This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft File: BKfrBJqTf9nyuG4Vnd310sma1B4.mft (raw, json) Hash identifier: H6SNZawOZH6Ep5V6XbTorpXf0C67efSurWmOG6hlaso= Subject key identifier: 9E:E6:7A:AD:82:5D:F6:A8:B5:FD:52:8C:E9:D0:11:D0:A0:E7:A7:20 Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E Certificate issuer: /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Certificate serial: 0564 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft Manifest number: 055D Signing time: Sat 20 Dec 2025 22:40:43 +0000 Manifest this update: Sat 20 Dec 2025 22:40:43 +0000 Manifest next update: Sat 27 Dec 2025 22:40:43 +0000 Files and hashes: 1: BKfrBJqTf9nyuG4Vnd310sma1B4.crl (hash: O6zNxlZzHf1SWV2P0pL0yMs+QuT2gumQaKVDHl7jCIA=) 2: 709F3B2E145C11EC9A902165C4F9AE02.roa (hash: M6yv5fOW6rdXU2ZAH2K4BETuh9vZsuidxSebVax3mOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1380 (0x564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E87AB, serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Validity Not Before: Dec 20 22:40:43 2025 GMT Not After : Dec 27 22:40:43 2025 GMT Subject: CN=694725eb-c86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:59:18:72:d9:10:eb:6f:84:0b:e3:b8:d4: 22:62:c2:ca:7c:64:d8:90:b8:97:2e:93:f5:87:ae: 6c:73:ee:be:99:88:d8:14:63:f4:8a:76:bb:bc:cb: 2b:f4:1a:cb:6a:0c:b3:59:82:1e:6e:b3:0d:69:91: f6:8e:bc:45:82:9d:ce:1d:00:e7:7a:5d:2d:d4:12: 5d:bc:49:7a:aa:94:e5:11:bf:9b:3f:61:9e:7c:ea: 73:14:86:84:86:58:41:39:89:bb:b9:2a:7e:ca:eb: 58:c3:e3:05:3b:f5:f4:6e:3c:5d:f6:ab:f9:c2:88: 5f:d1:db:4a:76:0c:f5:70:28:e5:db:5d:9f:1d:0c: b1:62:5d:32:85:ea:66:c9:98:d9:9f:1e:d0:02:4f: dd:c5:29:2b:82:50:7e:0e:46:d4:ae:ee:53:bd:68: 96:c1:8a:57:07:91:89:8f:32:84:2b:30:ad:24:37: 80:e6:93:da:a6:e4:36:59:ee:cd:f7:7b:50:54:e2: 05:26:1f:0b:bb:f7:74:23:df:c1:8a:63:6d:6b:5b: 8b:55:00:94:ef:ca:5a:3c:7d:93:30:e1:94:d5:44: a7:c0:65:47:93:ea:ae:63:45:2f:f1:3d:88:d7:42: 2a:22:5d:e3:4c:fb:11:0d:6a:1c:52:8a:79:01:06: d2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E6:7A:AD:82:5D:F6:A8:B5:FD:52:8C:E9:D0:11:D0:A0:E7:A7:20 X509v3 Authority Key Identifier: keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:54:bf:d6:cb:07:89:ba:67:1c:fa:61:54:f9:7d:37:26:d0: 20:d4:41:81:a4:77:b3:4f:b8:3a:11:f2:7a:26:5f:f3:fa:99: 6d:92:95:de:42:50:0c:03:f2:a8:6b:cc:c7:7f:16:5f:ba:9b: 1d:50:c7:b5:e4:57:e7:a2:b6:d9:a3:6a:d9:69:db:1e:2c:8b: 26:14:4b:a7:18:59:d1:d9:6c:0c:69:f8:02:b8:d5:3b:4d:6b: 37:5c:6d:74:5f:c7:81:f9:23:66:d1:9f:d0:60:d4:f1:7f:4f: 4c:0e:ae:65:d2:0e:4c:9a:9e:ee:80:97:2f:37:78:49:5c:79: 66:3b:ca:a4:be:8c:ec:c2:ec:5d:23:1f:6b:7a:ff:3f:53:42: 6c:06:fa:ad:d2:12:25:6f:e3:2c:7a:f2:cf:15:69:f1:eb:23: 6b:8b:64:9a:07:c1:e9:49:36:c8:68:ed:22:60:8d:7d:82:c8: c0:5c:33:90:a4:67:61:67:9c:30:27:87:e2:34:58:5b:88:57: 7d:e3:a3:b0:d6:30:7c:11:28:6b:17:11:4d:60:2f:56:19:c4: bf:76:92:3d:7f:7b:9b:62:ad:f4:c0:ef:b9:e0:11:2f:9c:4d: 1e:72:73:83:1a:7c:4f:80:00:2e:83:55:c7:6e:8b:1e:6c:b5: e7:27:7e:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg3QUIxMTAvBgNVBAUTKDA0QTdFQjA0OUE5MzdGRDlGMkI4NkUxNTlERERGNUQy Qzk5QUQ0MUUwHhcNMjUxMjIwMjI0MDQzWhcNMjUxMjI3MjI0MDQzWjAYMRYwFAYD VQQDDA02OTQ3MjVlYi1jODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQVZGHLZEOtvhAvjuNQiYsLKfGTYkLiXLpP1h65sc+6+mYjYFGP0ina7vMsr 9BrLagyzWYIebrMNaZH2jrxFgp3OHQDnel0t1BJdvEl6qpTlEb+bP2GefOpzFIaE hlhBOYm7uSp+yutYw+MFO/X0bjxd9qv5wohf0dtKdgz1cCjl212fHQyxYl0yhepm yZjZnx7QAk/dxSkrglB+DkbUru5TvWiWwYpXB5GJjzKEKzCtJDeA5pPapuQ2We7N 93tQVOIFJh8Lu/d0I9/BimNta1uLVQCU78paPH2TMOGU1USnwGVHk+quY0Uv8T2I 10IqIl3jTPsRDWocUop5AQbS/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7meq2C Xfaotf1SjOnQEdCg56cgMB8GA1UdIwQYMBaAFASn6wSak3/Z8rhuFZ3d9dLJmtQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODdBQi85MTZCMDY2NjE0 NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5bnl1RzRWbmQzMTBzbWEx QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLZnJCSnFUZjlueXVHNFZuZDMxMHNtYTFCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODdBQi85MTZCMDY2NjE0NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5 bnl1RzRWbmQzMTBzbWExQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCVL/WyweJumcc+mFU+X03JtAg1EGBpHezT7g6EfJ6Jl/z+pltkpXe QlAMA/Koa8zHfxZfupsdUMe15FfnorbZo2rZadseLIsmFEunGFnR2WwMafgCuNU7 TWs3XG10X8eB+SNm0Z/QYNTxf09MDq5l0g5Mmp7ugJcvN3hJXHlmO8qkvozswuxd Ix9rev8/U0JsBvqt0hIlb+MsevLPFWnx6yNri2SaB8HpSTbIaO0iYI19gsjAXDOQ pGdhZ5wwJ4fiNFhbiFd946Ow1jB8EShrFxFNYC9WGcS/dpI9f3ubYq30wO+54BEv nE0ecnODGnxPgAAug1XHbosebLXnJ37f -----END CERTIFICATE-----Generated at Sun Dec 21 05:35:19 2025 by rpki-client