This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft File: bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json) Hash identifier: eB57wuC0LdKk8vhfzzdDiIf5e/zPvpm/UI2KYxAkCwk= Subject key identifier: 70:65:96:91:CD:91:03:EA:4D:6D:E6:AE:45:87:58:64:FA:69:63:A6 Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C Certificate issuer: /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Certificate serial: 07B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft Manifest number: 07AD Signing time: Mon 22 Dec 2025 20:43:30 +0000 Manifest this update: Mon 22 Dec 2025 20:43:30 +0000 Manifest next update: Mon 29 Dec 2025 20:43:30 +0000 Files and hashes: 1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: wO0jty8Kz69rjNmqUEEA6FQr++wgXYEgDl7eh7+IqPQ=) 2: C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (hash: RwnDEUUAUVLXLFBhhOVnnsEMoCnye/eCleYIc6KZk8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1972 (0x7b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01F7, serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Validity Not Before: Dec 22 20:43:30 2025 GMT Not After : Dec 29 20:43:30 2025 GMT Subject: CN=6949ad72-ac68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:8c:88:5d:70:ed:2c:eb:a7:71:20:c7:ba: 2b:68:d9:13:54:a3:52:78:05:52:38:c2:bc:84:1c: a9:0e:e9:be:7c:a4:55:b3:f9:39:b5:31:24:57:bc: b2:48:74:22:57:0b:a8:31:93:63:04:20:b3:e1:b8: f9:e3:3f:cb:20:3e:dd:82:10:34:84:35:0a:e1:bd: 9d:bf:22:2b:62:14:c9:1e:b1:15:0c:a2:bf:7f:65: 26:5e:d2:76:e3:97:92:61:45:08:42:e2:b3:5b:97: 80:13:53:48:52:f8:46:9d:fc:21:d6:4a:e4:1f:16: 92:3a:f9:df:b9:1b:4c:c8:ce:b7:ad:9b:a5:b2:7b: d6:64:57:54:c3:d2:4d:08:06:31:a1:0c:a3:3b:5c: 8b:13:0f:15:28:d5:3f:4c:e4:08:7a:c5:60:2d:44: 60:b6:0e:7c:8b:e5:55:a5:b4:2a:fc:a2:0b:b8:0b: 33:43:40:17:8b:49:1b:81:ac:89:ac:6f:d8:f2:37: 02:4a:b1:fb:1b:3d:f7:dd:cb:28:98:d5:fd:dc:e8: b8:2c:c1:94:04:75:68:bf:92:2c:51:7e:e3:74:17: 03:05:f9:05:55:da:56:ae:71:91:1b:13:fa:e5:79: cb:3f:29:41:ee:55:f4:32:7d:e1:8d:12:0e:6c:36: 71:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:65:96:91:CD:91:03:EA:4D:6D:E6:AE:45:87:58:64:FA:69:63:A6 X509v3 Authority Key Identifier: keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:bb:a0:c1:7a:a0:79:f2:47:07:12:4b:a6:89:3f:8a:9d:bf: a2:cf:6b:54:5c:d8:5e:ec:6f:dd:d2:d7:37:be:ff:ec:ca:40: 47:23:e6:e4:f7:cb:33:6a:27:76:61:d2:03:28:1b:87:bc:63: bc:f4:fb:f2:4c:8d:85:ac:78:62:42:e7:f9:0d:85:69:2a:aa: 4e:55:1b:fa:8c:0b:ef:b4:98:e0:ab:00:59:3f:c8:b0:1d:96: 8c:61:fe:18:73:f1:28:a3:81:d9:03:50:7d:55:d0:ff:1d:f5: 01:6a:4a:fe:5e:76:20:08:ee:bc:7f:bd:e3:0d:f6:f1:e1:a8: 79:69:bc:34:f8:b5:cb:c7:b9:44:04:f3:8b:20:f0:59:13:ec: c7:68:2b:8a:78:ae:c0:5a:ad:03:4d:3f:b6:b0:05:83:11:92: 9d:ca:ed:d8:64:af:5d:4c:44:ff:b2:b6:a3:26:82:2c:1c:3f: e2:a3:66:d6:49:de:98:71:17:ba:0d:95:d7:cd:23:c5:82:70: d5:f9:e5:d9:6f:60:b7:40:e7:c0:da:20:ab:78:99:03:af:ca: 4e:6a:1c:83:59:b9:fb:12:96:3d:b7:ce:c9:3f:a3:dd:ea:94: 10:e3:13:2a:f9:79:41:98:6e:de:60:18:ae:85:ca:fa:21:91: f8:5f:80:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxRjcxMTAvBgNVBAUTKDZFMjcwNDNDM0FGNDBGQzVFNTk3OTM4QjE1NEY1QzhC RTBGREZGNkMwHhcNMjUxMjIyMjA0MzMwWhcNMjUxMjI5MjA0MzMwWjAYMRYwFAYD VQQDDA02OTQ5YWQ3Mi1hYzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmmMiF1w7Szrp3Egx7oraNkTVKNSeAVSOMK8hBypDum+fKRVs/k5tTEkV7yy SHQiVwuoMZNjBCCz4bj54z/LID7dghA0hDUK4b2dvyIrYhTJHrEVDKK/f2UmXtJ2 45eSYUUIQuKzW5eAE1NIUvhGnfwh1krkHxaSOvnfuRtMyM63rZulsnvWZFdUw9JN CAYxoQyjO1yLEw8VKNU/TOQIesVgLURgtg58i+VVpbQq/KILuAszQ0AXi0kbgayJ rG/Y8jcCSrH7Gz333csomNX93Oi4LMGUBHVov5IsUX7jdBcDBfkFVdpWrnGRGxP6 5XnLPylB7lX0Mn3hjRIObDZxwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBllpHN kQPqTW3mrkWHWGT6aWOmMB8GA1UdIwQYMBaAFG4nBDw69A/F5ZeTixVPXIvg/f9s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFGNy9GOTFEMEQyODJB NUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4WGxsNU9MRlU5Y2ktRDlf MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpY0VQRHIwRDhYbGw1T0xGVTljaS1EOV8ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFGNy9GOTFEMEQyODJBNUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4 WGxsNU9MRlU5Y2ktRDlfMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANu6DBeqB58kcHEkumiT+Knb+iz2tUXNhe7G/d0tc3vv/sykBHI+bk 98szaid2YdIDKBuHvGO89PvyTI2FrHhiQuf5DYVpKqpOVRv6jAvvtJjgqwBZP8iw HZaMYf4Yc/Eoo4HZA1B9VdD/HfUBakr+XnYgCO68f73jDfbx4ah5abw0+LXLx7lE BPOLIPBZE+zHaCuKeK7AWq0DTT+2sAWDEZKdyu3YZK9dTET/srajJoIsHD/io2bW Sd6YcRe6DZXXzSPFgnDV+eXZb2C3QOfA2iCreJkDr8pOahyDWbn7EpY9t87JP6Pd 6pQQ4xMq+XlBmG7eYBiuhcr6IZH4X4Bo -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:42 2025 by rpki-client