This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json) Hash identifier: 3X6EudpgAIaFg4M9P0DVjUm7KPRQuD3VUzTViwSEAUQ= Subject key identifier: C0:D1:B5:88:01:2F:E8:C1:78:82:A3:97:83:63:C0:35:89:7E:F7:FA Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Certificate serial: 05E8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft Manifest number: 05D5 Signing time: Sat 20 Dec 2025 18:57:57 +0000 Manifest this update: Sat 20 Dec 2025 18:57:56 +0000 Manifest next update: Sat 27 Dec 2025 18:57:56 +0000 Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: 7X0kStkvxcJbv/7dSOHT8zbO/tyYzDxImQ43Xjutfo8=) 2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: hN1FG4yB+En2c4wj8yUNEIMBBFanGUa7r/bmCbomayU=) 3: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: r9rxwsZy05OBv79BaleZs2CDNDVKsWtQPtZMqmB3o+8=) 4: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: MEl6w5nE9WmS9IMiK++pW3U+fqzMAGds8O/KdUZBrWg=) 5: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: /T6Cx82NX6eIVhHP8WlrC3rkE3NEqsy8y14HZ45ur88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Validity Not Before: Dec 20 18:57:56 2025 GMT Not After : Dec 27 18:57:56 2025 GMT Subject: CN=6946f1b4-0207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:d1:44:5d:da:f3:ee:b3:76:ed:c2:d9:97: d4:03:58:7e:fb:f2:33:3c:9c:82:da:1d:af:93:4b: 6c:7c:97:8f:db:4d:52:ba:50:1c:8b:13:e9:85:da: 05:42:2d:a0:ea:ec:69:f5:3c:ee:af:6a:f6:14:37: 1c:23:fc:88:85:4b:ac:0f:6a:9c:fb:fe:4a:5c:b6: d7:f3:d7:4b:59:1d:7e:f8:b2:73:d0:79:23:16:3d: 1d:0c:99:7d:3b:c1:47:d6:cf:cb:2c:27:e1:56:73: 75:f9:7c:f4:dc:0d:1f:3b:0b:36:c1:bc:62:57:11: 74:6b:41:33:d9:fa:7e:ab:ba:ad:85:7a:4f:4e:6b: 47:8d:09:18:14:ce:2f:5a:3c:a4:64:f7:55:7e:16: 89:cc:a3:ab:ca:f5:8a:72:14:2a:4f:d9:69:15:c9: 49:eb:ba:69:ac:cd:e5:79:26:50:7e:e4:64:97:64: 6b:06:0c:36:16:5c:4a:8a:d9:a1:ed:38:44:9c:6d: d1:28:68:e6:97:93:e1:dd:ac:50:17:f7:6e:24:14: cc:35:ea:e1:80:2a:27:2f:ad:43:8c:1d:40:fd:41: 76:af:e2:48:e6:f6:7e:b3:52:60:b4:92:00:50:86: 53:35:76:cb:78:0c:af:c1:99:a1:4c:e4:cb:b3:61: 4d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D1:B5:88:01:2F:E8:C1:78:82:A3:97:83:63:C0:35:89:7E:F7:FA X509v3 Authority Key Identifier: keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:c2:28:e9:cc:67:31:ed:aa:3e:c7:8f:ba:bd:3e:d9:aa:3d: 92:5f:f5:4a:c7:5a:f3:14:b4:5f:1f:7b:bf:da:14:b8:74:3d: 32:cd:e5:2a:66:a9:db:4f:28:1c:f6:ee:48:fe:18:67:09:4a: 2a:1d:ae:f9:b4:33:01:6d:1e:c4:82:9f:6e:ef:ef:5a:8d:c8: 77:f5:fc:3f:77:29:ff:64:db:4a:be:d2:e2:74:ff:1e:23:be: a3:53:b8:6f:aa:62:5d:b3:2d:d8:8d:70:09:62:f2:e6:f4:9c: 35:75:55:cf:89:d6:49:5d:ef:3b:57:07:07:6d:75:84:2c:7f: 56:1f:10:07:c8:c7:4f:39:f1:d1:0b:ac:17:cc:b9:ab:e2:c7: 42:a0:5f:9a:68:32:b2:a3:b6:bd:34:0f:85:bb:53:87:bb:8c: 55:f1:ac:21:ee:e5:6e:33:7d:97:86:aa:73:3c:63:40:63:a5: 75:ae:8d:c9:e4:19:c1:5c:49:69:87:09:a7:a7:5f:de:02:0c: 1d:8e:db:25:bb:93:06:d1:ce:f5:13:dd:58:58:59:69:70:20: 68:39:1f:4b:54:d4:06:3b:e3:48:d6:ea:89:ac:df:fe:97:64: 72:56:44:d8:e0:dd:f3:31:64:f1:68:70:0f:18:0a:bc:de:39: 38:9c:d4:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE RUY4QzNEM0IwHhcNMjUxMjIwMTg1NzU2WhcNMjUxMjI3MTg1NzU2WjAYMRYwFAYD VQQDDA02OTQ2ZjFiNC0wMjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08nRRF3a8+6zdu3C2ZfUA1h++/IzPJyC2h2vk0tsfJeP201SulAcixPphdoF Qi2g6uxp9Tzur2r2FDccI/yIhUusD2qc+/5KXLbX89dLWR1++LJz0HkjFj0dDJl9 O8FH1s/LLCfhVnN1+Xz03A0fOws2wbxiVxF0a0Ez2fp+q7qthXpPTmtHjQkYFM4v WjykZPdVfhaJzKOryvWKchQqT9lpFclJ67pprM3leSZQfuRkl2RrBgw2FlxKitmh 7ThEnG3RKGjml5Ph3axQF/duJBTMNerhgConL61DjB1A/UF2r+JI5vZ+s1JgtJIA UIZTNXbLeAyvwZmhTOTLs2FNtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDRtYgB L+jBeIKjl4NjwDWJfvf6MB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC8wQzQ3NDkwQUVBQjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVf WXA4ZUZ6aGZQZ19lLU1QVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGwijpzGcx7ao+x4+6vT7Zqj2SX/VKx1rzFLRfH3u/2hS4dD0yzeUq ZqnbTygc9u5I/hhnCUoqHa75tDMBbR7Egp9u7+9ajch39fw/dyn/ZNtKvtLidP8e I76jU7hvqmJdsy3YjXAJYvLm9Jw1dVXPidZJXe87VwcHbXWELH9WHxAHyMdPOfHR C6wXzLmr4sdCoF+aaDKyo7a9NA+Fu1OHu4xV8awh7uVuM32XhqpzPGNAY6V1ro3J 5BnBXElphwmnp1/eAgwdjtslu5MG0c71E91YWFlpcCBoOR9LVNQGO+NI1uqJrN/+ l2RyVkTY4N3zMWTxaHAPGAq83jk4nNRc -----END CERTIFICATE-----Generated at Sat Dec 20 21:10:27 2025 by rpki-client