This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft File: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json) Hash identifier: DNX4zpD/LGkWB7cmKhIY5qYtwZR9RcX+4s3tSuKSWxQ= Subject key identifier: BD:35:ED:27:5D:FC:5B:A0:5A:F4:C6:40:26:50:71:2E:0F:6D:42:55 Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D Certificate issuer: /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft Manifest number: 017F Signing time: Tue 23 Dec 2025 02:46:46 +0000 Manifest this update: Tue 23 Dec 2025 02:46:45 +0000 Manifest next update: Tue 30 Dec 2025 02:46:45 +0000 Files and hashes: 1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: +mW2YD/52AQh/Yh7ZuChHSuOUKxoSkMhN5RL4zPeu9M=) 2: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: vJ2YKh1qvo6z7EsNb01ZnfIC7WfZlHkFbVKbRaXaFP0=) 3: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: /ZzSx5BufcsBFJm8hzU4SO+vyDuIxcR/d9CCuElSRT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Validity Not Before: Dec 23 02:46:45 2025 GMT Not After : Dec 30 02:46:45 2025 GMT Subject: CN=694a0296-0c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:cd:52:09:00:f9:2e:50:e1:9c:f4:6f:20: 4b:4d:e2:59:5f:00:a4:54:88:a1:ab:d3:f4:07:1d: 89:bc:60:db:f2:08:79:cd:6f:84:a3:e4:16:03:36: ee:d9:41:ba:c4:c8:6f:7a:83:a4:01:51:3d:09:43: f8:6f:96:9f:d3:81:44:05:b1:32:5a:73:7b:e3:48: 35:70:45:4a:b0:49:e7:03:51:49:99:6c:f6:e9:09: 04:66:29:70:d2:7d:9c:b3:a7:9c:4a:7f:6f:cb:24: b7:df:0e:4f:f0:7b:99:4b:50:ff:4d:8e:e5:6d:fb: 2c:5f:56:2e:b6:62:98:04:a0:de:e1:d1:18:b4:1d: ff:9f:77:da:4a:ba:2d:ab:82:0a:89:bd:41:b1:de: d1:6c:9d:d4:39:89:4c:76:27:b0:5e:7f:9d:3c:eb: 0e:11:fa:ec:4a:40:33:8b:29:1f:19:b2:7c:8e:63: 01:22:d1:8a:5e:6d:f8:8d:63:7c:15:19:19:76:55: 1f:03:05:e2:0f:4b:86:22:72:2b:f4:e4:f8:ac:88: 10:0c:cb:d6:33:d5:a9:31:58:6a:0c:db:41:c6:ca: 64:b6:14:6d:76:69:08:c8:f7:74:5c:f3:db:4b:ca: 5f:32:11:37:c5:e9:33:13:9c:f6:da:8a:c2:4a:75: 50:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:35:ED:27:5D:FC:5B:A0:5A:F4:C6:40:26:50:71:2E:0F:6D:42:55 X509v3 Authority Key Identifier: keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:e0:9b:ac:06:d9:3d:13:26:9b:60:df:2a:d5:71:0a:55:8c: 59:0f:7f:b3:89:fb:93:86:88:90:a0:3f:d6:b9:04:3d:8a:1f: 8b:63:e9:44:67:d8:8d:c7:e1:03:ff:21:24:0f:52:90:a4:0a: 25:37:5b:55:0b:7d:ed:f1:f7:a9:4c:e3:53:aa:e5:9e:e7:47: 77:22:87:84:4f:0f:9d:d0:42:7d:09:e0:33:3b:aa:a8:46:84: 8e:2b:8d:f3:71:7b:16:14:12:b1:e0:88:e7:c1:1e:b0:43:27: 9a:8a:ed:bb:1c:9a:bf:b5:9e:b0:af:d5:13:86:46:c3:59:72: aa:d0:e8:5b:56:ab:8a:1e:8d:11:ab:0c:6e:8b:91:2a:6c:8c: c7:19:64:01:19:ec:06:d3:07:ce:f5:18:7c:3c:41:f7:2e:7c: 09:2f:56:1b:33:6b:e5:48:de:eb:5b:c8:f4:c7:84:1e:6f:6f: fa:1a:2d:2f:96:7e:2b:b7:dc:3d:22:5e:e8:a0:44:7d:3c:49: 72:a3:9e:79:c4:9a:ba:76:be:1b:02:66:93:46:09:0d:b2:21: 4c:70:72:fb:2f:e8:a1:90:0f:18:56:a9:f5:82:f0:4f:61:96: 5b:bb:e4:5d:91:32:46:4b:9c:f5:6f:9f:04:a6:10:0b:23:94: 1c:bd:e9:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1MjYxMTAvBgNVBAUTKDA1RkQyRDUxOUQ0MENCMjA4OTM3QkY4QThFNDYzRTZE ODQyQ0MwN0QwHhcNMjUxMjIzMDI0NjQ1WhcNMjUxMjMwMDI0NjQ1WjAYMRYwFAYD VQQDDA02OTRhMDI5Ni0wYzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBjNUgkA+S5Q4Zz0byBLTeJZXwCkVIihq9P0Bx2JvGDb8gh5zW+Eo+QWAzbu 2UG6xMhveoOkAVE9CUP4b5af04FEBbEyWnN740g1cEVKsEnnA1FJmWz26QkEZilw 0n2cs6ecSn9vyyS33w5P8HuZS1D/TY7lbfssX1YutmKYBKDe4dEYtB3/n3faSrot q4IKib1Bsd7RbJ3UOYlMdiewXn+dPOsOEfrsSkAziykfGbJ8jmMBItGKXm34jWN8 FRkZdlUfAwXiD0uGInIr9OT4rIgQDMvWM9WpMVhqDNtBxspkthRtdmkIyPd0XPPb S8pfMhE3xekzE5z22orCSnVQlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL017Sdd /FugWvTGQCZQcS4PbUJVMB8GA1UdIwQYMBaAFAX9LVGdQMsgiTe/io5GPm2ELMB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzUyNi9BMTNDNTVDRTk4 QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5Q0pONy1LamtZLWJZUXN3 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JmMHRVWjFBeXlDSk43LUtqa1ktYllRc3dIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzUyNi9BMTNDNTVDRTk4QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5 Q0pONy1LamtZLWJZUXN3SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+4JusBtk9EyabYN8q1XEKVYxZD3+zifuThoiQoD/WuQQ9ih+LY+lE Z9iNx+ED/yEkD1KQpAolN1tVC33t8fepTONTquWe50d3IoeETw+d0EJ9CeAzO6qo RoSOK43zcXsWFBKx4IjnwR6wQyeaiu27HJq/tZ6wr9UThkbDWXKq0OhbVquKHo0R qwxui5EqbIzHGWQBGewG0wfO9Rh8PEH3LnwJL1YbM2vlSN7rW8j0x4Qeb2/6Gi0v ln4rt9w9Il7ooER9PElyo555xJq6dr4bAmaTRgkNsiFMcHL7L+ihkA8YVqn1gvBP YZZbu+RdkTJGS5z1b58EphALI5Qcvele -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:18 2025 by rpki-client