This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
File: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft (raw, json)
Hash identifier: kRTEJ8ih1QTCUV1mKlJj1CcrP7VIWEXMfx/sCB9fnI4=
Subject key identifier: 1B:18:E8:90:03:6D:44:1A:30:72:3C:85:7A:C6:58:6A:8B:C0:87:33
Authority key identifier: 6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
Certificate issuer: /CN=A9196172/serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Certificate serial: 119D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
Manifest number: 118D
Signing time: Mon 22 Dec 2025 16:54:36 +0000
Manifest this update: Mon 22 Dec 2025 16:54:36 +0000
Manifest next update: Mon 29 Dec 2025 16:54:36 +0000
Files and hashes: 1: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl (hash: NLJtmf2OVprOEMKmsxs7uKBQfFPru1Vnu7aXztQZMwE=)
2: 2D9B5B380F1D11E991F4271EC4F9AE02.roa (hash: 28+4DGnpX6Ji2cYmKm+1uSknOVpH5kmdClZ3WCtYgVk=)
3: 2CE73CF20F1D11E991F4271EC4F9AE02.roa (hash: oY1WXZVko8XjgFNGHLeULp2ndsYGuRPLSE4EMHTqlSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl
rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4509 (0x119d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196172, serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Validity
Not Before: Dec 22 16:54:36 2025 GMT
Not After : Dec 29 16:54:36 2025 GMT
Subject: CN=694977cc-a81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:41:32:a6:50:ba:03:6c:ac:b3:05:fa:9c:
2f:3a:82:4c:10:29:ef:93:c1:91:70:5d:db:50:b3:
0b:55:a9:ad:21:ed:ff:05:fe:9e:c2:70:e0:b9:4b:
af:af:23:60:cc:19:5d:1a:15:57:de:1f:e0:67:60:
d1:47:ec:6e:d6:42:00:47:12:9c:6a:8c:d8:e8:a1:
35:52:36:c5:30:63:96:2b:e0:2b:f5:f6:89:95:73:
65:db:9c:0d:13:99:37:93:53:4f:58:e3:db:e6:65:
ec:6e:e4:0a:d6:dd:40:d9:ef:e0:96:d2:a7:0e:9c:
29:9a:47:db:f0:50:2a:35:b4:2e:4e:2c:66:8a:03:
ad:3c:48:fa:2d:bc:29:a5:98:ff:e0:a3:93:25:80:
83:f4:dd:d2:41:35:66:db:ca:70:ba:95:24:e7:96:
5f:d1:72:09:2d:80:0f:53:00:6a:bc:60:ae:d2:75:
b3:97:c4:50:ac:ce:d7:61:e6:e2:93:30:37:b1:27:
ab:73:1c:db:9f:01:48:8c:ce:a6:c8:19:82:3f:71:
55:9c:a1:dc:0e:6f:9e:80:af:39:11:59:de:6a:cd:
92:38:e7:80:ac:66:29:e5:5f:d8:14:6f:5b:c4:d0:
72:75:38:c6:e5:1b:c2:c8:3b:00:51:a2:97:cb:8f:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:18:E8:90:03:6D:44:1A:30:72:3C:85:7A:C6:58:6A:8B:C0:87:33
X509v3 Authority Key Identifier:
keyid:6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:76:6f:e5:b8:6e:5e:7e:d1:a9:7f:15:f1:c5:f6:a7:da:cc:
6c:f7:35:0a:8e:46:17:fa:f5:ba:a4:aa:c8:0a:71:65:c1:e0:
3c:b1:b1:ed:77:6a:45:cb:b8:b5:41:54:8d:1b:e4:85:58:e8:
28:c4:74:50:a9:5e:12:35:73:d0:5b:13:1e:28:d7:60:e9:4b:
b7:c5:aa:93:0e:32:5b:14:85:0e:1c:fb:38:f2:c3:b5:b1:6a:
4e:c7:49:4d:21:0c:73:db:6a:5e:05:ae:d2:6c:71:81:19:14:
10:dd:99:22:43:5b:69:37:ab:0c:7c:27:4d:ec:5a:e5:55:dc:
cd:7f:27:97:ff:23:64:d3:99:c4:56:94:f7:3c:44:98:1b:16:
44:9c:63:4b:a0:ad:aa:38:76:67:17:b3:80:f0:12:02:75:c4:
ff:31:74:89:55:3f:4f:c1:b9:87:3c:1d:a9:68:20:5f:e8:c8:
df:60:65:04:6c:dc:d4:73:50:1b:c9:64:54:d1:93:d5:d9:89:
38:6c:7e:91:03:f0:22:42:f5:1a:de:c5:a3:3a:26:28:87:b9:
1d:b5:8e:d3:d4:7b:ad:d4:07:df:2c:2d:2c:6c:ff:23:36:e2:
79:05:cc:42:66:e0:89:92:a2:ab:d2:19:5e:e6:4c:c4:f2:a7:
99:9a:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:40:14 2025 by rpki-client