This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft File: 1BO-Gf_T9trcEjTNxhmyQy6oA08.mft (raw, json) Hash identifier: qDn5nW8lba2ay9IMFrsIR6ONEHHLxEIkY2diOef0ccA= Subject key identifier: A9:4B:4E:D4:BA:F1:03:22:3F:86:A1:57:A6:63:0D:35:D3:F1:4F:FC Authority key identifier: D4:13:BE:19:FF:D3:F6:DA:DC:12:34:CD:C6:19:B2:43:2E:A8:03:4F Certificate issuer: /CN=A91913D7/serialNumber=D413BE19FFD3F6DADC1234CDC619B2432EA8034F Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft Manifest number: 0D Signing time: Tue 23 Dec 2025 06:52:04 +0000 Manifest this update: Tue 23 Dec 2025 06:52:03 +0000 Manifest next update: Tue 30 Dec 2025 06:52:03 +0000 Files and hashes: 1: 1BO-Gf_T9trcEjTNxhmyQy6oA08.crl (hash: VcRFgwzACojOj0Wbnq0Qc/u+h4NVh3oDFMQBsG5Lpqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.crl rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91913D7, serialNumber=D413BE19FFD3F6DADC1234CDC619B2432EA8034F Validity Not Before: Dec 23 06:52:03 2025 GMT Not After : Dec 30 06:52:03 2025 GMT Subject: CN=694a3c13-0438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:d0:86:b4:24:b2:48:8f:c8:ee:d6:35:b9: c1:b7:0f:2e:bf:4e:2e:50:29:f0:2b:64:19:f1:d9: 3a:e8:8b:a4:76:f2:ef:d2:f2:43:28:29:86:6d:a7: df:99:0e:4f:1c:5a:75:53:44:d0:d5:ab:e0:52:36: 0a:c0:8f:42:30:1c:29:a7:19:7a:71:f1:7a:b5:60: e7:b6:23:ae:10:fc:6f:b7:c6:de:b9:b5:38:76:25: 6c:4a:6e:4c:4e:3c:0a:d0:72:9b:07:82:9d:01:3c: 69:a9:07:2c:f1:ba:fa:e5:e4:1d:95:0a:45:19:18: dc:1b:10:af:7f:5c:68:6f:2b:9d:b5:13:3b:61:54: 2b:68:46:0b:bb:36:0a:5d:c2:11:ce:4b:be:b5:e6: 91:63:80:fe:71:42:61:30:62:95:99:94:ee:be:00: 48:2e:a6:2e:6b:f1:98:99:b8:fa:f6:1b:4e:09:6b: 2e:05:36:e3:26:41:a0:20:f4:3c:59:1e:cf:e0:b6: f2:a9:15:70:b2:f8:3a:56:e7:21:a9:b2:1c:3d:64: ff:a5:5e:92:55:77:20:47:61:1a:ee:1a:d1:ec:a3: 0b:24:4c:f4:55:b0:4e:17:75:d1:a9:b9:d9:20:ef: 55:62:df:48:59:f6:c1:94:f4:6f:96:18:80:ac:73: 10:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4B:4E:D4:BA:F1:03:22:3F:86:A1:57:A6:63:0D:35:D3:F1:4F:FC X509v3 Authority Key Identifier: keyid:D4:13:BE:19:FF:D3:F6:DA:DC:12:34:CD:C6:19:B2:43:2E:A8:03:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:96:a3:69:e0:42:e6:3a:78:f7:44:ed:6b:31:c9:1b:71:eb: 84:33:56:08:a0:93:b7:ab:a9:ef:c6:13:fd:05:aa:fd:a8:d8: 