This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json) Hash identifier: swMhvyqetUyRpeSgt+oR2qVnsvNfP79bd8Ou4dKltt4= Subject key identifier: 19:EF:2A:14:A2:8E:ED:5C:9E:0C:C5:03:58:EA:51:AE:44:9C:7C:A7 Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1B94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft Manifest number: 1B8C Signing time: Mon 22 Dec 2025 16:02:29 +0000 Manifest this update: Mon 22 Dec 2025 16:02:29 +0000 Manifest next update: Mon 29 Dec 2025 16:02:29 +0000 Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: Yj7nR9CQKMERsvapQM5q1AJGThcHMwkkQAZCr7s8cNM=) 2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: IqZZVcS21ii5zkxWPYMuKQR1NOi0O+Hj+XB33t8u/K8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7060 (0x1b94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: Dec 22 16:02:29 2025 GMT Not After : Dec 29 16:02:29 2025 GMT Subject: CN=69496b95-459b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ec:41:2b:ad:6f:a4:05:67:3a:f8:03:a0:a9: e1:19:0d:4e:8e:2b:6a:ba:00:21:c4:03:86:6a:9f: 7a:fd:ca:d4:05:69:9d:1a:8d:22:c1:8b:35:94:43: 1e:0a:65:f6:aa:e8:64:0a:44:eb:46:7f:88:b1:e7: 71:b2:68:dd:d7:55:96:71:a3:99:e3:97:37:5b:ae: 4e:6e:cf:43:e9:9d:1e:80:e0:ae:27:23:58:ca:ad: 9f:c0:2d:84:1b:08:74:e2:88:5b:7f:c7:23:bb:7d: 4a:ef:0e:da:db:6c:b8:aa:f3:d2:a3:9b:f3:dd:29: 25:98:b5:2c:d9:d7:4b:d8:90:4c:e4:df:58:06:8f: ff:fa:78:c2:a9:49:ea:97:be:0b:13:97:c5:e6:3e: 5f:7b:76:df:39:e6:c8:3b:51:46:37:8a:2f:9f:5c: 38:91:f3:37:6c:37:df:fe:08:50:ce:1f:26:6a:15: 21:03:66:73:b2:9d:6f:2d:04:08:8f:21:c0:05:ea: 4d:e9:03:62:4c:de:d5:ad:62:c8:fc:8f:b8:c1:e8: aa:8f:61:d8:ba:0e:f5:a0:72:a7:c9:0e:e7:80:2a: e7:05:6b:e0:66:95:b8:63:e1:e3:4f:ef:2d:b1:fa: aa:84:6e:a7:02:72:5b:f0:26:8e:08:16:78:73:83: c0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EF:2A:14:A2:8E:ED:5C:9E:0C:C5:03:58:EA:51:AE:44:9C:7C:A7 X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:59:d3:1f:2d:1c:ce:32:37:54:68:ab:af:dd:1c:b9:b0:19: c6:7d:c3:82:8f:e1:5c:73:cd:35:4e:0c:34:25:de:16:65:65: 73:78:b6:6f:8c:f5:9f:06:cd:71:61:25:2b:3a:09:a6:25:e0: 74:83:1c:49:41:69:fd:47:93:bb:39:0e:85:f9:2a:3b:c8:22: 99:e6:b0:43:1b:0a:c6:50:61:ec:a5:55:dc:f4:1b:fa:6f:6c: 25:81:74:7e:22:32:a7:55:c3:b0:b5:9b:86:7a:13:93:b2:e6: a8:6d:47:f1:e9:30:b4:84:3e:16:35:f6:15:14:66:60:c0:b8: 20:0a:24:80:b5:39:a7:6b:ce:21:71:f4:e4:3b:dd:ef:d6:ef: 63:c4:98:8c:b5:50:ff:4f:23:91:47:4b:8b:fb:ae:cb:c1:76: 69:1a:23:41:ee:a6:10:2a:11:57:4c:88:a1:2e:42:cf:6c:a7: 63:8b:39:75:7c:dc:fc:6f:62:66:7c:e9:67:fc:a1:36:e5:4c: b8:ef:ee:f4:c1:7a:59:35:37:b1:f3:29:00:55:6f:99:79:02: 74:34:37:d2:88:7b:5c:af:73:9b:7c:44:f1:41:80:a5:99:52: e0:84:7f:b6:ae:ad:26:61:41:a6:1c:19:b0:e9:41:89:56:bf: c5:fa:c2:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjUxMjIyMTYwMjI5WhcNMjUxMjI5MTYwMjI5WjAYMRYwFAYD VQQDDA02OTQ5NmI5NS00NTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwexBK61vpAVnOvgDoKnhGQ1OjitqugAhxAOGap96/crUBWmdGo0iwYs1lEMe CmX2quhkCkTrRn+Isedxsmjd11WWcaOZ45c3W65Obs9D6Z0egOCuJyNYyq2fwC2E Gwh04ohbf8cju31K7w7a22y4qvPSo5vz3SklmLUs2ddL2JBM5N9YBo//+njCqUnq l74LE5fF5j5fe3bfOebIO1FGN4ovn1w4kfM3bDff/ghQzh8mahUhA2Zzsp1vLQQI jyHABepN6QNiTN7VrWLI/I+4weiqj2HYug71oHKnyQ7ngCrnBWvgZpW4Y+HjT+8t sfqqhG6nAnJb8CaOCBZ4c4PAWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnvKhSi ju1cngzFA1jqUa5EnHynMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIxNC9CNDFBNTgzODE4RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RD M0dIMlJVRUN2ekdzYW9UOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiWdMfLRzOMjdUaKuv3Ry5sBnGfcOCj+Fcc801Tgw0Jd4WZWVzeLZv jPWfBs1xYSUrOgmmJeB0gxxJQWn9R5O7OQ6F+So7yCKZ5rBDGwrGUGHspVXc9Bv6 b2wlgXR+IjKnVcOwtZuGehOTsuaobUfx6TC0hD4WNfYVFGZgwLggCiSAtTmna84h cfTkO93v1u9jxJiMtVD/TyORR0uL+67LwXZpGiNB7qYQKhFXTIihLkLPbKdjizl1 fNz8b2JmfOln/KE25Uy47+70wXpZNTex8ykAVW+ZeQJ0NDfSiHtcr3ObfETxQYCl mVLghH+2rq0mYUGmHBmw6UGJVr/F+sJT -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:55 2025 by rpki-client