This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft File: Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft (raw, json) Hash identifier: ZhQNc8vdb2ZAVxaOOAR8KmTWo7G1nQmgEBbTfy4QwMQ= Subject key identifier: 43:3E:4E:17:B8:1A:53:E7:65:E5:FA:A4:98:50:FF:BE:BA:B9:85:30 Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 Certificate issuer: /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft Manifest number: 019D Signing time: Fri 19 Dec 2025 02:32:35 +0000 Manifest this update: Fri 19 Dec 2025 02:32:35 +0000 Manifest next update: Fri 26 Dec 2025 02:32:35 +0000 Files and hashes: 1: Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl (hash: lFRWN3tqzSO2D0QcWf4Hv22gg5hUpA3voWitUUYTmrU=) 2: 6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (hash: p1VOahcTtw++gZyKyfXUEWsELNbDpFqNHKOXPfMWMSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37ED, serialNumber=071F8119171441802BE3261F15627DAF289DB336 Validity Not Before: Dec 19 02:32:35 2025 GMT Not After : Dec 26 02:32:35 2025 GMT Subject: CN=6944b943-3246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9a:bf:f4:ba:78:c4:ec:e2:27:83:45:e8:17: 2d:b0:0b:1f:2f:e7:f9:1c:8a:72:30:bd:a5:e4:8c: bf:ad:fb:e8:8c:b5:ee:6f:28:28:d8:8f:50:b7:7b: 67:4b:7c:69:d6:a2:fd:43:44:d7:cb:b1:2d:6c:d6: fb:f5:d3:f8:a7:6e:ec:70:cd:1f:18:fe:cd:43:e6: 14:61:eb:6d:08:f6:07:70:9d:2b:0b:07:05:a4:9f: b5:4b:f4:9e:1b:6c:9e:a4:f9:5e:95:4c:ab:33:df: 82:95:36:63:6e:2e:52:71:bb:71:98:ad:97:42:53: 21:0e:d4:d6:6f:06:4c:d5:0d:f9:b9:27:2a:b1:53: 2e:3b:c8:4a:35:d5:b5:5d:49:37:1a:76:ac:95:a9: 23:2e:95:58:3d:8b:c0:30:73:f2:77:e5:4e:a4:8a: 69:26:12:0c:86:e4:ae:87:53:2d:34:3b:5b:cb:16: a8:26:35:16:ac:d6:3c:1d:54:9f:c0:a7:9c:46:98: 9c:aa:30:aa:29:60:12:a5:5f:cf:4c:ce:17:df:b9: e2:ee:23:cd:e3:d6:2b:65:82:1c:b5:21:25:1c:9a: 39:a7:76:5a:06:03:b1:a5:c9:87:60:80:69:73:9e: a9:36:dd:64:08:87:ea:ba:95:3c:c8:dd:8a:d7:8f: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3E:4E:17:B8:1A:53:E7:65:E5:FA:A4:98:50:FF:BE:BA:B9:85:30 X509v3 Authority Key Identifier: keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:f5:fb:45:75:a8:fa:b6:07:4e:68:4a:15:d2:b6:95:d9:b4: a5:50:77:9d:60:69:ed:9c:d7:5f:bb:53:ef:58:3f:9a:c2:d2: ec:73:ec:db:87:8a:4f:bf:32:1d:e0:dd:ec:72:33:85:b5:b4: df:66:7a:a6:ce:93:57:8a:7b:13:7c:08:33:a3:ae:ef:18:56: bd:75:ab:27:f7:dc:19:a1:0b:d4:79:70:88:87:d6:dd:d9:35: b4:12:23:01:99:6d:53:ac:8b:d5:76:eb:f7:31:1f:aa:7b:c9: 56:01:67:03:c5:eb:53:96:32:40:ca:7e:de:e0:48:1a:db:09: a8:d9:65:cc:bb:62:69:db:0c:1d:51:95:92:c2:35:3f:a5:48: b6:26:6f:38:ec:07:2d:ff:2c:11:28:d7:18:03:32:c2:9b:57: 17:a3:ab:1b:34:11:36:a0:32:2e:75:c9:57:5c:b8:ac:de:4c: 03:e2:a8:c8:cc:c4:6c:77:e3:1e:65:d5:d3:39:5c:db:e0:1e: 34:01:5e:25:31:c9:9e:d5:5f:28:cd:3d:33:45:02:84:eb:59: 53:fc:83:ec:fa:c8:b2:ee:7d:de:a2:c6:d4:b7:41:90:b7:51: 50:0f:b1:b0:a5:d4:0d:df:6b:2b:78:f5:38:00:52:90:f8:84: 6a:a2:20:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3RUQxMTAvBgNVBAUTKDA3MUY4MTE5MTcxNDQxODAyQkUzMjYxRjE1NjI3REFG Mjg5REIzMzYwHhcNMjUxMjE5MDIzMjM1WhcNMjUxMjI2MDIzMjM1WjAYMRYwFAYD VQQDDA02OTQ0Yjk0My0zMjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZq/9Lp4xOziJ4NF6BctsAsfL+f5HIpyML2l5Iy/rfvojLXubygo2I9Qt3tn S3xp1qL9Q0TXy7EtbNb79dP4p27scM0fGP7NQ+YUYettCPYHcJ0rCwcFpJ+1S/Se G2yepPlelUyrM9+ClTZjbi5ScbtxmK2XQlMhDtTWbwZM1Q35uScqsVMuO8hKNdW1 XUk3GnaslakjLpVYPYvAMHPyd+VOpIppJhIMhuSuh1MtNDtbyxaoJjUWrNY8HVSf wKecRpicqjCqKWASpV/PTM4X37ni7iPN49YrZYIctSElHJo5p3ZaBgOxpcmHYIBp c56pNt1kCIfqupU8yN2K14+qzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEM+The4 GlPnZeX6pJhQ/766uYUwMB8GA1UdIwQYMBaAFAcfgRkXFEGAK+MmHxVifa8onbM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdFRC82REI5NTRBMjYy QTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZQXI0eVlmRldKOXJ5aWRz elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J4LUJHUmNVUVlBcjR5WWZGV0o5cnlpZHN6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdFRC82REI5NTRBMjYyQTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZ QXI0eVlmRldKOXJ5aWRzelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ9ftFdaj6tgdOaEoV0raV2bSlUHedYGntnNdfu1PvWD+awtLsc+zb h4pPvzId4N3scjOFtbTfZnqmzpNXinsTfAgzo67vGFa9dasn99wZoQvUeXCIh9bd 2TW0EiMBmW1TrIvVduv3MR+qe8lWAWcDxetTljJAyn7e4Ega2wmo2WXMu2Jp2wwd UZWSwjU/pUi2Jm847Act/ywRKNcYAzLCm1cXo6sbNBE2oDIudclXXLis3kwD4qjI zMRsd+MeZdXTOVzb4B40AV4lMcme1V8ozT0zRQKE61lT/IPs+siy7n3eosbUt0GQ t1FQD7GwpdQN32srePU4AFKQ+IRqoiAm -----END CERTIFICATE-----Generated at Fri Dec 19 23:51:13 2025 by rpki-client