This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
File: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft (raw, json)
Hash identifier: vxn1SKcCbLITujgmLrMJGBtKm7d/a55bKdC44PQWDkw=
Subject key identifier: 5D:E1:98:F5:9A:73:A5:1D:62:4F:74:D4:7E:DF:28:66:23:7A:3D:51
Authority key identifier: 05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC
Certificate issuer: /CN=A91AB8D7/serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
Certificate serial: 022D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
Manifest number: 0228
Signing time: Fri 19 Dec 2025 01:22:09 +0000
Manifest this update: Fri 19 Dec 2025 01:22:09 +0000
Manifest next update: Fri 26 Dec 2025 01:22:09 +0000
Files and hashes: 1: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl (hash: ZL2GNENHzN/4Y+q/lKpaIAB4RYqfu1emRqdn0R98bRY=)
2: 1ED3BAF898A011ED9D31B05CC4F9AE02.roa (hash: GynF0Ay+F7v6ZNuRVcxpGuP9OQi3GMJtHrKy3/D7ZPM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl
rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB8D7, serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
Validity
Not Before: Dec 19 01:22:09 2025 GMT
Not After : Dec 26 01:22:09 2025 GMT
Subject: CN=6944a8c1-8d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:47:45:e3:32:34:38:91:78:f4:b0:79:e6:
4d:e2:ca:c0:5d:f0:ac:8f:db:a9:f8:86:62:d7:10:
75:3b:31:ca:ca:11:0b:d0:ce:6c:77:22:18:50:93:
27:70:ab:47:64:ad:27:7c:b6:55:79:5d:e1:e2:26:
13:0a:2c:3e:dd:c0:7c:4e:d6:e8:96:27:a3:09:1e:
6a:e8:a9:ee:f7:ae:bb:39:2e:24:ed:db:93:89:33:
3b:5d:d4:e8:86:9f:03:74:b7:16:52:92:d8:03:b7:
fd:ab:6b:31:53:f3:3c:38:d0:f0:b9:c5:64:e6:98:
25:be:c5:d1:2f:1d:8b:c5:70:93:ce:73:21:d6:5d:
de:4f:09:ca:40:33:88:b9:05:04:fd:c8:8a:98:87:
72:14:47:b5:48:b4:89:de:4a:31:b5:00:03:79:6c:
36:f4:91:71:a1:93:f4:4e:38:5a:7a:93:e1:53:c0:
55:0f:76:e8:81:27:95:23:51:29:5f:d5:db:f3:e9:
2d:00:15:0c:f3:2c:7d:9d:1c:e7:55:f5:52:84:e9:
09:17:29:a0:71:53:b4:a8:c7:1b:a6:76:cc:47:09:
e0:01:03:1b:71:c7:f4:63:d9:dc:fb:a6:eb:a1:ef:
46:a9:57:34:9d:33:50:b9:a3:a6:ca:46:5f:83:0d:
f5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E1:98:F5:9A:73:A5:1D:62:4F:74:D4:7E:DF:28:66:23:7A:3D:51
X509v3 Authority Key Identifier:
keyid:05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:25:1f:77:c0:b1:f8:47:a9:6a:5b:b6:8c:04:00:4b:ab:44:
95:d7:c0:3b:77:4f:50:4a:26:7e:59:d4:06:4a:ad:5c:bf:f4:
bb:92:f1:6e:e0:36:75:11:25:07:33:1c:72:0f:4c:95:9f:73:
6d:b9:9e:4e:10:fa:8d:48:f0:b3:34:9e:18:85:73:5c:08:d1:
5c:4c:9a:4e:75:fa:7c:7f:3a:af:96:13:a6:4f:df:1c:84:15:
73:65:b7:28:b9:5b:37:74:56:0c:12:1a:94:a3:3f:12:12:89:
69:b8:c7:07:5e:96:af:14:2c:5c:30:48:9c:c2:c4:23:5d:bf:
ae:a5:2f:0b:9a:2d:ca:ff:0e:85:7c:9c:36:9e:d4:b1:ed:fa:
c8:54:81:94:54:0f:5c:00:ab:f3:9a:48:81:67:48:a8:88:37:
c5:ed:4d:1c:e0:65:32:78:b5:5f:34:22:cb:42:6b:60:97:e6:
3a:d3:b9:6f:77:29:d2:a9:82:f8:f5:18:19:ed:8d:d8:37:8a:
57:ab:9e:75:11:89:21:a6:55:e3:04:ba:20:ac:7a:1c:6f:9c:
ce:96:99:ec:da:2f:63:22:33:97:1c:9c:05:c4:56:bb:4c:15:
a1:03:dc:b9:4c:8f:77:90:f5:01:42:0f:df:ae:4b:19:37:1b:
a4:29:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:03:58 2025 by rpki-client