This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft File: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft (raw, json) Hash identifier: h2HR6h8J3pL5dwllnuPqe3R9J/jaypNY6QNVjWh/fXY= Subject key identifier: 24:05:02:FE:54:9D:36:23:4C:D5:03:08:7B:63:1B:30:73:4B:E9:C5 Authority key identifier: 04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1 Certificate issuer: /CN=A9160244/serialNumber=0434017186DB84CA89477570DDA10AD731597FF1 Certificate serial: 2529 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft Manifest number: 251A Signing time: Mon 22 Dec 2025 15:35:55 +0000 Manifest this update: Mon 22 Dec 2025 15:35:54 +0000 Manifest next update: Mon 29 Dec 2025 15:35:54 +0000 Files and hashes: 1: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl (hash: XcrdXv+CwEsfjInNw5e1dH45sZM7jcVYXTe3r7Q2RU4=) 2: E1FACBC0B10D11E5894F4D1CC4F9AE02.roa (hash: FvWwS3Spm+rRrjY0/JRXkfVlZov8/+1jHfihNOtR95E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9513 (0x2529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160244, serialNumber=0434017186DB84CA89477570DDA10AD731597FF1 Validity Not Before: Dec 22 15:35:54 2025 GMT Not After : Dec 29 15:35:54 2025 GMT Subject: CN=6949655b-f649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:46:fd:45:b4:34:41:df:fa:8f:b8:80:f2:32: 20:cb:09:ab:f9:eb:95:ab:7f:ad:66:5d:cd:20:d0: 79:1b:c4:c5:aa:9e:19:01:76:42:dd:b8:17:5b:c7: 33:79:55:93:fe:58:82:e0:55:62:8d:ab:3f:b6:c8: 4f:71:c6:20:a5:bf:b9:f9:ef:48:f8:74:d0:cd:88: 23:c0:ed:54:ae:93:21:26:b4:56:e7:d7:d7:af:f7: f3:bc:d2:95:6b:36:fa:f6:67:76:3c:29:84:9f:86: ee:94:87:56:73:9d:72:42:b4:9a:b5:fb:94:f7:e6: ac:a0:1b:2c:74:06:fd:b1:dd:9b:dc:1f:7d:5c:a6: 16:29:79:e6:8b:02:66:04:12:e5:27:36:98:63:a2: d3:90:a6:a6:2b:92:f2:58:71:8e:78:44:e5:0c:7a: ad:62:2b:0c:1c:58:6f:67:be:8f:00:66:a1:32:6b: 02:ec:05:dc:fd:b9:56:51:4d:ce:8c:d9:ec:7f:b9: f6:c3:ec:67:b8:a0:11:1a:66:7d:7e:1c:20:96:14: 5c:69:79:93:3e:40:83:c2:ee:69:1f:26:e5:5c:95: 57:61:2a:92:38:82:0a:74:10:2c:69:05:2a:80:79: 07:6d:fe:e7:7c:29:10:3c:ba:32:60:ae:b4:4f:99: 24:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:05:02:FE:54:9D:36:23:4C:D5:03:08:7B:63:1B:30:73:4B:E9:C5 X509v3 Authority Key Identifier: keyid:04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:78:53:26:a6:75:f7:d4:2b:72:70:ad:a5:b4:d8:68:bf:41: 8b:1f:df:f4:26:6f:96:3c:d3:84:cf:f2:4a:32:10:6c:90:29: 83:e4:3f:60:29:a3:60:0e:c3:7b:c9:cc:5c:31:b1:fc:9a:70: 88:bb:3a:94:e0:d9:57:23:1a:4c:f8:c6:b3:ad:3e:5b:80:7d: b2:d7:f3:05:44:15:43:b4:17:e0:ce:e4:44:e8:93:d6:07:ea: 9d:41:eb:62:98:60:92:47:87:d4:e9:e2:23:6e:76:59:43:c9: 25:aa:7d:94:5f:d0:0d:ce:65:d2:89:c3:de:8a:f3:1f:d1:3e: 54:6a:09:b0:ef:4d:5a:ed:4d:39:c7:ae:21:16:42:b6:6d:bd: 68:7c:a0:69:37:a9:d7:07:d3:99:9f:99:bb:97:ab:26:4d:c1: 87:f6:c1:e8:b4:25:a3:d1:1a:f3:c0:2e:c1:61:a5:7f:7c:42: 01:c6:33:86:4d:12:0e:31:97:53:f7:72:63:92:73:28:c3:ec: 63:f7:cd:0a:38:33:85:4d:bd:fc:6f:74:3c:e2:c4:4a:de:7d: a6:7e:ee:e9:cd:4c:36:d2:11:54:e1:30:a5:a5:dc:d9:4e:e9: 22:88:e9:99:42:c2:be:c0:aa:82:4c:f9:cd:95:cd:dc:0d:41: 53:e7:48:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyNDQxMTAvBgNVBAUTKDA0MzQwMTcxODZEQjg0Q0E4OTQ3NzU3MEREQTEwQUQ3 MzE1OTdGRjEwHhcNMjUxMjIyMTUzNTU0WhcNMjUxMjI5MTUzNTU0WjAYMRYwFAYD VQQDDA02OTQ5NjU1Yi1mNjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkb9RbQ0Qd/6j7iA8jIgywmr+euVq3+tZl3NINB5G8TFqp4ZAXZC3bgXW8cz eVWT/liC4FVijas/tshPccYgpb+5+e9I+HTQzYgjwO1UrpMhJrRW59fXr/fzvNKV azb69md2PCmEn4bulIdWc51yQrSatfuU9+asoBssdAb9sd2b3B99XKYWKXnmiwJm BBLlJzaYY6LTkKamK5LyWHGOeETlDHqtYisMHFhvZ76PAGahMmsC7AXc/blWUU3O jNnsf7n2w+xnuKARGmZ9fhwglhRcaXmTPkCDwu5pHyblXJVXYSqSOIIKdBAsaQUq gHkHbf7nfCkQPLoyYK60T5kknwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQFAv5U nTYjTNUDCHtjGzBzS+nFMB8GA1UdIwQYMBaAFAQ0AXGG24TKiUd1cN2hCtcxWX/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDI0NC83RUFGRUNCMDND MDcxMUU1QjE2Q0VGNjNDNEY5QUUwMi9CRFFCY1liYmhNcUpSM1Z3M2FFSzF6Rlpm X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JEUUJjWWJiaE1xSlIzVnczYUVLMXpGWmZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDI0NC83RUFGRUNCMDNDMDcxMUU1QjE2Q0VGNjNDNEY5QUUwMi9CRFFCY1liYmhN cUpSM1Z3M2FFSzF6RlpmX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJeFMmpnX31CtycK2ltNhov0GLH9/0Jm+WPNOEz/JKMhBskCmD5D9g KaNgDsN7ycxcMbH8mnCIuzqU4NlXIxpM+MazrT5bgH2y1/MFRBVDtBfgzuRE6JPW B+qdQetimGCSR4fU6eIjbnZZQ8klqn2UX9ANzmXSicPeivMf0T5Uagmw701a7U05 x64hFkK2bb1ofKBpN6nXB9OZn5m7l6smTcGH9sHotCWj0RrzwC7BYaV/fEIBxjOG TRIOMZdT93JjknMow+xj980KODOFTb38b3Q84sRK3n2mfu7pzUw20hFU4TClpdzZ TukiiOmZQsK+wKqCTPnNlc3cDUFT50is -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:39 2025 by rpki-client