This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft File: BhgYSeLF-TE-pgozl9xhRyrBGw0.mft (raw, json) Hash identifier: D1GLX2du9O6ZGdPA+WeTjyKgA3BjzXHg1CCWJsq+k64= Subject key identifier: 56:48:68:1C:A1:51:9D:01:E4:10:A3:07:5F:3B:F5:EE:3E:C8:3A:68 Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D Certificate issuer: /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D Certificate serial: 06D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft Manifest number: 06C7 Signing time: Mon 22 Dec 2025 21:27:05 +0000 Manifest this update: Mon 22 Dec 2025 21:27:04 +0000 Manifest next update: Mon 29 Dec 2025 21:27:04 +0000 Files and hashes: 1: BhgYSeLF-TE-pgozl9xhRyrBGw0.crl (hash: ztkp8kOSo40ezYIEziW37oBSq4gk/VXfjfEOcmrkyDc=) 2: 4F1694B4C87B11ED981CC523C4F9AE02.roa (hash: FWRlVE7qxAGVhNJeQGVLW3KvlIyEGk0A9fnepbZFOKE=) 3: E4205416B2F111EFBB14DE0FC4F9AE02.roa (hash: u41x8Ny1raTvp1vwnGwm7MW/cINQCDMdw5LO04vaVeU=) 4: C18726F486D711EBA06B0E64C4F9AE02.roa (hash: 46EUYT6r3IQXKkQnGUbOAbbi8lZTq+8CIfeQWVvyW6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1753 (0x6d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D Validity Not Before: Dec 22 21:27:04 2025 GMT Not After : Dec 29 21:27:04 2025 GMT Subject: CN=6949b7a9-5ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:90:ce:6d:9e:9a:51:c7:a9:b4:a8:85:b5:dc: 9f:c4:39:37:50:0a:7e:28:d2:e1:ed:02:3a:37:65: 9c:97:bc:c1:39:17:24:26:f5:29:f4:5a:e7:39:0f: f1:11:51:8f:a3:9f:4b:5b:67:05:b7:ef:15:b3:6e: b0:19:dc:71:0a:23:db:99:0c:98:f0:35:a9:75:f8: bb:1d:af:2a:fa:3d:69:a5:19:2f:c5:4e:80:e3:49: e8:20:08:88:cd:64:fe:f5:f2:f9:c7:04:42:02:9d: 26:0e:bb:7d:a5:5b:83:f4:ec:17:fb:af:1b:20:18: 58:bd:92:ca:7b:e8:a4:c8:9d:55:38:6a:e2:2f:e5: 01:30:49:7e:72:e4:b7:d5:2f:b9:80:34:4f:b1:03: 35:d1:81:54:ef:57:a9:2e:0b:f3:90:73:cd:c1:b0: 18:4f:4f:33:f3:c2:9a:7e:c4:97:bc:d0:b9:f7:b0: 29:e7:9e:e7:82:ab:04:81:db:e1:c2:8e:39:94:7e: 2e:a4:14:7b:0f:2e:05:83:d9:04:e1:a1:51:ec:ae: 5f:11:58:0a:50:59:41:3c:66:af:2d:d0:b6:4c:02: 6f:f4:24:1f:5a:17:0d:81:3c:34:ce:e9:89:d6:70: ba:b7:17:48:e0:a3:61:44:ae:2d:c9:9f:c1:61:f0: b8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:48:68:1C:A1:51:9D:01:E4:10:A3:07:5F:3B:F5:EE:3E:C8:3A:68 X509v3 Authority Key Identifier: keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:97:b8:02:7a:18:1d:2b:79:d3:cd:25:b2:f5:57:77:a5:51: 