This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft File: BKM4-nsSbgfA74urj33BycGsMiE.mft (raw, json) Hash identifier: YPgB4ykeTlckWnp4GctDXc/zvJlg7eIGyX3Ey9z/jwE= Subject key identifier: A4:CA:12:A8:14:6B:43:39:0F:EA:D8:5B:A3:EC:12:43:2E:DF:49:23 Authority key identifier: 04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21 Certificate issuer: /CN=A91C146D/serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft Manifest number: 97 Signing time: Thu 01 Jan 2026 05:58:12 +0000 Manifest this update: Thu 01 Jan 2026 05:58:11 +0000 Manifest next update: Thu 08 Jan 2026 05:58:11 +0000 Files and hashes: 1: BKM4-nsSbgfA74urj33BycGsMiE.crl (hash: 6hsDgA9qKSHbRoG8vHkgpQ7AT40n85HCIxoLIHX2Xbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 05:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C146D, serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221 Validity Not Before: Jan 1 05:58:11 2026 GMT Not After : Jan 8 05:58:11 2026 GMT Subject: CN=69560cf4-5cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:cf:6c:2a:b0:a6:10:00:d4:d1:55:2c:59:06: c8:c8:3f:2b:1a:0b:c7:d3:2b:fa:be:22:2e:8f:ae: 4e:cd:75:10:87:c9:77:60:7a:52:b6:1c:68:5a:aa: 49:e5:0d:3f:40:ed:56:c5:c2:e0:26:95:2e:1b:90: 45:26:48:db:12:7c:8a:28:df:2a:a8:3c:e6:a6:86: 67:af:cd:e4:4b:52:8f:99:eb:c6:a7:b4:99:1c:67: 0c:05:b2:d6:a1:3d:10:c9:91:00:a0:69:92:e5:f3: 81:0f:40:0a:e0:9f:23:26:5c:6d:c1:76:ba:9c:b8: ab:c9:61:5b:cc:75:8d:34:c7:3a:b6:b5:b9:f9:29: ca:1c:9d:c7:73:fe:cd:16:50:71:c5:51:2e:11:74: 78:f7:4a:a5:d4:cc:a4:af:8d:25:d7:4e:15:5f:d4: c9:6f:1e:1f:99:c4:f9:71:f6:87:59:07:64:6b:3a: b1:17:a0:68:b2:28:50:dd:39:14:05:b8:07:e2:3e: d7:65:4b:9f:da:33:26:89:08:c7:9c:d2:fd:a4:77: a9:1b:a2:07:e2:7c:18:d7:74:f7:9f:81:24:6c:78: d7:d3:f9:a3:a0:3e:c2:c6:3d:8e:f1:5c:57:fd:84: 7b:9d:05:c6:07:71:97:6d:74:2a:81:58:b7:48:10: 30:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CA:12:A8:14:6B:43:39:0F:EA:D8:5B:A3:EC:12:43:2E:DF:49:23 X509v3 Authority Key Identifier: keyid:04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:15:09:34:41:71:c0:98:ad:e2:7b:10:23:8b:df:a5:33:c7: ef:1e:a0:5b:da:90:ca:c1:b3:b3:97:15:08:f8:72:9c:85:8e: 22:02:b5:3f:75:de:44:09:00:ba:04:45:06:ea:e6:fd:c9:c3: 5a:7f:f3:08:f8:39:8f:e9:b8:35:a3:5c:85:55:9f:64:18:c1: fa:8d:41:b6:29:21:19:1a:c7:03:f9:aa:3e:60:11:21:09:4b: ec:b3:46:db:3f:8f:5d:3d:57:e5:55:c7:9f:ce:49:a2:36:00: 62:1d:e9:62:58:e2:5d:2f:c1:59:1f:7f:3c:1f:5a:fe:1a:b4: 03:e9:83:0e:b9:ee:31:ce:c3:da:fa:6a:e6:59:59:87:87:b5: 54:a6:78:52:0d:a7:ea:03:85:9b:6c:50:cc:08:6c:24:fc:49: a4:5c:0d:2d:2d:65:c8:0a:91:63:1a:b0:da:bd:85:a2:d7:71: d5:1f:ce:43:db:92:88:4e:70:45:2f:ee:43:68:2c:2b:be:38: 0d:15:c4:5c:2f:84:d3:0e:2f:ce:7c:3c:aa:03:c7:08:57:19: 5a:57:5e:0f:18:11:89:20:02:39:5a:f9:fd:ce:f0:e3:40:41: 76:f2:9a:49:47:3b:f5:ad:71:64:2a:b0:c4:df:10:47:ed:21: 3a:a6:70:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE0NkQxMTAvBgNVBAUTKDA0QTMzOEZBN0IxMjZFMDdDMEVGOEJBQjhGN0RDMUM5 QzFBQzMyMjEwHhcNMjYwMTAxMDU1ODExWhcNMjYwMTA4MDU1ODExWjAYMRYwFAYD VQQDDA02OTU2MGNmNC01Y2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7M9sKrCmEADU0VUsWQbIyD8rGgvH0yv6viIuj65OzXUQh8l3YHpSthxoWqpJ 5Q0/QO1WxcLgJpUuG5BFJkjbEnyKKN8qqDzmpoZnr83kS1KPmevGp7SZHGcMBbLW oT0QyZEAoGmS5fOBD0AK4J8jJlxtwXa6nLiryWFbzHWNNMc6trW5+SnKHJ3Hc/7N FlBxxVEuEXR490ql1Mykr40l104VX9TJbx4fmcT5cfaHWQdkazqxF6BosihQ3TkU BbgH4j7XZUuf2jMmiQjHnNL9pHepG6IH4nwY13T3n4EkbHjX0/mjoD7Cxj2O8VxX /YR7nQXGB3GXbXQqgVi3SBAwQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTKEqgU a0M5D+rYW6PsEkMu30kjMB8GA1UdIwQYMBaAFASjOPp7Em4HwO+Lq499wcnBrDIh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTQ2RC9GNEQ1QTY3RTAw MzcxMUYwQkJENzI0NzVDNEY5QUUwMi9CS000LW5zU2JnZkE3NHVyajMzQnljR3NN aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLTTQtbnNTYmdmQTc0dXJqMzNCeWNHc01pRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTQ2RC9GNEQ1QTY3RTAwMzcxMUYwQkJENzI0NzVDNEY5QUUwMi9CS000LW5zU2Jn ZkE3NHVyajMzQnljR3NNaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQFQk0QXHAmK3iexAji9+lM8fvHqBb2pDKwbOzlxUI+HKchY4iArU/ dd5ECQC6BEUG6ub9ycNaf/MI+DmP6bg1o1yFVZ9kGMH6jUG2KSEZGscD+ao+YBEh CUvss0bbP49dPVflVcefzkmiNgBiHeliWOJdL8FZH388H1r+GrQD6YMOue4xzsPa +mrmWVmHh7VUpnhSDafqA4WbbFDMCGwk/EmkXA0tLWXICpFjGrDavYWi13HVH85D 25KITnBFL+5DaCwrvjgNFcRcL4TTDi/OfDyqA8cIVxlaV14PGBGJIAI5Wvn9zvDj QEF28ppJRzv1rXFkKrDE3xBH7SE6pnAo -----END CERTIFICATE-----Generated at Sat Jan 3 02:20:51 2026 by rpki-client