This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft File: bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft (raw, json) Hash identifier: kKgkkPu8DinecmyRUgb6ntjYCJio0gBtZur/0mgcz6A= Subject key identifier: 1A:A9:68:7D:A2:1F:D3:22:70:76:A2:0B:17:0C:93:BC:A2:73:39:DB Authority key identifier: 6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86 Certificate issuer: /CN=A916103C/serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft Manifest number: 28 Signing time: Sun 07 Dec 2025 05:41:46 +0000 Manifest this update: Sun 07 Dec 2025 05:41:46 +0000 Manifest next update: Sun 14 Dec 2025 05:41:46 +0000 Files and hashes: 1: bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl (hash: ADEpTKhSxciG6G3AeDNKkLyR0gTidy77BCzLc1tE3mY=) 2: 6F8F75C49A0811F0AB023487C4F9AE02.roa (hash: lUWsYl532wJJWUk+oUDmB7VdeqxtkYdMM4ni2vAOoF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916103C, serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686 Validity Not Before: Dec 7 05:41:46 2025 GMT Not After : Dec 14 05:41:46 2025 GMT Subject: CN=6935139a-6e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ab:71:b3:1c:05:db:e6:22:12:f3:53:3f:27: d6:73:b2:ea:42:f8:6d:b8:58:1c:32:fe:67:07:35: 7f:a3:40:dc:8d:f9:cf:ae:26:e8:6d:ff:df:e9:8f: 5f:0e:89:f7:6a:89:94:6a:30:14:8d:7b:2d:99:1e: fb:6e:b8:1a:a6:2f:59:e2:89:fb:b5:a9:b7:7d:4f: 81:1d:9e:0b:59:66:74:bb:3b:45:c1:5a:3d:de:c2: 5f:9d:d4:30:aa:71:84:67:cb:dc:b8:13:b6:1b:0c: 46:09:e1:bd:4b:00:21:68:5c:1d:ad:41:bd:32:f2: 47:5f:b8:e3:a0:7f:e4:13:28:e6:79:9d:8a:ce:e3: 6c:e4:84:af:80:22:fd:d8:79:c3:38:8c:25:d3:2a: b6:c7:62:91:08:ed:59:b4:72:f4:ae:e3:be:ec:e2: 3a:f4:b2:01:5b:2e:a8:ef:73:da:b9:20:d9:6c:7c: d1:01:85:57:f6:30:b4:5f:5e:b8:83:44:d6:8f:c6: f6:fa:95:f7:30:be:6d:1c:ac:30:2a:5a:a4:99:15: bf:91:7d:6c:3a:fa:ee:39:9e:68:ea:85:af:e9:0d: 9f:8c:6b:f9:94:83:51:d5:76:a9:a6:5a:b6:35:29: ae:4b:9f:47:e9:43:45:10:cb:14:3b:91:f1:41:0f: 4b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A9:68:7D:A2:1F:D3:22:70:76:A2:0B:17:0C:93:BC:A2:73:39:DB X509v3 Authority Key Identifier: keyid:6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:f2:c2:44:21:5b:de:67:f9:ef:7c:64:ea:31:39:de:e0:26: 8a:79:0b:cf:1a:8b:93:60:ed:66:f7:1e:a9:c9:d3:30:35:d9: ef:97:ca:2e:0a:35:a8:86:5a:b6:a1:4a:18:a0:34:75:d6:28: f1:09:f9:d0:f0:41:03:c0:e0:20:71:62:38:b5:1e:5a:a7:fc: 15:28:bc:91:5f:0a:a9:46:e1:cd:f9:fd:a4:72:e2:7b:42:d7: e0:29:ed:32:32:7a:7f:9e:10:38:24:7c:0a:35:61:54:44:6d: fc:7d:b8:61:34:ea:cb:a5:d5:8e:8d:9e:62:78:f8:1b:a3:c8: 6a:c5:6a:37:ab:c8:a9:24:18:65:ac:73:a2:40:56:4c:67:88: 8e:c5:9f:5b:07:72:5d:87:3c:85:2c:61:4d:0d:5d:c7:e3:a4: 52:19:1a:9c:69:24:c5:33:23:59:44:7d:d6:90:3d:4a:e1:a0: d6:70:28:ba:f5:30:d6:0f:01:cd:e9:ad:cb:93:c5:c7:ce:8c: dc:7f:14:83:b1:eb:23:3f:61:3e:0b:b3:65:08:e1:c9:c0:4b: 33:e2:d4:3c:fa:af:c0:1b:46:1f:a1:55:54:2a:75:47:d4:60: 59:0a:cf:02:e8:00:55:84:9a:49:bd:bf:a4:c8:b8:a2:72:b5: f0:13:ab:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTAzQzExMC8GA1UEBRMoNkU5QTk4RDlCRDY2Mzg3RjQ4M0QwNkI2ODMzREEyREM0 QTdGMzY4NjAeFw0yNTEyMDcwNTQxNDZaFw0yNTEyMTQwNTQxNDZaMBgxFjAUBgNV BAMTDTY5MzUxMzlhLTZlOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtq3GzHAXb5iIS81M/J9ZzsupC+G24WBwy/mcHNX+jQNyN+c+uJuht/9/pj18O ifdqiZRqMBSNey2ZHvtuuBqmL1niifu1qbd9T4EdngtZZnS7O0XBWj3ewl+d1DCq cYRny9y4E7YbDEYJ4b1LACFoXB2tQb0y8kdfuOOgf+QTKOZ5nYrO42zkhK+AIv3Y ecM4jCXTKrbHYpEI7Vm0cvSu477s4jr0sgFbLqjvc9q5INlsfNEBhVf2MLRfXriD RNaPxvb6lfcwvm0crDAqWqSZFb+RfWw6+u45nmjqha/pDZ+Ma/mUg1HVdqmmWrY1 Ka5Ln0fpQ0UQyxQ7kfFBD0sXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGqlofaIf 0yJwdqILFwyTvKJzOdswHwYDVR0jBBgwFoAUbpqY2b1mOH9IPQa2gz2i3Ep/NoYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxMDNDL0ZBNDI4RjU0OUEw NzExRjA4MTAxN0U4NkM0RjlBRTAyL2JwcVkyYjFtT0g5SVBRYTJnejJpM0VwX05v WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYnBxWTJiMW1PSDlJUFFhMmd6MmkzRXBfTm9ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx MDNDL0ZBNDI4RjU0OUEwNzExRjA4MTAxN0U4NkM0RjlBRTAyL2JwcVkyYjFtT0g5 SVBRYTJnejJpM0VwX05vWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABLywkQhW95n+e98ZOoxOd7gJop5C88ai5Ng7Wb3HqnJ0zA12e+Xyi4K NaiGWrahShigNHXWKPEJ+dDwQQPA4CBxYji1Hlqn/BUovJFfCqlG4c35/aRy4ntC 1+Ap7TIyen+eEDgkfAo1YVREbfx9uGE06sul1Y6NnmJ4+BujyGrFajeryKkkGGWs c6JAVkxniI7Fn1sHcl2HPIUsYU0NXcfjpFIZGpxpJMUzI1lEfdaQPUrhoNZwKLr1 MNYPAc3prcuTxcfOjNx/FIOx6yM/YT4Ls2UI4cnASzPi1Dz6r8AbRh+hVVQqdUfU YFkKzwLoAFWEmkm9v6TIuKJytfATq3k= -----END CERTIFICATE-----Generated at Mon Dec 8 06:20:29 2025 by rpki-client