56:00:b8:4e:05:91:79:e8:ff:a5:58:b6:6c:2d:79:e8:6e:b4: cf:f7:74:a0:f8:26:08:5a:7e:30:70:6b:99:2f:4b:5a:c2:df: d5:0a:e4:7a:12:5e:7a:f5:90:d9:a6:4b:e9:50:e7:76:a8:18: 4d:04:fb:4b:a7:02:0f:13:b1:4e:ba:66:5d:99:7d:4b:18:42: 82:2b:34:e4:67:c7:eb:99:f5:2e:26:14:87:3f:fe:7c:30:d6: c3:b7:08:ba:83:c9:c0:85:94:4d:94:b4:38:40:65:44:67:89: c7:ac:90:f4:54:1d:ae:98:3f:5e:f5:b3:79:24:a2:1f:7e:c7: 83:7d:56:4a:2a:3c:b0:1c:85:6e:87:ad:d5:7c:21:df:bb:4d: 38:a1:de:49:53:8f:4c:95:a4:6b:6a:2d:e1:08:15:f0:fb:1b: 0a:0b:8b:2b:72:8b:1f:36:9d:fc:b0:51:57:9a:c9:94:c5:c4: 54:9c:eb:f1:32:48:af:6e:da:ba:f3:48:4d:6a:81:d7:39:a5: c9:b3:60:97:fa:19:6c:f9:4a:70:fc:76:e4:cb:d8:f8:6a:4a: 6d:c4:57:94:6b:e0:db:c0:55:2c:e3:a8:8b:68:ca:34:49:6c: 20:be:21:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCQkMxMTAvBgNVBAUTKDA2MTgxODQ5RTJDNUY5MzEzRUE2MEEzMzk3REM2MTQ3 MkFDMTFCMEQwHhcNMjUxMjIyMjEyNzA0WhcNMjUxMjI5MjEyNzA0WjAYMRYwFAYD VQQDDA02OTQ5YjdhOS01ZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjpDObZ6aUceptKiFtdyfxDk3UAp+KNLh7QI6N2Wcl7zBORckJvUp9FrnOQ/x EVGPo59LW2cFt+8Vs26wGdxxCiPbmQyY8DWpdfi7Ha8q+j1ppRkvxU6A40noIAiI zWT+9fL5xwRCAp0mDrt9pVuD9OwX+68bIBhYvZLKe+ikyJ1VOGriL+UBMEl+cuS3 1S+5gDRPsQM10YFU71epLgvzkHPNwbAYT08z88KafsSXvNC597Ap557ngqsEgdvh wo45lH4upBR7Dy4Fg9kE4aFR7K5fEVgKUFlBPGavLdC2TAJv9CQfWhcNgTw0zumJ 1nC6txdI4KNhRK4tyZ/BYfC4iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZIaByh UZ0B5BCjB1879e4+yDpoMB8GA1UdIwQYMBaAFAYYGEnixfkxPqYKM5fcYUcqwRsN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0JCQy8xNDBDMTc1Njg2 RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VMRi1URS1wZ296bDl4aFJ5ckJH dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JoZ1lTZUxGLVRFLXBnb3psOXhoUnlyQkd3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0JCQy8xNDBDMTc1Njg2RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VMRi1U RS1wZ296bDl4aFJ5ckJHdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCql7gCehgdK3nTzSWy9Vd3pVFWALhOBZF56P+lWLZsLXnobrTP93Sg +CYIWn4wcGuZL0tawt/VCuR6El569ZDZpkvpUOd2qBhNBPtLpwIPE7FOumZdmX1L GEKCKzTkZ8frmfUuJhSHP/58MNbDtwi6g8nAhZRNlLQ4QGVEZ4nHrJD0VB2umD9e 9bN5JKIffseDfVZKKjywHIVuh63VfCHfu004od5JU49MlaRrai3hCBXw+xsKC4sr cosfNp38sFFXmsmUxcRUnOvxMkivbtq680hNaoHXOaXJs2CX+hls+Upw/Hbky9j4 akptxFeUa+DbwFUs46iLaMo0SWwgviGn -----END CERTIFICATE-----Generated at Tue Dec 23 06:46:26 2025 by rpki-client