This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft
File: 1BO-Gf_T9trcEjTNxhmyQy6oA08.mft (raw, json)
Hash identifier: v5BHDSfAx/f7PYL2zQkrwoXYzGdPuohbhCXr59GrFOM=
Subject key identifier: 69:1A:5A:3E:F3:9F:5C:98:C0:8B:ED:F2:7F:86:65:2B:3B:95:6A:5A
Authority key identifier: D4:13:BE:19:FF:D3:F6:DA:DC:12:34:CD:C6:19:B2:43:2E:A8:03:4F
Certificate issuer: /CN=A91913D7/serialNumber=D413BE19FFD3F6DADC1234CDC619B2432EA8034F
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft
Manifest number: 0B
Signing time: Fri 19 Dec 2025 06:57:18 +0000
Manifest this update: Fri 19 Dec 2025 06:57:17 +0000
Manifest next update: Fri 26 Dec 2025 06:57:17 +0000
Files and hashes: 1: 1BO-Gf_T9trcEjTNxhmyQy6oA08.crl (hash: al1kBxGGID0n7XgRn1FqcNNwnoOmxDzAi7ss8XxS+DQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.crl
rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91913D7, serialNumber=D413BE19FFD3F6DADC1234CDC619B2432EA8034F
Validity
Not Before: Dec 19 06:57:17 2025 GMT
Not After : Dec 26 06:57:17 2025 GMT
Subject: CN=6944f74e-909a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:53:41:d1:73:df:45:a7:e5:ba:c7:62:a0:
69:bb:29:56:ca:65:d7:13:88:6d:d2:18:6c:99:b9:
b3:29:d5:9d:9f:57:db:a0:1c:98:61:ad:05:3a:03:
86:df:4d:99:f7:0b:cd:cf:f8:c5:d0:b9:f0:18:3b:
bb:25:df:3a:9a:9d:c4:26:7b:4c:7f:96:e4:f9:b7:
d1:26:d5:91:95:ea:c8:bb:79:ce:e0:41:de:33:62:
9c:22:40:a7:61:21:df:df:cf:bd:d3:eb:4f:2e:9e:
d5:cb:82:3b:7c:cb:a0:e2:78:7a:b8:1b:70:e6:3f:
5e:e3:03:98:28:38:1d:ae:c3:20:94:2d:e4:8e:c6:
1d:a7:db:20:7f:21:52:ae:86:78:95:c2:28:e5:39:
34:20:b4:84:1d:6f:ce:52:99:ad:03:e5:89:8a:14:
64:b6:33:20:ed:0a:fe:ee:e0:1c:b2:93:22:66:57:
8f:7d:ae:66:9a:e1:ab:cd:b8:d9:24:9a:a4:9a:b9:
39:83:eb:1c:db:a0:be:74:36:45:3f:10:c3:09:a3:
21:cb:ab:e8:5b:1f:2e:64:af:aa:c6:8d:0c:bd:0e:
24:4a:83:2b:ee:08:19:26:f1:a5:5b:2f:e1:b4:d6:
86:60:34:34:fa:2f:07:db:19:7c:b1:90:ab:85:97:
b0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1A:5A:3E:F3:9F:5C:98:C0:8B:ED:F2:7F:86:65:2B:3B:95:6A:5A
X509v3 Authority Key Identifier:
keyid:D4:13:BE:19:FF:D3:F6:DA:DC:12:34:CD:C6:19:B2:43:2E:A8:03:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:8f:69:86:a9:77:82:8a:2a:75:70:42:73:ff:e6:16:87:3a:
98:52:d1:90:dc:54:6f:b6:5f:15:ee:32:f8:fc:9f:b9:37:b6:
