This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft File: BAiuYP82i4xPzZMY6lKlnIcolJw.mft (raw, json) Hash identifier: /it/vWMjtPuzNbxhBvZcTqlTMZZ2FYRj5//WjWwiAko= Subject key identifier: 64:8E:5A:E0:E4:E5:02:D6:C3:B9:35:DD:A4:A0:CD:28:B1:42:69:E4 Authority key identifier: 04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C Certificate issuer: /CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C Certificate serial: 08CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft Manifest number: 0B03 Signing time: Mon 22 Dec 2025 19:49:37 +0000 Manifest this update: Mon 22 Dec 2025 19:49:36 +0000 Manifest next update: Mon 29 Dec 2025 19:49:36 +0000 Files and hashes: 1: BAiuYP82i4xPzZMY6lKlnIcolJw.crl (hash: Rh0mECPxwuJuRfrQDKuLLmoaM55KVezD6VP8YpEYeGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2250 (0x8ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE, serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C Validity Not Before: Dec 22 19:49:36 2025 GMT Not After : Dec 29 19:49:36 2025 GMT Subject: CN=6949a0d0-fa00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3f:79:db:e2:ca:61:63:bd:2d:c9:10:eb:c2: 15:16:f9:92:78:18:fe:ed:79:d5:3e:f9:62:84:59: 12:66:f5:75:bd:85:66:d7:37:10:c1:c8:6d:84:ed: 32:cf:7a:3f:63:1a:48:1a:0c:60:57:64:e2:dc:d0: 0e:7a:bc:ba:72:3f:a7:01:6b:c3:23:c9:e4:e0:82: 4c:65:39:16:b1:8f:e3:d5:f6:55:c8:8e:95:5a:0b: 61:e9:d1:94:45:a5:e2:5b:5b:c5:e2:9f:b9:36:dd: 04:0f:53:7d:e4:2e:ea:64:48:a7:fe:39:63:54:c9: 06:30:75:41:0d:35:aa:1f:57:99:9f:37:b8:08:9c: fc:2b:25:08:71:d6:86:7c:bb:2e:58:ab:ac:0d:a3: 53:20:d9:63:40:bd:8b:39:d7:0b:58:c1:da:d2:bb: 83:e5:05:93:2b:70:78:4a:31:d3:5a:20:cc:f9:6f: a1:6e:48:d8:4f:a8:dd:e2:79:88:91:83:60:af:c9: 3b:dd:d8:ea:d8:63:34:8f:79:89:f4:de:a2:bb:9b: 47:41:0b:8f:d8:5d:ac:5e:39:53:ae:01:c9:55:4d: c1:b3:54:9a:4d:c1:5f:dc:af:9f:8f:09:92:f4:d4: 35:00:7a:59:ac:80:35:02:49:2d:d2:5d:29:59:cd: 36:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8E:5A:E0:E4:E5:02:D6:C3:B9:35:DD:A4:A0:CD:28:B1:42:69:E4 X509v3 Authority Key Identifier: keyid:04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:28:97:f7:6f:f1:ee:00:10:c7:fd:b9:fb:e5:54:b7:6e:62: 9d:ef:dd:73:5a:aa:cc:fd:d5:b0:c6:42:e2:69:b0:3e:f3:a8: f6:e5:59:6a:a9:9b:ac:9f:d6:0f:3a:89:b9:b9:b3:a4:0b:41: a5:15:18:24:02:e3:ed:ff:25:3c:c5:13:f3:d5:39:89:6b:2b: 52:b7:58:4b:92:a4:6b:cf:e6:46:9b:11:7c:bd:04:95:00:04: 95:0c:8e:0d:c2:aa:a5:47:cf:cb:d7:36:74:a1:61:c3:40:4c: b4:a0:88:18:1e:99:a6:74:39:41:5f:f1:c8:c4:90:47:02:92: ac:df:32:02:e7:13:2a:21:b4:1f:dc:c8:7c:8d:8c:01:00:e1: f1:45:bc:68:80:aa:fe:a3:cc:b8:71:80:09:38:41:34:51:7f: 06:75:0c:aa:07:aa:48:ea:b9:f9:61:11:62:72:2b:95:a6:87: 50:84:f4:15:ed:88:06:eb:c9:ba:2f:1b:7a:8e:18:26:42:a4: ba:f2:62:55:b9:b4:18:0d:70:a7:aa:d1:43:2e:c7:59:bf:f7: b4:61:ec:e8:7f:03:b0:d5:f9:19:a2:09:cb:98:63:24:fe:b5: 4c:99:fa:88:f0:83:63:55:17:fa:6a:44:40:f9:e0:40:36:32: 1f:24:c6:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKDA0MDhBRTYwRkYzNjhCOEM0RkNEOTMxOEVBNTJBNTlD ODcyODk0OUMwHhcNMjUxMjIyMTk0OTM2WhcNMjUxMjI5MTk0OTM2WjAYMRYwFAYD VQQDDA02OTQ5YTBkMC1mYTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAij952+LKYWO9LckQ68IVFvmSeBj+7XnVPvlihFkSZvV1vYVm1zcQwchthO0y z3o/YxpIGgxgV2Ti3NAOery6cj+nAWvDI8nk4IJMZTkWsY/j1fZVyI6VWgth6dGU RaXiW1vF4p+5Nt0ED1N95C7qZEin/jljVMkGMHVBDTWqH1eZnze4CJz8KyUIcdaG fLsuWKusDaNTINljQL2LOdcLWMHa0ruD5QWTK3B4SjHTWiDM+W+hbkjYT6jd4nmI kYNgr8k73djq2GM0j3mJ9N6iu5tHQQuP2F2sXjlTrgHJVU3Bs1SaTcFf3K+fjwmS 9NQ1AHpZrIA1Akkt0l0pWc02xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSOWuDk 5QLWw7k13aSgzSixQmnkMB8GA1UdIwQYMBaAFAQIrmD/NouMT82TGOpSpZyHKJSc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi9CQWl1WVA4Mmk0eFB6Wk1ZNmxLbG5JY29s SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JBaXVZUDgyaTR4UHpaTVk2bEtsbkljb2xKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi9CQWl1WVA4Mmk0 eFB6Wk1ZNmxLbG5JY29sSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmKJf3b/HuABDH/bn75VS3bmKd791zWqrM/dWwxkLiabA+86j25Vlq qZusn9YPOom5ubOkC0GlFRgkAuPt/yU8xRPz1TmJaytSt1hLkqRrz+ZGmxF8vQSV AASVDI4NwqqlR8/L1zZ0oWHDQEy0oIgYHpmmdDlBX/HIxJBHApKs3zIC5xMqIbQf 3Mh8jYwBAOHxRbxogKr+o8y4cYAJOEE0UX8GdQyqB6pI6rn5YRFiciuVpodQhPQV 7YgG68m6Lxt6jhgmQqS68mJVubQYDXCnqtFDLsdZv/e0YezofwOw1fkZognLmGMk /rVMmfqI8INjVRf6akRA+eBANjIfJMYn -----END CERTIFICATE-----Generated at Tue Dec 23 07:35:26 2025 by rpki-client