This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: aJMRFvw6rGUNUywrHz0PP0DukooED/eRBCCOrzzp24U= Subject key identifier: B0:1D:2A:B9:F1:85:DD:FA:D3:45:4C:54:37:35:4E:A5:7A:72:2E:EC Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: A5 Signing time: Fri 19 Dec 2025 05:23:31 +0000 Manifest this update: Fri 19 Dec 2025 05:23:31 +0000 Manifest next update: Fri 26 Dec 2025 05:23:31 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: 4f0zKY8inxt7TqdG1IC94evqYBDXPmW78pZx24+VCMU=) 2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: /RmfZz46so9ge+fbPNaFv77MZSPZTzTOQnyx59sNwag=) 3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: b+8Vf+1PI1yNyvvstVRxJPifoMZ8KqBIQc0NBIzO5qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Validity Not Before: Dec 19 05:23:31 2025 GMT Not After : Dec 26 05:23:31 2025 GMT Subject: CN=6944e153-8d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:23:05:85:62:9b:3d:19:59:58:89:1d:c9:6e: 7e:b0:05:7d:b8:0b:4d:39:e5:6d:b5:dd:2d:ba:01: f3:27:6b:e1:c2:f6:bc:01:b2:fb:6f:f5:9a:39:ab: ff:d9:52:33:ee:be:15:6c:6e:25:72:67:f8:1f:ef: 49:b4:75:f7:56:2e:cb:00:ce:7e:c5:64:ad:b8:59: 7e:87:ae:b1:b2:62:b5:a2:01:59:fa:1e:6c:48:0f: 5d:af:ae:8d:1a:3f:1b:4a:7f:97:fd:50:9d:58:07: 7f:c0:18:61:31:f4:c5:64:f3:76:f7:5d:f9:2e:6c: c9:14:03:8c:f0:c0:03:ec:7a:2e:df:40:12:c4:5d: 79:5c:56:d4:1e:0f:74:26:39:f4:d9:dc:44:c5:3a: f2:f4:da:ad:9c:31:d1:97:f0:83:e8:94:54:46:83: 9e:e4:00:5a:d6:30:80:95:f7:5c:ef:da:6d:b8:3b: 39:e8:e4:72:38:ba:c8:79:e3:dc:94:56:2d:91:7a: f8:b4:fe:ee:e7:6c:28:c9:2e:e5:e1:ec:61:9e:93: b0:35:ba:a2:6c:de:9c:48:c5:f9:bb:f8:05:01:9f: b4:49:41:27:e7:31:f1:41:89:18:1e:dc:7c:0c:f5: 37:c7:8d:fb:5e:c1:c0:9f:b1:32:4a:fa:ac:8e:46: bd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1D:2A:B9:F1:85:DD:FA:D3:45:4C:54:37:35:4E:A5:7A:72:2E:EC X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:50:57:fd:22:af:16:e6:50:1e:d5:17:01:03:a3:a7:dc:92: cb:17:83:38:38:9e:4b:17:c6:6b:67:c6:73:b1:2e:98:49:2b: 1d:30:a6:bf:29:55:5b:93:fb:75:11:b3:a4:01:c1:35:b1:d0: 07:3f:82:fd:13:1a:32:3a:ed:6f:65:ac:10:11:80:54:73:ea: b2:5e:86:d9:b9:78:f9:29:d2:be:ee:a2:63:72:79:a9:08:e9: 71:ec:99:d7:87:30:71:06:8b:d3:1f:42:24:87:12:fd:1f:be: 5a:80:45:59:ba:0d:4e:c7:b1:c5:d5:a3:6d:dd:8e:29:77:e2: 6d:a7:46:44:23:b4:8b:44:35:dd:aa:03:4f:1d:e8:90:c4:4d: b5:a2:ac:b9:00:0c:55:bf:e4:96:d7:ea:e9:49:ea:43:21:14: d5:67:98:3d:ff:c6:5b:94:fe:4c:82:2a:77:c4:65:3d:f5:20: 78:c3:b2:38:04:6b:7e:1c:75:b1:65:f5:30:97:a9:62:b6:25: ef:cd:ca:46:8a:ad:68:7c:fd:0c:54:aa:4c:5a:15:06:65:e5: 73:03:64:5a:b0:41:8b:71:9d:99:3c:04:18:b4:c5:26:e3:6d: 5c:f6:4e:0a:5d:ca:ae:f0:16:ef:8e:50:0a:18:1b:c7:26:d8: a3:fc:ea:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QzExMTAvBgNVBAUTKDA0N0VGMUExQ0Y2NTk2NjM0OTg2Njc2NzY1NTY0OEVF RjkxMTBDNUEwHhcNMjUxMjE5MDUyMzMxWhcNMjUxMjI2MDUyMzMxWjAYMRYwFAYD VQQDDA02OTQ0ZTE1My04ZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyMFhWKbPRlZWIkdyW5+sAV9uAtNOeVttd0tugHzJ2vhwva8AbL7b/WaOav/ 2VIz7r4VbG4lcmf4H+9JtHX3Vi7LAM5+xWStuFl+h66xsmK1ogFZ+h5sSA9dr66N Gj8bSn+X/VCdWAd/wBhhMfTFZPN29135LmzJFAOM8MAD7Hou30ASxF15XFbUHg90 Jjn02dxExTry9NqtnDHRl/CD6JRURoOe5ABa1jCAlfdc79ptuDs56ORyOLrIeePc lFYtkXr4tP7u52woyS7l4exhnpOwNbqibN6cSMX5u/gFAZ+0SUEn5zHxQYkYHtx8 DPU3x437XsHAn7EySvqsjka9xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAdKrnx hd3600VMVDc1TqV6ci7sMB8GA1UdIwQYMBaAFAR+8aHPZZZjSYZnZ2VWSO75EQxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRDMS8zNjQ0ODg3QUU5 QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxtTkpobWRuWlZaSTd2a1JE Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRDMS8zNjQ0ODg3QUU5QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxt TkpobWRuWlZaSTd2a1JERm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4UFf9Iq8W5lAe1RcBA6On3JLLF4M4OJ5LF8ZrZ8ZzsS6YSSsdMKa/ KVVbk/t1EbOkAcE1sdAHP4L9ExoyOu1vZawQEYBUc+qyXobZuXj5KdK+7qJjcnmp COlx7JnXhzBxBovTH0IkhxL9H75agEVZug1Ox7HF1aNt3Y4pd+Jtp0ZEI7SLRDXd qgNPHeiQxE21oqy5AAxVv+SW1+rpSepDIRTVZ5g9/8ZblP5Mgip3xGU99SB4w7I4 BGt+HHWxZfUwl6litiXvzcpGiq1ofP0MVKpMWhUGZeVzA2RasEGLcZ2ZPAQYtMUm 421c9k4KXcqu8BbvjlAKGBvHJtij/Ors -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:55 2025 by rpki-client