This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft File: BYQh3nB4BzBHPlzFRboK5dubTAo.mft (raw, json) Hash identifier: HlGkCuq3saimcRWrqvwZb+e7a1KoYPa0jEO4OGKGD40= Subject key identifier: 71:0E:03:D1:63:A0:93:3C:6A:A8:A1:79:E3:E9:AF:A4:0C:BC:1B:87 Authority key identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A Certificate issuer: /CN=A91862F7/serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Certificate serial: 0A00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft Manifest number: 09F1 Signing time: Thu 18 Dec 2025 17:06:50 +0000 Manifest this update: Thu 18 Dec 2025 17:06:49 +0000 Manifest next update: Thu 25 Dec 2025 17:06:49 +0000 Files and hashes: 1: BYQh3nB4BzBHPlzFRboK5dubTAo.crl (hash: 9M2uYmZ+Mh40RODL+XdvJlcDAH3yU5xtfM6H5MOHQqI=) 2: 7C4C4384CB6611F09E0E3B40C4F9AE02.roa (hash: Nv1ifUptgw8zNsdDdYCTgbUrGtv2q0szka3ov6j5kt8=) 3: 7B01065ECB6611F0911E3B40C4F9AE02.roa (hash: YieuAHHzYJ5baEXX21PBR2QHH93xrdjTpm19CxOM3R0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2560 (0xa00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F7, serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Validity Not Before: Dec 18 17:06:49 2025 GMT Not After : Dec 25 17:06:49 2025 GMT Subject: CN=694434a9-a62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:87:2c:5a:32:57:49:e4:33:74:11:98:c6:71: e5:d0:b2:ee:7d:40:71:74:fb:e5:d5:a5:ec:9f:b4: c9:38:70:0a:a6:c9:91:1d:17:6e:84:b7:30:dd:8c: 09:27:da:c8:5a:4d:07:87:65:5c:ad:d8:05:20:10: f2:74:04:24:4a:dc:4c:8e:0b:d1:82:d0:63:fc:94: 1b:7c:e2:3a:2e:1f:8f:5a:2f:c6:14:c1:3d:07:b8: b2:b4:dc:f4:5b:3f:73:05:68:bf:7c:92:0d:5e:00: ab:9b:a9:24:75:1a:02:f0:bb:52:a8:39:dd:c3:7a: f8:ae:4e:15:a6:21:20:1b:52:3d:d5:62:a3:a9:57: bd:f9:38:86:ce:99:fb:b1:5e:69:0d:cd:28:5e:8d: 5f:75:2f:2b:4b:d6:b3:e4:ae:46:ec:fe:0d:0d:bd: 78:89:70:fb:12:9c:e6:59:a5:99:4d:aa:b2:8f:dc: 97:eb:1a:1f:38:12:8b:ca:ef:61:bf:36:99:d5:2c: db:c1:2c:72:2f:91:98:bc:07:5b:7e:98:ca:78:4d: fc:31:ba:db:3f:a6:02:4b:06:c4:51:4f:98:1a:68: e0:2c:c5:c4:c2:bc:51:69:d2:a9:fa:da:e7:ea:11: b5:fe:99:4a:5c:03:3c:02:c0:8c:22:32:ba:ff:f4: 5d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0E:03:D1:63:A0:93:3C:6A:A8:A1:79:E3:E9:AF:A4:0C:BC:1B:87 X509v3 Authority Key Identifier: keyid:05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:31:59:54:9e:d1:36:11:76:f8:69:57:c9:b6:12:12:8f:14: 45:d1:09:61:f2:28:9b:ed:87:6e:cc:8a:2c:f4:06:77:c5:47: d0:c0:6d:11:e3:b1:c8:b7:5a:a8:b2:97:e2:b3:ea:1a:89:61: ae:1d:b1:1d:d2:05:cf:7a:0b:0a:a0:e5:0c:90:04:2d:3b:ec: 84:b5:17:d9:77:8b:e0:32:da:b9:d4:96:ed:f9:ef:fd:ed:e7: c4:3e:e8:19:92:06:30:53:b0:09:6a:80:86:a2:ae:06:79:38: 51:7b:d8:3f:6a:8f:1e:3e:82:f8:54:b6:43:e3:26:10:a0:b0: ac:5a:b8:1c:e8:0c:28:ca:32:22:23:2a:d8:1a:4b:7a:7e:b9: bc:0d:13:f5:71:b2:4f:c0:c9:0a:9d:27:46:40:f1:d6:ab:c3: 89:a2:59:1f:c4:58:db:6a:19:28:ff:9f:54:ff:17:76:97:83: 9d:6b:b7:4a:8c:c0:2a:22:17:4e:c7:d6:13:d1:72:93:0c:b5: 5e:07:40:36:74:37:5b:55:7e:7b:5b:57:38:a1:22:01:4a:4a: 31:3a:00:30:20:6e:81:fa:b1:aa:bd:c7:c3:3a:ab:d2:50:6e: 05:02:f9:87:51:08:48:8e:e8:33:c4:68:04:48:79:2d:5a:f0: fc:27:79:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjcxMTAvBgNVBAUTKDA1ODQyMURFNzA3ODA3MzA0NzNFNUNDNTQ1QkEwQUU1 REI5QjRDMEEwHhcNMjUxMjE4MTcwNjQ5WhcNMjUxMjI1MTcwNjQ5WjAYMRYwFAYD VQQDDA02OTQ0MzRhOS1hNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIcsWjJXSeQzdBGYxnHl0LLufUBxdPvl1aXsn7TJOHAKpsmRHRduhLcw3YwJ J9rIWk0Hh2VcrdgFIBDydAQkStxMjgvRgtBj/JQbfOI6Lh+PWi/GFME9B7iytNz0 Wz9zBWi/fJINXgCrm6kkdRoC8LtSqDndw3r4rk4VpiEgG1I91WKjqVe9+TiGzpn7 sV5pDc0oXo1fdS8rS9az5K5G7P4NDb14iXD7EpzmWaWZTaqyj9yX6xofOBKLyu9h vzaZ1SzbwSxyL5GYvAdbfpjKeE38MbrbP6YCSwbEUU+YGmjgLMXEwrxRadKp+trn 6hG1/plKXAM8AsCMIjK6//RdWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEOA9Fj oJM8aqiheePpr6QMvBuHMB8GA1UdIwQYMBaAFAWEId5weAcwRz5cxUW6CuXbm0wK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGNy81RUFDNjE0NDhG QTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6QkhQbHpGUmJvSzVkdWJU QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JZUWgzbkI0QnpCSFBsekZSYm9LNWR1YlRBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGNy81RUFDNjE0NDhGQTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6 QkhQbHpGUmJvSzVkdWJUQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHMVlUntE2EXb4aVfJthISjxRF0Qlh8iib7YduzIos9AZ3xUfQwG0R 47HIt1qospfis+oaiWGuHbEd0gXPegsKoOUMkAQtO+yEtRfZd4vgMtq51Jbt+e/9 7efEPugZkgYwU7AJaoCGoq4GeThRe9g/ao8ePoL4VLZD4yYQoLCsWrgc6AwoyjIi IyrYGkt6frm8DRP1cbJPwMkKnSdGQPHWq8OJolkfxFjbahko/59U/xd2l4Oda7dK jMAqIhdOx9YT0XKTDLVeB0A2dDdbVX57W1c4oSIBSkoxOgAwIG6B+rGqvcfDOqvS UG4FAvmHUQhIjugzxGgESHktWvD8J3mr -----END CERTIFICATE-----Generated at Sat Dec 20 16:04:01 2025 by rpki-client