This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft File: bLOCDaWkqEstlAm98H8lRf5tCxE.mft (raw, json) Hash identifier: QF7bZ7eQTikU4ZHbU3u7Y9A/JfQX4zg5GGwCxsorQ98= Subject key identifier: 20:B9:13:C2:8F:6B:50:3D:ED:2C:99:C0:B2:BF:75:B2:D6:A6:F9:16 Authority key identifier: 6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 Certificate issuer: /CN=A91CB063/serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft Manifest number: AC Signing time: Tue 23 Dec 2025 05:06:28 +0000 Manifest this update: Tue 23 Dec 2025 05:06:28 +0000 Manifest next update: Tue 30 Dec 2025 05:06:28 +0000 Files and hashes: 1: bLOCDaWkqEstlAm98H8lRf5tCxE.crl (hash: RcVDVgRzq8cbu2hKXAd75TK5QF87zvP/mXyX2qNPEnQ=) 2: 3D3827F2D6EE11EFB955866CC4F9AE02.roa (hash: 4d4Ou4cSb0acdXH9Bn2waQ4IMkbvtakYfcIPMGQdXao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB063, serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Validity Not Before: Dec 23 05:06:28 2025 GMT Not After : Dec 30 05:06:28 2025 GMT Subject: CN=694a2354-f9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:27:f7:67:e8:c3:08:7e:88:32:82:67:ce:a0: e6:cb:39:f8:33:38:df:ad:2c:9f:6f:7f:78:a3:3c: d1:2c:0b:8a:ea:e4:a5:e4:b8:a3:06:08:10:b3:52: 83:3f:84:83:f1:3a:38:6b:8d:39:fb:7b:9c:9c:f5: 2f:ae:86:5d:67:81:6f:32:2c:d9:40:b3:1b:db:23: f7:fe:10:7b:8b:9e:d9:62:e3:79:06:b4:b1:e1:f1: fc:9c:6e:77:bc:5b:e6:f3:34:ee:ab:1b:0b:52:f1: 7c:3f:52:4b:fc:34:9c:a0:68:f5:ff:f8:96:c9:21: 14:40:68:6e:65:02:b9:48:04:80:9a:a8:11:57:64: c1:c3:6c:27:78:72:b4:f3:bd:c6:0d:42:11:07:8f: 03:43:20:71:7e:7e:a9:61:57:94:f8:fe:ec:4c:a5: 76:05:48:a9:68:8f:7c:90:d4:8d:3e:1e:11:ba:ff: f6:f8:53:6c:89:c6:01:a7:36:65:39:ec:ec:4c:b1: 16:83:d9:1f:fb:73:c7:ce:88:71:96:f2:fa:97:51: cf:e4:5c:21:50:4b:a1:a1:cf:57:1a:57:93:8a:ed: 6b:b4:b6:96:7f:19:d9:d3:4f:ad:80:4e:57:12:f0: 92:54:26:65:64:1d:f2:29:44:5d:b3:cf:54:be:50: f1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B9:13:C2:8F:6B:50:3D:ED:2C:99:C0:B2:BF:75:B2:D6:A6:F9:16 X509v3 Authority Key Identifier: keyid:6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d0:43:08:53:2d:f1:3b:75:27:c1:82:e3:dd:91:b1:44:af: 1f:6e:a5:58:52:be:e4:47:e9:c2:79:95:20:15:f6:35:e8:c5: d8:1b:9e:63:96:53:1c:12:79:cb:99:82:1c:85:5b:4b:fc:ec: 1b:18:bc:78:c3:ff:15:c6:46:80:2e:df:f7:c6:73:52:18:35: ea:b8:9e:a9:4d:c9:7d:26:c5:b9:a0:b5:e3:6a:77:d2:48:27: db:11:f2:06:80:7d:42:ea:56:db:c1:32:78:59:98:d7:53:36: ed:24:c4:d7:f4:3f:64:ae:9f:07:d5:73:9c:cd:57:ab:57:b3: ca:4f:cc:8c:76:8e:64:59:13:9f:cb:d1:d9:1a:28:ed:9a:d9: 24:83:a8:f7:5b:83:b2:28:4a:e4:be:75:35:c7:53:0f:e6:36: 61:0b:46:46:ef:10:a3:da:20:f9:d6:4e:32:a9:bd:3e:71:51: 3f:3d:fb:38:4c:c7:cb:79:ae:a4:81:a6:b4:68:c4:b3:87:b8: 63:65:34:08:cc:a2:a9:f6:ea:2d:fe:51:ad:4d:db:44:12:27: d2:31:97:4f:dc:2e:5f:92:61:d0:7c:44:86:ae:5e:5e:83:5c: e2:76:20:0b:c6:3d:65:d0:c7:87:77:ce:14:77:f0:5d:04:b3: c5:1e:d1:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwNjMxMTAvBgNVBAUTKDZDQjM4MjBEQTVBNEE4NEIyRDk0MDlCREYwN0YyNTQ1 RkU2RDBCMTEwHhcNMjUxMjIzMDUwNjI4WhcNMjUxMjMwMDUwNjI4WjAYMRYwFAYD VQQDDA02OTRhMjM1NC1mOWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yf3Z+jDCH6IMoJnzqDmyzn4MzjfrSyfb394ozzRLAuK6uSl5LijBggQs1KD P4SD8To4a405+3ucnPUvroZdZ4FvMizZQLMb2yP3/hB7i57ZYuN5BrSx4fH8nG53 vFvm8zTuqxsLUvF8P1JL/DScoGj1//iWySEUQGhuZQK5SASAmqgRV2TBw2wneHK0 873GDUIRB48DQyBxfn6pYVeU+P7sTKV2BUipaI98kNSNPh4Ruv/2+FNsicYBpzZl OezsTLEWg9kf+3PHzohxlvL6l1HP5FwhUEuhoc9XGleTiu1rtLaWfxnZ00+tgE5X EvCSVCZlZB3yKURds89UvlDxQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCC5E8KP a1A97SyZwLK/dbLWpvkWMB8GA1UdIwQYMBaAFGyzgg2lpKhLLZQJvfB/JUX+bQsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2My82QzBGOTYxMEQ2 RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi9iTE9DRGFXa3FFc3RsQW05OEg4bFJmNXRD eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMT0NEYVdrcUVzdGxBbTk4SDhsUmY1dEN4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA2My82QzBGOTYxMEQ2RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi9iTE9DRGFXa3FF c3RsQW05OEg4bFJmNXRDeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe0EMIUy3xO3UnwYLj3ZGxRK8fbqVYUr7kR+nCeZUgFfY16MXYG55j llMcEnnLmYIchVtL/OwbGLx4w/8VxkaALt/3xnNSGDXquJ6pTcl9JsW5oLXjanfS SCfbEfIGgH1C6lbbwTJ4WZjXUzbtJMTX9D9krp8H1XOczVerV7PKT8yMdo5kWROf y9HZGijtmtkkg6j3W4OyKErkvnU1x1MP5jZhC0ZG7xCj2iD51k4yqb0+cVE/Pfs4 TMfLea6kgaa0aMSzh7hjZTQIzKKp9uot/lGtTdtEEifSMZdP3C5fkmHQfESGrl5e g1zidiALxj1l0MeHd84Ud/BdBLPFHtHY -----END CERTIFICATE-----Generated at Tue Dec 23 15:52:54 2025 by rpki-client