This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft File: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft (raw, json) Hash identifier: EgpaPH3RQXGDr57U+52HQeoUt5Dn5Gk5iSfGfTmfNd8= Subject key identifier: F6:3F:6B:D1:94:11:02:B1:29:2C:04:0B:C6:26:51:AF:14:BB:59:0A Authority key identifier: 05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7 Certificate issuer: /CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7 Certificate serial: 058F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft Manifest number: 0589 Signing time: Mon 22 Dec 2025 22:23:29 +0000 Manifest this update: Mon 22 Dec 2025 22:23:28 +0000 Manifest next update: Mon 29 Dec 2025 22:23:28 +0000 Files and hashes: 1: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl (hash: 7BALkcU1fByJCE2pJcLO7oWhgP0uNrn2v8PVyKTFOic=) 2: 7C05ACEE75B311EF83EC6F78C4F9AE02.roa (hash: i9keOrGgDPDdpLU7sFp0e9zDGCL/M7UVsmnKpkq7UPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1423 (0x58f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D795B, serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7 Validity Not Before: Dec 22 22:23:28 2025 GMT Not After : Dec 29 22:23:28 2025 GMT Subject: CN=6949c4e1-d232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:31:0a:b1:49:a8:c8:49:29:c8:a4:c1:b7: 37:b2:4f:48:d0:73:f6:99:d8:7a:6a:de:ba:c2:37: 55:72:d0:1e:48:13:8f:a8:44:1f:b4:db:34:94:e4: 30:d0:50:56:d5:00:90:98:82:04:1c:2e:a9:28:6f: 9d:0f:dd:79:9d:fe:21:0e:52:af:05:22:15:a8:b8: 1e:d2:6a:9f:01:b5:fb:c2:c1:93:d0:d9:1a:29:93: 03:10:85:15:d6:8d:cd:d2:2d:92:b0:f2:a6:55:9e: fe:da:b5:e6:03:d2:0d:17:d1:d8:45:20:fa:c6:eb: 59:32:75:9a:cf:c0:19:f9:b1:89:34:3e:e1:99:64: e4:fa:6d:0e:8d:06:20:07:7b:fa:d5:98:9a:02:9a: 80:dc:e8:57:d5:20:76:39:f5:ff:51:e8:90:4a:ba: 72:d0:23:a1:71:80:4a:84:29:c3:87:7d:9f:aa:7d: 3f:1e:cf:4f:0e:0e:38:f1:75:ac:67:88:6f:b7:ee: c4:a7:e0:1a:87:33:71:0b:df:43:11:cb:e9:a8:4c: da:a7:2a:09:47:d2:1a:09:7c:53:27:05:0c:f9:fa: 3d:20:84:34:4c:8a:d9:dd:2c:9e:19:f4:55:96:76: 9a:04:0b:07:08:c6:7a:77:da:61:07:c4:bf:c1:82: d4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3F:6B:D1:94:11:02:B1:29:2C:04:0B:C6:26:51:AF:14:BB:59:0A X509v3 Authority Key Identifier: keyid:05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:5c:84:69:58:8d:28:e8:af:02:06:d1:d5:3e:ac:ce:f4:17: ee:66:26:bc:a9:65:ce:be:78:2d:86:98:52:5e:20:dc:77:2d: ec:fd:bb:b9:d5:28:e0:c6:48:51:88:a0:55:a2:01:02:7f:8a: c2:8a:9a:3b:f0:f6:92:9c:57:e7:95:79:41:b5:99:a6:de:a2: f2:ad:3f:39:99:b4:2c:8a:ed:b0:80:4a:5a:e8:b0:05:60:21: a3:20:1f:e5:85:7e:39:90:90:6c:8e:95:31:ba:64:d2:91:71: 63:19:68:40:4d:1f:b1:f7:54:fe:70:99:d3:d4:9c:fd:57:07: d7:41:83:f4:68:14:e8:48:d6:ba:09:3f:bc:39:8a:ef:ea:58: 24:7e:17:75:f0:b2:70:3a:5b:23:4e:77:09:1d:8e:92:90:6d: eb:d1:82:f3:20:72:5c:85:16:49:65:4d:4c:a6:c5:b9:07:36: a1:5b:68:43:d9:6e:de:94:5d:78:25:7f:19:7b:51:69:37:9b: 7b:3a:da:e7:4a:26:23:4b:8d:fa:19:13:d1:5f:ff:c8:4e:85: 18:f0:46:13:97:2a:58:e4:e8:9e:70:13:85:89:53:3f:f4:26: e8:72:d2:de:e5:6e:db:93:0e:09:36:16:6a:31:3c:fd:13:73: 25:55:85:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc5NUIxMTAvBgNVBAUTKDA1QkVGM0I3NjQ2MzU2Q0U0MDlGQzU2M0YyQTY5MDc4 Njc3OTVFRjcwHhcNMjUxMjIyMjIyMzI4WhcNMjUxMjI5MjIyMzI4WjAYMRYwFAYD VQQDDA02OTQ5YzRlMS1kMjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLwxCrFJqMhJKcikwbc3sk9I0HP2mdh6at66wjdVctAeSBOPqEQftNs0lOQw 0FBW1QCQmIIEHC6pKG+dD915nf4hDlKvBSIVqLge0mqfAbX7wsGT0NkaKZMDEIUV 1o3N0i2SsPKmVZ7+2rXmA9INF9HYRSD6xutZMnWaz8AZ+bGJND7hmWTk+m0OjQYg B3v61ZiaApqA3OhX1SB2OfX/UeiQSrpy0COhcYBKhCnDh32fqn0/Hs9PDg448XWs Z4hvt+7Ep+AahzNxC99DEcvpqEzapyoJR9IaCXxTJwUM+fo9IIQ0TIrZ3SyeGfRV lnaaBAsHCMZ6d9phB8S/wYLU2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPY/a9GU EQKxKSwEC8YmUa8Uu1kKMB8GA1UdIwQYMBaAFAW+87dkY1bOQJ/FY/KmkHhneV73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzk1Qi9BODhGQjNFMjAw QzAxMUVDOTZDMkQ1ODNDNEY5QUUwMi9CYjd6dDJSalZzNUFuOFZqOHFhUWVHZDVY dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JiN3p0MlJqVnM1QW44Vmo4cWFRZUdkNVh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzk1Qi9BODhGQjNFMjAwQzAxMUVDOTZDMkQ1ODNDNEY5QUUwMi9CYjd6dDJSalZz NUFuOFZqOHFhUWVHZDVYdmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVXIRpWI0o6K8CBtHVPqzO9BfuZia8qWXOvngthphSXiDcdy3s/bu5 1SjgxkhRiKBVogECf4rCipo78PaSnFfnlXlBtZmm3qLyrT85mbQsiu2wgEpa6LAF YCGjIB/lhX45kJBsjpUxumTSkXFjGWhATR+x91T+cJnT1Jz9VwfXQYP0aBToSNa6 CT+8OYrv6lgkfhd18LJwOlsjTncJHY6SkG3r0YLzIHJchRZJZU1MpsW5BzahW2hD 2W7elF14JX8Ze1FpN5t7OtrnSiYjS436GRPRX//IToUY8EYTlypY5OiecBOFiVM/ 9CboctLe5W7bkw4JNhZqMTz9E3MlVYUH -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:30 2025 by rpki-client