This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json) Hash identifier: CXkgVFbHqSk8ESkVKoFQTdagfl2VLhVavJQSnKm/MOo= Subject key identifier: BC:F2:C8:3B:32:C5:3F:9B:2B:23:74:25:EE:F1:A9:82:2C:26:3F:95 Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Certificate serial: 0A02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft Manifest number: 09F4 Signing time: Mon 22 Dec 2025 19:18:36 +0000 Manifest this update: Mon 22 Dec 2025 19:18:36 +0000 Manifest next update: Mon 29 Dec 2025 19:18:36 +0000 Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: Osjt3Rrvtg7fzyGFSNGY7FUE3tlW4yAqqIm4Mo/IK4E=) 2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: dpLf2qBFe220x5GKZk4KYPgV5wQJtggmyE0D/YCjeAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2562 (0xa02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Validity Not Before: Dec 22 19:18:36 2025 GMT Not After : Dec 29 19:18:36 2025 GMT Subject: CN=6949998c-031d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:8c:07:d9:34:5d:df:23:7b:1a:a5:c0:4b:dc: 35:1c:e2:45:a7:9c:cd:ff:2e:d5:bd:1e:2d:63:29: 1a:c5:74:8f:54:02:81:f3:74:5c:97:c0:26:86:88: de:46:76:b1:26:6c:3b:18:31:1c:23:75:46:d7:e3: 9c:df:9b:fa:34:3e:3a:60:77:bb:87:b5:70:bc:a4: 7d:0d:3d:66:9a:93:43:ce:b1:62:bd:79:9d:04:4f: bf:ee:5f:76:5b:f9:8f:04:51:03:7b:bb:a0:57:cd: ec:ad:d9:ff:3d:be:cf:3e:51:76:0e:39:c1:98:c6: f7:db:37:97:24:27:da:90:06:3f:3c:f4:90:8c:c3: 29:8e:49:0d:61:b7:e5:c5:16:2e:97:18:90:5c:36: cb:a8:02:01:82:60:1f:5c:c3:09:ca:0d:e3:de:82: e2:2f:12:b4:74:33:a4:2c:88:27:67:1b:02:95:c2: b0:f5:b0:25:ab:97:a9:d7:8a:ef:08:40:bd:60:0d: 50:ae:e8:6b:47:84:ed:e1:3c:0f:e7:40:14:32:5b: d4:80:6f:6f:1b:91:12:82:e4:76:60:49:84:cc:32: 4c:38:ae:b4:cc:51:ca:38:b1:39:b3:55:0f:0f:93: cd:86:54:ae:d3:38:42:80:9c:86:64:f2:6e:31:14: ce:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F2:C8:3B:32:C5:3F:9B:2B:23:74:25:EE:F1:A9:82:2C:26:3F:95 X509v3 Authority Key Identifier: keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:ce:cc:1b:34:d3:44:5e:c8:84:94:fc:6c:8d:a3:e4:9d:20: c0:26:49:66:2e:d9:14:ad:6f:c0:7c:88:97:e1:f2:d1:2d:ef: 3b:1e:71:bf:94:87:a1:75:e4:ee:e5:55:11:30:25:5d:24:9c: 90:46:d8:cc:69:f5:56:7a:0a:92:6f:24:4b:d5:24:0a:d7:43: 80:c5:03:8e:0a:72:93:b9:e0:ae:e5:e0:2a:d7:08:0b:50:a3: d7:0e:85:5c:73:9f:85:05:13:47:be:b6:a2:e6:b2:83:51:21: 12:a3:9d:40:69:2d:c1:c2:a7:2c:32:a8:46:f1:8a:a1:56:e0: 86:e5:d4:4d:36:1f:03:62:ac:87:34:ff:f2:0b:88:49:bb:27: cd:0e:f3:dd:34:68:d2:5a:0e:61:11:17:ca:cf:86:2e:42:63: 7a:2d:bf:f4:4f:e5:0e:d9:78:1b:60:12:3a:de:5e:f6:a2:88: 7a:7a:7f:03:45:dc:c3:92:4a:c9:1a:8f:a1:a0:46:1e:c0:15: 6b:f7:29:f0:97:70:a0:31:48:2d:43:61:81:7c:61:fb:e3:bc: 88:fe:5b:ae:5b:2b:96:a3:a4:ca:b1:e0:28:2e:d0:55:07:f4: bc:d4:61:b6:2f:e0:7d:d7:93:0f:46:a5:3d:cb:27:5f:3f:1c: 87:c6:0a:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyNEYxMTAvBgNVBAUTKDZEQzUyNDgxNjRCQjk1MkU4QjlFRDkyMzlCRTcxMDZB NjNDRUYwNkMwHhcNMjUxMjIyMTkxODM2WhcNMjUxMjI5MTkxODM2WjAYMRYwFAYD VQQDDA02OTQ5OTk4Yy0wMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+YwH2TRd3yN7GqXAS9w1HOJFp5zN/y7VvR4tYykaxXSPVAKB83Rcl8Amhoje RnaxJmw7GDEcI3VG1+Oc35v6ND46YHe7h7VwvKR9DT1mmpNDzrFivXmdBE+/7l92 W/mPBFEDe7ugV83srdn/Pb7PPlF2DjnBmMb32zeXJCfakAY/PPSQjMMpjkkNYbfl xRYulxiQXDbLqAIBgmAfXMMJyg3j3oLiLxK0dDOkLIgnZxsClcKw9bAlq5ep14rv CEC9YA1QruhrR4Tt4TwP50AUMlvUgG9vG5ESguR2YEmEzDJMOK60zFHKOLE5s1UP D5PNhlSu0zhCgJyGZPJuMRTOcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzyyDsy xT+bKyN0Je7xqYIsJj+VMB8GA1UdIwQYMBaAFG3FJIFku5Uui57ZI5vnEGpjzvBs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI0Ri8zN0MxMTBCODhG NTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xTNkxudGtqbS1jUWFtUE84 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjVWtnV1M3bFM2TG50a2ptLWNRYW1QTzhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI0Ri8zN0MxMTBCODhGNTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xT NkxudGtqbS1jUWFtUE84R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOzswbNNNEXsiElPxsjaPknSDAJklmLtkUrW/AfIiX4fLRLe87HnG/ lIehdeTu5VURMCVdJJyQRtjMafVWegqSbyRL1SQK10OAxQOOCnKTueCu5eAq1wgL UKPXDoVcc5+FBRNHvrai5rKDUSESo51AaS3BwqcsMqhG8YqhVuCG5dRNNh8DYqyH NP/yC4hJuyfNDvPdNGjSWg5hERfKz4YuQmN6Lb/0T+UO2XgbYBI63l72ooh6en8D RdzDkkrJGo+hoEYewBVr9ynwl3CgMUgtQ2GBfGH747yI/luuWyuWo6TKseAoLtBV B/S81GG2L+B915MPRqU9yydfPxyHxgon -----END CERTIFICATE-----Generated at Tue Dec 23 03:49:31 2025 by rpki-client