This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft File: Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json) Hash identifier: 2DyMaMM3lRaXSLe6dprOv7J+SZsoVwiLfmet2EzWoqc= Subject key identifier: 3F:70:16:5E:32:96:E9:32:60:07:8E:CB:BA:34:57:EE:AA:50:19:CA Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Certificate serial: 04E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft Manifest number: 19EB Signing time: Mon 22 Dec 2025 16:33:34 +0000 Manifest this update: Mon 22 Dec 2025 16:33:33 +0000 Manifest next update: Mon 29 Dec 2025 16:33:33 +0000 Files and hashes: 1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: jWAn4cMXwm2iLh6P1yNNad4N1Hz8zTx5+qY+9vOStu0=) 2: 2A53DA54332011EF89CABD61C4F9AE02.roa (hash: XAFmHRo+hO35GWVsWHHscFE/9w85d60jx9W3Sf7aA0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Validity Not Before: Dec 22 16:33:33 2025 GMT Not After : Dec 29 16:33:33 2025 GMT Subject: CN=694972de-7eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:45:79:76:47:8b:20:09:cf:db:c5:de:bf:c1: 09:fc:51:6a:af:4b:06:e8:4d:c0:ed:d8:28:bd:07: 3b:fd:6e:ad:60:97:44:98:f3:49:a4:12:ba:80:05: 69:e2:4e:9e:8b:83:e5:0d:f2:52:0b:06:9b:21:78: e5:b2:bd:a9:39:f9:2e:fd:e1:31:8d:33:73:df:ee: 32:03:c0:65:32:e6:75:7a:f6:f2:99:c6:b3:d2:88: a8:7e:97:b1:b7:35:58:6a:da:95:c5:fd:e2:5b:78: 7d:91:cf:7e:ef:90:11:b5:d9:a9:29:79:8c:7a:3f: 0e:ff:72:af:f3:8b:3e:ed:73:f2:89:84:12:8e:7d: c7:40:61:c6:3b:27:ca:31:8c:29:03:9e:90:b5:2f: 5d:3f:51:87:be:76:cc:8b:c8:3f:fa:c0:85:a7:94: e8:a6:59:f2:b4:64:45:3b:5b:6f:bd:9b:17:8c:37: a9:0a:00:1c:ec:dc:2b:1a:59:e0:45:63:2e:de:9b: b4:18:8d:a2:1c:8c:3b:79:14:53:75:50:b8:5e:8f: e5:a4:62:10:ff:0e:ba:1e:66:ed:f7:ec:12:89:79: 04:df:aa:b0:d8:08:d5:9d:fa:23:b4:48:ad:f5:d3: 64:15:e1:2b:e7:b9:ac:d7:b3:bf:85:2f:bf:cb:c2: be:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:70:16:5E:32:96:E9:32:60:07:8E:CB:BA:34:57:EE:AA:50:19:CA X509v3 Authority Key Identifier: keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b8:09:31:5a:5c:19:87:fa:76:0e:8f:6c:e1:f2:36:1f:6d: 45:39:71:ed:38:3f:03:e3:53:81:92:44:b0:4e:4a:ef:82:ca: ed:a4:db:ca:23:79:99:e4:65:f6:71:66:a1:b3:9d:ad:bb:f6: e2:6a:db:63:80:3c:fe:c6:72:46:32:35:9a:e6:02:31:8c:c6: cb:9f:51:c0:ed:df:e4:d8:3e:4d:51:2d:91:cc:02:41:77:cb: 05:67:1f:ea:21:aa:03:4f:db:f2:1b:4c:16:b2:fd:65:ac:16: 0e:84:a1:6b:2f:7c:a6:d4:9f:7f:d0:8c:a6:44:b9:45:0f:9b: 58:91:7d:f7:19:ba:42:e9:6e:ab:65:ae:96:bd:23:a8:02:30: ef:52:cf:6a:89:aa:5d:c4:20:a7:29:ff:f4:c7:7e:05:ef:9c: 17:2a:c9:19:d8:cb:14:cd:ed:99:d8:64:ab:aa:ef:a9:14:28: 8e:f3:07:ea:fa:d1:51:ff:73:90:10:24:60:d8:0d:59:aa:c6: 40:8a:e1:a0:18:a2:d5:42:8c:b4:45:02:3f:ea:01:3a:80:94: 9c:ee:52:ec:af:19:c1:7d:51:90:ad:45:9a:cf:d0:57:c5:b0: 1c:f1:82:80:0b:4f:ba:b9:26:a1:74:a1:c2:b3:b7:09:07:2a: 0f:e6:e5:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKDA2MzdFNUIzOEM2MURGODNFQkIzMzAyMDkzQkI1NzZD QjMxRDlCMTAwHhcNMjUxMjIyMTYzMzMzWhcNMjUxMjI5MTYzMzMzWjAYMRYwFAYD VQQDDA02OTQ5NzJkZS03ZWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7kV5dkeLIAnP28Xev8EJ/FFqr0sG6E3A7dgovQc7/W6tYJdEmPNJpBK6gAVp 4k6ei4PlDfJSCwabIXjlsr2pOfku/eExjTNz3+4yA8BlMuZ1evbymcaz0oiofpex tzVYatqVxf3iW3h9kc9+75ARtdmpKXmMej8O/3Kv84s+7XPyiYQSjn3HQGHGOyfK MYwpA56QtS9dP1GHvnbMi8g/+sCFp5ToplnytGRFO1tvvZsXjDepCgAc7NwrGlng RWMu3pu0GI2iHIw7eRRTdVC4Xo/lpGIQ/w66Hmbt9+wSiXkE36qw2AjVnfojtEit 9dNkFeEr57ms17O/hS+/y8K+hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9wFl4y lukyYAeOy7o0V+6qUBnKMB8GA1UdIwQYMBaAFAY35bOMYd+D67MwIJO7V2yzHZsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0UHJzekFnazd0WGJMTWRt eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JqZmxzNHhoMzRQcnN6QWdrN3RYYkxNZG14QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0 UHJzekFnazd0WGJMTWRteEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSuAkxWlwZh/p2Do9s4fI2H21FOXHtOD8D41OBkkSwTkrvgsrtpNvK I3mZ5GX2cWahs52tu/biattjgDz+xnJGMjWa5gIxjMbLn1HA7d/k2D5NUS2RzAJB d8sFZx/qIaoDT9vyG0wWsv1lrBYOhKFrL3ym1J9/0IymRLlFD5tYkX33GbpC6W6r Za6WvSOoAjDvUs9qiapdxCCnKf/0x34F75wXKskZ2MsUze2Z2GSrqu+pFCiO8wfq +tFR/3OQECRg2A1ZqsZAiuGgGKLVQoy0RQI/6gE6gJSc7lLsrxnBfVGQrUWaz9BX xbAc8YKAC0+6uSahdKHCs7cJByoP5uU/ -----END CERTIFICATE-----Generated at Wed Dec 24 17:34:55 2025 by rpki-client