This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
File: bjpCzSsjnaPmWO-5fq0VsObt2qE.mft (raw, json)
Hash identifier: Ogv5fyR/Lo1z7YtsfNWkpqbkt5fabtYeox12/aXyQAU=
Subject key identifier: C4:E8:C6:85:51:E8:70:B7:D7:18:02:7B:80:9D:D0:15:B2:75:4C:FB
Authority key identifier: 6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1
Certificate issuer: /CN=A914AA58/serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
Certificate serial: 03DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
Manifest number: 03D9
Signing time: Thu 18 Dec 2025 23:51:10 +0000
Manifest this update: Thu 18 Dec 2025 23:51:09 +0000
Manifest next update: Thu 25 Dec 2025 23:51:09 +0000
Files and hashes: 1: bjpCzSsjnaPmWO-5fq0VsObt2qE.crl (hash: b+RjvadgbMNDmAzPAxt0nSqeT2Lgx77Yp6OTBpDQHcI=)
2: CC2E531EAA7811ECB6791A3EC4F9AE02.roa (hash: Mqskw9Y8RqndiVtB/sczxL2ZoSm43CtM51EkD9hWUXg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl
rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 989 (0x3dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AA58, serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
Validity
Not Before: Dec 18 23:51:09 2025 GMT
Not After : Dec 25 23:51:09 2025 GMT
Subject: CN=6944936e-1596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:39:ec:fa:24:e5:77:6e:b7:3c:b4:97:f5:
db:f2:b2:e7:d6:1e:02:64:8f:75:10:5b:79:58:99:
52:62:8f:b0:a0:98:2e:9b:3a:5e:73:1c:71:59:f8:
5c:16:71:5f:0e:e2:6f:c7:b8:e6:b6:8a:1e:5a:f7:
f0:3f:32:fb:aa:0f:14:9c:c0:b8:bb:46:61:0d:0c:
98:1c:c4:8c:71:04:59:64:a9:46:33:44:1e:2b:ed:
07:14:ec:7d:a5:4b:89:df:b4:26:ac:ad:d5:19:30:
9b:ff:f0:49:5c:0f:ed:1f:83:05:9c:70:52:c3:e3:
57:90:9a:6d:d6:14:38:73:0c:52:98:46:d2:3a:26:
4f:0e:a7:7d:83:f7:77:4e:b0:f4:9c:f3:49:4d:ab:
54:70:95:42:89:77:fe:46:55:29:02:64:64:cb:20:
ed:3e:3c:95:a2:e3:bc:92:3f:7d:80:5a:59:c5:65:
c4:5f:b7:06:a0:01:4e:a8:b2:44:9c:94:c2:f8:5f:
6c:4f:2b:1c:9d:ad:03:7f:4d:9b:68:5b:3a:3c:16:
e7:fb:7a:c2:5f:f3:4a:df:1c:6e:0c:7d:f1:e8:03:
57:df:4b:78:ce:4b:c6:90:f5:0b:98:27:fa:5e:cd:
37:29:de:cb:de:c8:cc:8e:a4:1b:3d:40:a8:3c:37:
de:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E8:C6:85:51:E8:70:B7:D7:18:02:7B:80:9D:D0:15:B2:75:4C:FB
X509v3 Authority Key Identifier:
keyid:6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0d:51:a1:ca:b6:5c:41:55:ac:ce:2b:97:8e:4e:0e:e9:e7:
