This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
File: bvj-zvM56m3paYzCxfWGRc9l794.mft (raw, json)
Hash identifier: ChZZSd+lw6Sj/V5Ny03FlNu3+ijj2USA76/OBL9YJ48=
Subject key identifier: 81:32:97:7F:13:F0:14:36:7C:56:A9:A1:E5:5E:39:3C:66:B3:B1:BA
Authority key identifier: 6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
Certificate issuer: /CN=A9196F7C/serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
Manifest number: 22
Signing time: Wed 03 Dec 2025 03:00:27 +0000
Manifest this update: Wed 03 Dec 2025 03:00:26 +0000
Manifest next update: Wed 10 Dec 2025 03:00:26 +0000
Files and hashes: 1: bvj-zvM56m3paYzCxfWGRc9l794.crl (hash: pdGYsNaj7JFMxj4GuES5krEljz5rQ6bu7cZ1O/txhJM=)
2: E047F204A4CC11F0AE32440DC4F9AE02.roa (hash: IbTCPbnBI2DL2kcBkW+LiJNqF8edylNBGRuBoI+lCNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl
rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196F7C, serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
Validity
Not Before: Dec 3 03:00:26 2025 GMT
Not After : Dec 10 03:00:26 2025 GMT
Subject: CN=692fa7cb-860d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:e4:c9:2b:7a:49:de:bb:bd:38:f9:31:d6:
f4:f5:31:25:45:0c:36:ad:54:90:90:ce:c8:74:bf:
8b:e2:1d:bb:17:2e:2d:e1:4d:be:12:37:65:b1:a1:
f7:63:8f:8d:2a:7d:62:71:fd:fe:70:d5:f4:86:ce:
f1:05:39:c8:c2:ff:b5:1d:1d:e4:93:b0:81:f4:c1:
43:be:2c:7d:08:ed:99:67:99:96:a8:00:75:ae:95:
e1:2f:2b:4b:35:00:97:73:e0:1c:01:05:20:b2:ed:
b3:97:14:6b:84:04:05:a5:2d:cc:97:16:3c:9e:b8:
1f:92:bd:bd:c0:e3:fe:d3:fa:6b:94:11:e0:36:e4:
a7:c2:0b:1f:32:ad:fc:22:73:e0:6a:03:f7:ba:3e:
50:ef:59:fd:f1:68:1d:ca:b2:0c:d3:df:7f:57:a5:
c0:15:8e:e2:37:66:4e:00:69:4b:16:5c:9a:38:39:
3b:d3:e3:ee:43:a3:53:e2:3f:c8:fc:b0:4d:59:13:
4c:4b:c9:0c:01:6f:1a:82:10:61:f1:e3:3e:e6:b1:
be:32:27:02:d6:84:51:61:05:5c:41:23:ed:6f:ea:
af:3b:bf:bf:ce:d5:19:ea:78:34:a5:90:5f:09:bc:
1a:b5:46:a4:32:03:e5:a2:bb:ce:4d:97:45:75:e6:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:32:97:7F:13:F0:14:36:7C:56:A9:A1:E5:5E:39:3C:66:B3:B1:BA
X509v3 Authority Key Identifier:
keyid:6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b5:71:b2:c2:3e:c3:3f:d7:40:89:6f:ca:f0:cb:e2:2d:2b:
a0:ed:d2:b0:92:03:c1:16:c7:f8:2f:0b:69:72:63:7d:b9:61:
b3:81:16:0d:8d:90:af:82:59:67:53:c7:d3:2d:e1:d9:79:b8:
a1:82:8a:cd:4c:e5:6d:03:d0:ce:3c:2d:a5:16:a1:c0:f3:5a:
69:71:0f:6f:2e:b8:7b:06:f3:1e:76:ab:76:b9:a2:a1:a3:62:
8d:a9:be:4b:58:53:be:95:6b:dd:c9:9b:4b:05:79:bb:6b:9c:
ad:0c:9e:89:2e:67:d0:ac:cc:85:8b:ed:da:32:65:f6:5a:92:
fd:52:0b:f8:8f:b1:15:56:54:59:b4:39:2f:8a:03:29:ae:4f:
7b:4a:89:1c:ea:77:53:4e:1c:d4:12:89:d8:87:59:90:81:4c:
d7:8d:04:d5:36:92:36:44:0d:3a:a9:c4:1e:1f:ef:a2:d8:05:
a5:41:b8:6a:03:32:14:4e:64:76:54:b0:df:63:33:83:88:60:
5d:51:c5:da:1d:61:55:fa:c5:e9:86:c7:d7:9e:59:7b:cb:43:
4e:b4:af:57:2c:73:be:bf:6c:b0:57:9f:51:2a:d5:9a:f1:49:
8c:51:c3:77:eb:4b:15:62:1a:83:5e:0f:26:3d:82:f9:f3:2f:
f9:20:90:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:19 2025 by rpki-client