This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json) Hash identifier: 8qvD90EXE0uSAJ6HEnI7aURuzP7ws0U4zqxIxgOqpsw= Subject key identifier: 19:1F:F4:AF:91:2E:49:E6:02:18:15:CE:90:C4:44:B8:C6:8F:23:99 Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft Manifest number: 016D Signing time: Tue 23 Dec 2025 02:55:53 +0000 Manifest this update: Tue 23 Dec 2025 02:55:53 +0000 Manifest next update: Tue 30 Dec 2025 02:55:53 +0000 Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: 6WYx4t0uQFCJmUevmfT3kx3g7j18lK7SK0kR1HgHgQI=) 2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: AnEWPP8X1N6dt7l7V3XsTmB0MKThvDc5dt35NbkXnzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Validity Not Before: Dec 23 02:55:53 2025 GMT Not After : Dec 30 02:55:53 2025 GMT Subject: CN=694a04b9-15e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:f9:00:7b:06:66:f2:3e:33:ab:aa:44:c5: b9:9f:4c:c9:4c:0a:56:72:85:81:6f:2b:a3:72:5e: e8:c2:71:b5:4d:fb:b1:d4:44:fc:7e:56:df:c6:81: 1d:24:cc:04:bc:96:19:0a:ce:a2:e9:92:95:ff:d1: 61:69:9d:df:70:a2:dd:4b:93:14:48:fa:9b:7f:0f: b6:0d:8a:72:dd:70:d0:56:9d:d2:fc:d0:83:ba:7f: d0:07:c4:ec:b8:aa:90:40:fb:eb:e2:c8:6a:d0:6b: af:98:d5:ee:40:2e:f7:1e:76:87:b0:76:65:4e:ea: 9f:0e:72:35:27:0f:90:fc:5e:1f:e2:10:17:3b:64: 2f:e0:e2:84:c5:cf:df:a6:b7:f0:c8:ce:69:12:69: d3:62:a1:85:bc:9a:6b:29:e2:9c:04:a9:a5:a0:0a: 77:72:03:b1:7a:01:45:5f:34:5c:6a:76:ad:71:95: a9:36:15:51:fd:cc:4d:fc:94:d6:9d:c5:5b:02:25: 50:e0:2c:23:63:fa:e9:ee:c7:1a:5a:1f:f7:5f:0e: f5:59:7e:e9:5b:22:66:9e:5d:b7:2f:3f:f5:a1:2b: be:8d:04:e6:eb:56:f8:ae:bf:15:0f:e7:77:cc:3e: d3:2b:19:94:ff:e8:43:0a:c8:ed:ef:c6:5a:15:f5: 11:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1F:F4:AF:91:2E:49:E6:02:18:15:CE:90:C4:44:B8:C6:8F:23:99 X509v3 Authority Key Identifier: keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:33:78:98:79:9d:f5:c9:1f:3a:0f:d1:07:20:ed:59:52:5c: b3:ce:c1:0b:c2:80:56:b3:dd:1b:b8:b0:89:21:81:9e:72:95: db:2d:63:d4:32:51:53:8e:c8:d5:88:b5:4a:67:e2:f1:b9:fc: 14:b0:3a:51:85:54:e6:cd:be:a7:c6:d3:3f:90:7f:67:58:93: 63:80:b2:d5:de:26:96:7b:8f:87:d0:49:7d:09:7c:b1:cd:d5: eb:f7:6b:03:c1:b8:5a:70:55:14:6d:e7:ea:78:9c:d5:a7:d6: ea:63:33:60:9e:6d:3d:5f:ed:7a:0f:99:73:7e:ca:65:b1:e1: cc:ea:aa:15:c8:b9:1c:35:b3:3b:3f:a2:1b:11:02:20:6b:a5: 14:09:02:6c:22:aa:db:d9:60:53:20:10:4f:42:b0:dd:c0:76: 98:4a:b9:56:61:13:36:95:6a:77:ce:2e:d2:2d:26:9b:af:46: 98:a6:2c:31:69:cd:41:ed:0f:de:ac:37:6b:1c:21:c4:53:83: 2c:f0:10:7f:60:c5:cc:bc:0e:66:04:a6:ec:bd:2c:27:f4:61: 40:9d:49:44:99:11:11:61:41:3f:15:3e:14:0d:4d:8d:b0:14: b3:50:5a:17:84:ce:8d:92:3c:f1:df:ca:63:8b:b7:79:64:dc: 5a:42:e8:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMDgxMTAvBgNVBAUTKDZDQkI2NzY3RjYzQTBDQjlCN0E3NDkxNEI0QTY1NzQx N0U0QzU3OEEwHhcNMjUxMjIzMDI1NTUzWhcNMjUxMjMwMDI1NTUzWjAYMRYwFAYD VQQDDA02OTRhMDRiOS0xNWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHr5AHsGZvI+M6uqRMW5n0zJTApWcoWBbyujcl7ownG1Tfux1ET8flbfxoEd JMwEvJYZCs6i6ZKV/9FhaZ3fcKLdS5MUSPqbfw+2DYpy3XDQVp3S/NCDun/QB8Ts uKqQQPvr4shq0GuvmNXuQC73HnaHsHZlTuqfDnI1Jw+Q/F4f4hAXO2Qv4OKExc/f prfwyM5pEmnTYqGFvJprKeKcBKmloAp3cgOxegFFXzRcanatcZWpNhVR/cxN/JTW ncVbAiVQ4CwjY/rp7scaWh/3Xw71WX7pWyJmnl23Lz/1oSu+jQTm61b4rr8VD+d3 zD7TKxmU/+hDCsjt78ZaFfURIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkf9K+R LknmAhgVzpDERLjGjyOZMB8GA1UdIwQYMBaAFGy7Z2f2Ogy5t6dJFLSmV0F+TFeK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAwOC8wQThGQkIxQUI0 MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRMbTNwMGtVdEtaWFFYNU1W NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAwOC8wQThGQkIxQUI0MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRM bTNwMGtVdEtaWFFYNU1WNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/M3iYeZ31yR86D9EHIO1ZUlyzzsELwoBWs90buLCJIYGecpXbLWPU MlFTjsjViLVKZ+LxufwUsDpRhVTmzb6nxtM/kH9nWJNjgLLV3iaWe4+H0El9CXyx zdXr92sDwbhacFUUbefqeJzVp9bqYzNgnm09X+16D5lzfsplseHM6qoVyLkcNbM7 P6IbEQIga6UUCQJsIqrb2WBTIBBPQrDdwHaYSrlWYRM2lWp3zi7SLSabr0aYpiwx ac1B7Q/erDdrHCHEU4Ms8BB/YMXMvA5mBKbsvSwn9GFAnUlEmRERYUE/FT4UDU2N sBSzUFoXhM6Nkjzx38pji7d5ZNxaQuhK -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:40 2025 by rpki-client