This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
File: BgI9tGNNXG41YYCoL7vPgLlHir4.mft (raw, json)
Hash identifier: TEtwm9ok+YqB21gM+254My6stltx7A9YzEgjW4fbcRE=
Subject key identifier: 7B:BC:58:6E:68:A1:82:90:32:7A:97:0C:EF:D9:CF:4F:4D:E5:7A:35
Authority key identifier: 06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE
Certificate issuer: /CN=A91490F7/serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
Manifest number: 01BC
Signing time: Fri 19 Dec 2025 02:14:52 +0000
Manifest this update: Fri 19 Dec 2025 02:14:52 +0000
Manifest next update: Fri 26 Dec 2025 02:14:52 +0000
Files and hashes: 1: BgI9tGNNXG41YYCoL7vPgLlHir4.crl (hash: Uig718zyAtOPxM9i1HpvahP3vNLCmx+83jdPtdEHNkY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl
rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91490F7, serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
Validity
Not Before: Dec 19 02:14:52 2025 GMT
Not After : Dec 26 02:14:52 2025 GMT
Subject: CN=6944b51c-d8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:3e:2e:68:29:ff:72:0e:c5:4a:d7:36:1a:
8e:1a:8b:42:39:59:11:ca:3c:95:3a:85:a9:19:21:
a9:b2:aa:18:f6:00:b8:65:2d:db:fb:e9:eb:73:12:
58:90:c0:2a:fa:54:bf:2d:fc:1e:dd:0e:53:d4:de:
3c:20:3a:35:e5:f0:41:d0:d4:3e:5a:35:fa:c4:08:
69:e0:5b:cc:b9:22:96:88:a1:fb:a1:a2:ea:4a:ba:
e7:71:3e:59:55:5b:c4:75:30:76:af:e0:e5:3a:4d:
50:30:6b:c2:d5:40:75:0b:8b:25:d7:10:f0:29:fd:
2c:8f:8e:49:1e:c8:d9:2b:b5:db:2a:e9:e0:ea:a0:
4f:7e:c6:22:6c:0d:88:d6:92:76:16:48:03:12:5a:
fd:dc:0d:fc:d2:d1:af:63:c1:b0:1e:9e:46:20:18:
13:77:ea:7b:ad:bd:f8:2d:db:ef:7e:cd:5a:2f:c7:
70:b6:de:c1:71:75:21:35:45:06:2f:cc:4a:1d:a0:
90:fc:64:ec:90:1b:3d:2e:02:ca:69:7e:1b:94:56:
54:f5:6c:f3:20:2d:a2:41:d7:3e:78:bc:e5:ee:b0:
f1:71:58:6c:4d:14:4f:b5:24:12:10:00:60:b6:06:
4c:a8:f4:43:92:ae:03:bd:4f:08:6e:5b:2b:e2:53:
bf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BC:58:6E:68:A1:82:90:32:7A:97:0C:EF:D9:CF:4F:4D:E5:7A:35
X509v3 Authority Key Identifier:
keyid:06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7b:18:38:22:9b:ca:ac:c2:c9:a5:27:7f:00:17:45:9b:37:
06:8a:16:85:cd:75:c4:0b:18:ab:b2:93:ce:96:b2:87:1e:a1:
ba:10:c1:a9:15:d7:cb:74:44:0c:c9:14:b2:7c:d2:de:c4:71:
f3:da:e8:a0:dd:ef:13:67:a5:94:2f:d1:2f:a1:4d:54:fb:5b:
1c:d7:77:e1:e8:80:a2:ef:96:f3:db:9b:f8:ec:31:2f:30:b1:
f3:ef:62:82:7e:bf:58:95:18:68:6e:43:b5:57:52:92:c9:96:
12:fe:f0:6a:63:bb:f7:00:04:a6:cc:ec:24:a7:7a:76:33:43:
cd:d3:98:d2:35:19:32:35:2d:c7:4c:a8:4d:aa:93:07:75:11:
70:90:58:2b:52:c8:72:0d:82:29:c8:26:2e:e7:73:99:79:4c:
bc:91:23:63:96:e1:d1:99:16:23:87:80:11:3e:58:43:bd:ed:
70:56:42:cb:a0:1c:92:46:c7:eb:31:9e:79:18:b0:02:e6:b5:
57:e3:20:f2:c8:91:31:02:8a:9c:88:90:07:33:eb:9d:3e:98:
9e:69:e7:b1:81:f5:86:23:35:5f:6f:0d:0d:51:b4:7e:7d:17:
2d:14:69:5b:9d:66:7c:b2:7a:f5:ff:ae:bf:73:a7:27:e7:de:
0f:d2:2a:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDkwRjcxMTAvBgNVBAUTKDA2MDIzREI0NjM0RDVDNkUzNTYxODBBODJGQkJDRjgw
Qjk0NzhBQkUwHhcNMjUxMjE5MDIxNDUyWhcNMjUxMjI2MDIxNDUyWjAYMRYwFAYD
VQQDDA02OTQ0YjUxYy1kOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApyE+Lmgp/3IOxUrXNhqOGotCOVkRyjyVOoWpGSGpsqoY9gC4ZS3b++nrcxJY
kMAq+lS/Lfwe3Q5T1N48IDo15fBB0NQ+WjX6xAhp4FvMuSKWiKH7oaLqSrrncT5Z
VVvEdTB2r+DlOk1QMGvC1UB1C4sl1xDwKf0sj45JHsjZK7XbKung6qBPfsYibA2I
1pJ2FkgDElr93A380tGvY8GwHp5GIBgTd+p7rb34Ldvvfs1aL8dwtt7BcXUhNUUG
L8xKHaCQ/GTskBs9LgLKaX4blFZU9WzzIC2iQdc+eLzl7rDxcVhsTRRPtSQSEABg
tgZMqPRDkq4DvU8Iblsr4lO/SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHu8WG5o
oYKQMnqXDO/Zz09N5Xo1MB8GA1UdIwQYMBaAFAYCPbRjTVxuNWGAqC+7z4C5R4q+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTBGNy9EOEQzQjRGMjM1
QTkxMUVFOTRCNDhENTdDNEY5QUUwMi9CZ0k5dEdOTlhHNDFZWUNvTDd2UGdMbEhp
cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JnSTl0R05OWEc0MVlZQ29MN3ZQZ0xsSGlyNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OTBGNy9EOEQzQjRGMjM1QTkxMUVFOTRCNDhENTdDNEY5QUUwMi9CZ0k5dEdOTlhH
NDFZWUNvTDd2UGdMbEhpcjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBsexg4IpvKrMLJpSd/ABdFmzcGihaFzXXECxirspPOlrKHHqG6EMGp
FdfLdEQMyRSyfNLexHHz2uig3e8TZ6WUL9EvoU1U+1sc13fh6ICi75bz25v47DEv
MLHz72KCfr9YlRhobkO1V1KSyZYS/vBqY7v3AASmzOwkp3p2M0PN05jSNRkyNS3H
TKhNqpMHdRFwkFgrUshyDYIpyCYu53OZeUy8kSNjluHRmRYjh4ARPlhDve1wVkLL
oBySRsfrMZ55GLAC5rVX4yDyyJExAoqciJAHM+udPpieaeexgfWGIzVfbw0NUbR+
fRctFGlbnWZ8snr1/66/c6cn594P0ioh
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:16 2025 by rpki-client