37:12:6d:b1:45:4c:bd:c3:4d:e9:7b:5b:40:23:32:a5:c5:9b: ec:02:5f:5b:ee:75:12:f5:c2:45:61:1b:1c:67:aa:ab:d4:6f: 5b:31:3c:c1:44:15:72:9c:fd:2e:f9:bb:68:82:ab:87:50:db: 2c:44:97:bd:92:0a:c7:d7:a4:9a:60:9c:e1:bb:3d:72:4a:f6: c5:0f:7a:6c:80:94:a7:05:f2:67:0f:aa:6b:40:1d:41:65:04: 10:fd:71:74:12:69:ae:b6:64:5d:f4:bd:40:7c:bb:95:d7:ae: 97:c2:ef:93:3c:e6:17:f5:d6:ce:66:23:8b:8b:88:31:cb:55: d3:39:01:31:44:a6:4d:8f:85:10:75:dc:c5:1a:0c:54:c5:d2: d7:6d:e9:45:5e:c9:a3:a1:40:73:69:ca:a3:25:dc:a7:16:da: 67:c0:9b:34:b6:26:32:af:48:12:d8:b7:e3:52:ec:40:7a:93: a7:d6:d2:45:af:7f:6d:0d:5d:33:51:ae:e2:29:a7:b8:23:46: 3b:ae:2b:0e:0f:3d:67:85:05:f0:f1:3a:d8:ef:07:bd:86:71: ef:66:7e:b5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTNENzExMC8GA1UEBRMoRDQxM0JFMTlGRkQzRjZEQURDMTIzNENEQzYxOUIyNDMy RUE4MDM0RjAeFw0yNTEyMjMwNjUyMDNaFw0yNTEyMzAwNjUyMDNaMBgxFjAUBgNV BAMMDTY5NGEzYzEzLTA0MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5xNCGtCSySI/I7tY1ucG3Dy6/Ti5QKfArZBnx2Troi6R28u/S8kMoKYZtp9+Z Dk8cWnVTRNDVq+BSNgrAj0IwHCmnGXpx8Xq1YOe2I64Q/G+3xt65tTh2JWxKbkxO PArQcpsHgp0BPGmpByzxuvrl5B2VCkUZGNwbEK9/XGhvK521EzthVCtoRgu7Ngpd whHOS7615pFjgP5xQmEwYpWZlO6+AEgupi5r8ZiZuPr2G04Jay4FNuMmQaAg9DxZ Hs/gtvKpFXCy+DpW5yGpshw9ZP+lXpJVdyBHYRruGtHsowskTPRVsE4XddGpudkg 71Vi30hZ9sGU9G+WGICscxAfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqUtO1Lrx AyI/hqFXpmMNNdPxT/wwHwYDVR0jBBgwFoAU1BO+Gf/T9trcEjTNxhmyQy6oA08w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxM0Q3Lzc5MTMyNEI4Q0U4 QTExRjBBQjRCRDc2OUM0RjlBRTAyLzFCTy1HZl9UOXRyY0VqVE54aG15UXk2b0Ew OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUJPLUdmX1Q5dHJjRWpUTnhobXlReTZvQTA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx M0Q3Lzc5MTMyNEI4Q0U4QTExRjBBQjRCRDc2OUM0RjlBRTAyLzFCTy1HZl9UOXRy Y0VqVE54aG15UXk2b0EwOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAASWo2ngQuY6ePdE7WsxyRtx64QzVgigk7erqe/GE/0Fqv2o2DcSbbFF TL3DTel7W0AjMqXFm+wCX1vudRL1wkVhGxxnqqvUb1sxPMFEFXKc/S75u2iCq4dQ 2yxEl72SCsfXpJpgnOG7PXJK9sUPemyAlKcF8mcPqmtAHUFlBBD9cXQSaa62ZF30 vUB8u5XXrpfC75M85hf11s5mI4uLiDHLVdM5ATFEpk2PhRB13MUaDFTF0tdt6UVe yaOhQHNpyqMl3KcW2mfAmzS2JjKvSBLYt+NS7EB6k6fW0kWvf20NXTNRruIpp7gj RjuuKw4PPWeFBfDxOtjvB72Gce9mfrU= -----END CERTIFICATE-----Generated at Wed Dec 24 14:03:26 2025 by rpki-client