8d:87:50:17:2e:8c:5f:cc:8e:85:e7:72:8d:ad:66:4b:d0:8e:
56:f1:ae:fa:09:fd:be:3f:aa:a1:50:07:9c:63:e2:69:be:7c:
c2:44:18:03:a4:5c:c7:58:b7:73:1d:18:82:1f:20:5b:c2:ce:
99:1f:c2:90:3c:1c:3e:d3:27:e0:43:49:7d:06:fd:ed:53:cb:
51:02:0d:fc:85:80:b5:bb:8a:4d:0c:ed:db:34:5f:eb:22:ee:
0f:98:43:50:69:95:47:77:4e:93:24:51:95:43:80:f0:fb:af:
24:98:f5:c2:97:92:45:aa:03:5e:67:3f:90:69:1c:c2:9c:a5:
e5:e5:cd:54:8a:d2:7a:43:3c:f9:28:73:61:3a:52:a5:01:10:
03:2f:a8:d9:15:ec:42:31:f6:6e:ea:df:67:a5:5a:f5:93:9a:
2c:cf:fc:0d:c0:03:ff:dd:25:4c:a7:61:a4:bc:70:4f:e6:5c:
25:c6:02:73:cc:10:5f:23:1d:8a:66:99:27:2e:c9:02:26:45:
df:84:11:8d:d2:96:bc:03:e8:a1:1c:e1:c3:7c:4f:46:29:a9:
49:6f:da:6e:b3:55:1a:63:46:e9:96:a3:83:0c:c1:77:77:47:
1f:de:8b:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEFBNTgxMTAvBgNVBAUTKDZFM0E0MkNEMkIyMzlEQTNFNjU4RUZCOTdFQUQxNUIw
RTZFRERBQTEwHhcNMjUxMjE4MjM1MTA5WhcNMjUxMjI1MjM1MTA5WjAYMRYwFAYD
VQQDDA02OTQ0OTM2ZS0xNTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqnQ57Pok5Xdutzy0l/Xb8rLn1h4CZI91EFt5WJlSYo+woJgumzpecxxxWfhc
FnFfDuJvx7jmtooeWvfwPzL7qg8UnMC4u0ZhDQyYHMSMcQRZZKlGM0QeK+0HFOx9
pUuJ37QmrK3VGTCb//BJXA/tH4MFnHBSw+NXkJpt1hQ4cwxSmEbSOiZPDqd9g/d3
TrD0nPNJTatUcJVCiXf+RlUpAmRkyyDtPjyVouO8kj99gFpZxWXEX7cGoAFOqLJE
nJTC+F9sTyscna0Df02baFs6PBbn+3rCX/NK3xxuDH3x6ANX30t4zkvGkPULmCf6
Xs03Kd7L3sjMjqQbPUCoPDferwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMToxoVR
6HC31xgCe4Cd0BWydUz7MB8GA1UdIwQYMBaAFG46Qs0rI52j5ljvuX6tFbDm7dqh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUE1OC8wRkRDQTZGRUFB
NzYxMUVDOEY3RDU2MzlDNEY5QUUwMi9ianBDelNzam5hUG1XTy01ZnEwVnNPYnQy
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JqcEN6U3NqbmFQbVdPLTVmcTBWc09idDJxRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QUE1OC8wRkRDQTZGRUFBNzYxMUVDOEY3RDU2MzlDNEY5QUUwMi9ianBDelNzam5h
UG1XTy01ZnEwVnNPYnQycUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBqDVGhyrZcQVWsziuXjk4O6eeNh1AXLoxfzI6F53KNrWZL0I5W8a76
Cf2+P6qhUAecY+JpvnzCRBgDpFzHWLdzHRiCHyBbws6ZH8KQPBw+0yfgQ0l9Bv3t
U8tRAg38hYC1u4pNDO3bNF/rIu4PmENQaZVHd06TJFGVQ4Dw+68kmPXCl5JFqgNe
Zz+QaRzCnKXl5c1UitJ6Qzz5KHNhOlKlARADL6jZFexCMfZu6t9npVr1k5osz/wN
wAP/3SVMp2GkvHBP5lwlxgJzzBBfIx2KZpknLskCJkXfhBGN0pa8A+ihHOHDfE9G
KalJb9pus1UaY0bplqODDMF3d0cf3osn
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:40 2025 by rpki-client