cf:9c:0d:92:ed:8f:33:b7:16:a5:20:70:e8:a8:99:7e:de:41:
c4:da:33:b5:09:9d:5f:8b:2a:e0:4f:95:af:7f:f3:c0:5e:a9:
a0:62:93:f3:ba:60:6c:64:66:e4:56:54:7a:6d:b2:77:b4:f7:
e0:0e:69:ab:53:a3:81:49:32:ff:b9:11:7a:28:55:cc:c0:22:
ec:da:bd:5b:9c:a2:01:4f:e3:99:f3:ae:24:19:d1:1d:a2:1d:
e1:72:54:61:9d:85:7a:ea:e4:b6:76:99:3c:f0:96:a4:5f:7b:
25:7b:dd:b0:a6:d1:e1:c4:c8:72:5e:7f:d2:12:1b:d3:f9:2a:
31:ad:e5:91:6a:1f:1a:f1:dc:15:f7:64:e4:a3:8a:6f:96:25:
0d:93:66:41:8e:91:22:9f:b0:59:99:3d:68:96:2b:8d:5e:e1:
3b:0c:05:1f:49:22:e5:76:e2:f5:8a:7b:9e:bc:cf:90:a5:6c:
12:39:83:11:b8:0a:ea:57:21:57:6c:71:85:dd:ef:b2:7c:79:
10:5d:b2:1d:1a:e2:17:d3:0f:9f:3d:79:ae:80:33:6a:a2:47:
4d:4b:36:d2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MTNENzExMC8GA1UEBRMoRDQxM0JFMTlGRkQzRjZEQURDMTIzNENEQzYxOUIyNDMy
RUE4MDM0RjAeFw0yNTEyMTkwNjU3MTdaFw0yNTEyMjYwNjU3MTdaMBgxFjAUBgNV
BAMMDTY5NDRmNzRlLTkwOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCq51NB0XPfRaflusdioGm7KVbKZdcTiG3SGGyZubMp1Z2fV9ugHJhhrQU6A4bf
TZn3C83P+MXQufAYO7sl3zqancQme0x/luT5t9Em1ZGV6si7ec7gQd4zYpwiQKdh
Id/fz73T608untXLgjt8y6DieHq4G3DmP17jA5goOB2uwyCULeSOxh2n2yB/IVKu
hniVwijlOTQgtIQdb85Sma0D5YmKFGS2MyDtCv7u4ByykyJmV499rmaa4avNuNkk
mqSauTmD6xzboL50NkU/EMMJoyHLq+hbHy5kr6rGjQy9DiRKgyvuCBkm8aVbL+G0
1oZgNDT6LwfbGXyxkKuFl7BPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaRpaPvOf
XJjAi+3yf4ZlKzuValowHwYDVR0jBBgwFoAU1BO+Gf/T9trcEjTNxhmyQy6oA08w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxM0Q3Lzc5MTMyNEI4Q0U4
QTExRjBBQjRCRDc2OUM0RjlBRTAyLzFCTy1HZl9UOXRyY0VqVE54aG15UXk2b0Ew
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMUJPLUdmX1Q5dHJjRWpUTnhobXlReTZvQTA4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx
M0Q3Lzc5MTMyNEI4Q0U4QTExRjBBQjRCRDc2OUM0RjlBRTAyLzFCTy1HZl9UOXRy
Y0VqVE54aG15UXk2b0EwOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAGPaYapd4KKKnVwQnP/5haHOphS0ZDcVG+2XxXuMvj8n7k3ts+cDZLt
jzO3FqUgcOiomX7eQcTaM7UJnV+LKuBPla9/88BeqaBik/O6YGxkZuRWVHptsne0
9+AOaatTo4FJMv+5EXooVczAIuzavVucogFP45nzriQZ0R2iHeFyVGGdhXrq5LZ2
mTzwlqRfeyV73bCm0eHEyHJef9ISG9P5KjGt5ZFqHxrx3BX3ZOSjim+WJQ2TZkGO
kSKfsFmZPWiWK41e4TsMBR9JIuV24vWKe568z5ClbBI5gxG4CupXIVdscYXd77J8
eRBdsh0a4hfTD589ea6AM2qiR01LNtI=
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:45:45 2025 by rpki-client