: 1d:7d:de:50:3b:a8:74:25:85:c1:21:46:6f:cb:93:9b:a0:66: 88:f7:8a:99:39:4a:6e:a8:e4:30:ea:06:77:e0:96:b5:d2:00: fb:b8:ed:d2:a6:63:72:4b:07:38:99:a7:11:cd:07:9b:71:96: c3:91:2c:79:0e:ea:f5:31:0b:40:42:40:a3:38:2a:d8:35:87: fd:89:be:97:da:30:6f:c0:41:bc:35:07:4e:92:f7:2d:5b:9e: 15:17:11:62:d9:ab:dc:b6:28:53:54:35:60:4f:98:47:76:bc: fe:4f:33:67:c6:47:37:93:d4:38:af:2d:ea:11:8b:20:b7:80: 4e:7a:6d:19:c7:65:2d:06:1d:84:f6:f2:82:2e:69:f1:59:eb: 44:d3:a6:bc:0e:31:8f:cb:cd:0f:6c:f5:84:6a:d3:d7:a8:4f: 0b:1d:37:8b:b3:5a:a6:11:98:d6:ea:df:82:25:50:cc:aa:52: 1c:76:15:36:36:0c:1e:0f:45:31:34:8a:28:72:30:d8:54:34: 7a:72:95:db:9c:41:91:e1:2a:a7:59:21:42:91:6d:83:f4:c8: cc:b7:39:36:10:f8:37:b9:bc:17:cf:be:d6:ce:a6:58:9d:18: c7:b0:8c:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwRjcxMTAvBgNVBAUTKDA2MDIzREI0NjM0RDVDNkUzNTYxODBBODJGQkJDRjgw Qjk0NzhBQkUwHhcNMjUxMjIzMDIwMzEyWhcNMjUxMjMwMDIwMzEyWjAYMRYwFAYD VQQDDA02OTQ5Zjg2MC05ZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnM+us0n0aEqW8JoXPBT/LZxyL8SZaxFtFvOG1Z4j9amnwHgTxZ5VCoVDmemS sQP3tcj9oCCiLvyxs8uDF/E2tzSFgnuTvU0/R+tEnL2o76FxQAKIRkmdxphwo+3s F6W5ZXR0qvq2f85j/UQMkozeYxlY17FBD6mVJwD6GgpKTLl3pK6Lj1WFQ/wOJRKg JUYonNWb8cq86c0cXaYHPLsRSfn4x9G18HUSnodhQ344wJiy03CSGE1eYA38cmvd nbNYHlUbqmvLCb1q4GVqCNb26S/hT0quiOpN2KyABOjTn8DL3PwfawleqNVrLKpM ITBRjA598FIXk3Luek7PwUuNkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxp223z tJZcQ2hO7JrQZFwDvjDUMB8GA1UdIwQYMBaAFAYCPbRjTVxuNWGAqC+7z4C5R4q+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTBGNy9EOEQzQjRGMjM1 QTkxMUVFOTRCNDhENTdDNEY5QUUwMi9CZ0k5dEdOTlhHNDFZWUNvTDd2UGdMbEhp cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnSTl0R05OWEc0MVlZQ29MN3ZQZ0xsSGlyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTBGNy9EOEQzQjRGMjM1QTkxMUVFOTRCNDhENTdDNEY5QUUwMi9CZ0k5dEdOTlhH NDFZWUNvTDd2UGdMbEhpcjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7LnjH4fVVxW9PwqpHLPeOqYQdfd5QO6h0JYXBIUZvy5OboGaI94qZ OUpuqOQw6gZ34Ja10gD7uO3SpmNySwc4macRzQebcZbDkSx5Dur1MQtAQkCjOCrY NYf9ib6X2jBvwEG8NQdOkvctW54VFxFi2avctihTVDVgT5hHdrz+TzNnxkc3k9Q4 ry3qEYsgt4BOem0Zx2UtBh2E9vKCLmnxWetE06a8DjGPy80PbPWEatPXqE8LHTeL s1qmEZjW6t+CJVDMqlIcdhU2NgweD0UxNIoocjDYVDR6cpXbnEGR4SqnWSFCkW2D 9MjMtzk2EPg3ubwXz77WzqZYnRjHsIwR -----END CERTIFICATE-----Generated at Wed Dec 24 17:35:01 2025 by rpki-client