This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft File: Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json) Hash identifier: +7Y9R1r2uH5PvvaMDG7a61q+M8YS2sC+8lp4bRH5tMA= Subject key identifier: 1D:7C:7A:C0:A9:FF:C0:83:80:44:A2:C4:46:3E:48:CD:61:A5:39:D9 Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Certificate serial: 04E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft Manifest number: 19E9 Signing time: Sat 20 Dec 2025 16:35:21 +0000 Manifest this update: Sat 20 Dec 2025 16:35:21 +0000 Manifest next update: Sat 27 Dec 2025 16:35:21 +0000 Files and hashes: 1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: EUeMAXfvXYCyhCgKtgciMmI6KYPMmfk0VeZMMy7+XfU=) 2: 2A53DA54332011EF89CABD61C4F9AE02.roa (hash: XAFmHRo+hO35GWVsWHHscFE/9w85d60jx9W3Sf7aA0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1250 (0x4e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Validity Not Before: Dec 20 16:35:21 2025 GMT Not After : Dec 27 16:35:21 2025 GMT Subject: CN=6946d049-f4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7e:9a:ed:1c:11:b5:9b:be:45:73:6d:42:a5: 3d:ec:53:55:dd:b2:57:d4:60:d1:96:f4:39:74:f2: 24:e0:0c:1a:48:d5:9b:0e:b7:ff:08:9c:cf:ae:60: 07:e5:a9:45:6f:64:db:60:19:11:ba:45:0b:36:36: 6c:9f:1d:2b:6a:b9:ff:d6:33:5d:36:8f:06:08:70: 21:14:0f:ad:e1:81:24:8d:be:b8:10:1e:75:f6:58: af:cd:04:5c:81:3d:8f:3f:c6:22:7b:1b:a1:b8:92: fa:02:91:c4:52:0a:8b:de:0b:88:41:ae:36:8b:46: 41:ba:ae:ce:f2:fe:db:42:af:3c:70:cc:00:3a:1e: ce:36:f3:cc:c3:50:c2:c4:49:ce:ad:70:e6:0c:8a: 47:73:9d:59:4c:e2:23:3f:44:47:7d:4d:c9:23:66: 88:d7:95:61:02:39:d0:73:70:db:0b:35:8c:44:94: 18:bf:f7:dc:6a:91:e9:2f:db:05:6b:70:cb:96:00: a1:af:c0:33:2a:01:87:c8:33:f7:5d:38:10:b2:02: 12:17:20:d8:19:46:82:e5:0e:36:f5:c7:0d:20:60: 9d:6f:58:cb:c3:74:82:46:db:f0:5e:77:f5:44:30: 5a:47:c0:c7:ba:d0:49:3e:d5:87:2c:df:cb:ab:e7: 76:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7C:7A:C0:A9:FF:C0:83:80:44:A2:C4:46:3E:48:CD:61:A5:39:D9 X509v3 Authority Key Identifier: keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:72:11:a1:81:21:33:d6:cb:8e:ce:94:ff:8d:46:83:b2:c1: a3:79:8d:90:14:23:1b:4e:d1:ae:0f:e9:2e:e3:b1:b7:18:17: 83:87:78:71:92:1e:c5:66:44:94:41:03:69:5e:af:8c:81:e5: a2:46:83:f8:6a:53:c6:99:e1:c0:40:aa:53:f4:13:4c:e3:33: 0c:bb:4d:fd:1c:49:dc:a1:f5:e5:55:5a:c9:45:7a:d2:42:6c: a6:af:07:2c:d4:79:37:9e:cf:13:71:65:64:a3:21:31:b3:e2: f1:c4:b8:c2:1d:00:1c:a2:cd:6b:e7:56:81:51:3d:2d:36:1a: 89:23:6e:81:7d:e4:96:b2:3d:78:7e:d9:2d:2e:24:dd:fe:67: 0d:49:d2:7a:64:7f:22:7a:94:6f:4f:a0:5b:57:9b:84:25:cb: 08:77:c3:4a:52:26:0c:d8:bd:42:07:37:e2:54:d1:8f:a8:46: 61:1b:55:80:a5:e5:24:c7:57:c9:e0:64:d1:c1:a4:c3:51:f6: 43:04:97:bd:9f:fb:a8:f6:af:0b:c6:c4:15:4d:56:77:88:e7: cb:c6:84:ae:fb:41:b6:ae:e5:0b:75:5e:74:f9:97:28:95:ae: 23:8f:27:a2:09:54:1f:71:6a:f8:ca:b2:cd:a0:a0:db:7d:7f: 7a:8c:00:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKDA2MzdFNUIzOEM2MURGODNFQkIzMzAyMDkzQkI1NzZD QjMxRDlCMTAwHhcNMjUxMjIwMTYzNTIxWhcNMjUxMjI3MTYzNTIxWjAYMRYwFAYD VQQDDA02OTQ2ZDA0OS1mNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAun6a7RwRtZu+RXNtQqU97FNV3bJX1GDRlvQ5dPIk4AwaSNWbDrf/CJzPrmAH 5alFb2TbYBkRukULNjZsnx0rarn/1jNdNo8GCHAhFA+t4YEkjb64EB519livzQRc gT2PP8YiexuhuJL6ApHEUgqL3guIQa42i0ZBuq7O8v7bQq88cMwAOh7ONvPMw1DC xEnOrXDmDIpHc51ZTOIjP0RHfU3JI2aI15VhAjnQc3DbCzWMRJQYv/fcapHpL9sF a3DLlgChr8AzKgGHyDP3XTgQsgISFyDYGUaC5Q429ccNIGCdb1jLw3SCRtvwXnf1 RDBaR8DHutBJPtWHLN/Lq+d2bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB18esCp /8CDgESixEY+SM1hpTnZMB8GA1UdIwQYMBaAFAY35bOMYd+D67MwIJO7V2yzHZsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0UHJzekFnazd0WGJMTWRt eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JqZmxzNHhoMzRQcnN6QWdrN3RYYkxNZG14QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0 UHJzekFnazd0WGJMTWRteEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAchGhgSEz1suOzpT/jUaDssGjeY2QFCMbTtGuD+ku47G3GBeDh3hx kh7FZkSUQQNpXq+MgeWiRoP4alPGmeHAQKpT9BNM4zMMu039HEncofXlVVrJRXrS Qmymrwcs1Hk3ns8TcWVkoyExs+LxxLjCHQAcos1r51aBUT0tNhqJI26BfeSWsj14 ftktLiTd/mcNSdJ6ZH8iepRvT6BbV5uEJcsId8NKUiYM2L1CBzfiVNGPqEZhG1WA peUkx1fJ4GTRwaTDUfZDBJe9n/uo9q8LxsQVTVZ3iOfLxoSu+0G2ruULdV50+Zco la4jjyeiCVQfcWr4yrLNoKDbfX96jACU -----END CERTIFICATE-----Generated at Sun Dec 21 00:36:33 2025 by rpki-client