This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json) Hash identifier: vFQSV+JmMIXUXrs0dITqum180iHJOo1M4o6ogZXQe28= Subject key identifier: 44:64:69:88:E9:93:8C:26:78:0F:67:CF:FE:46:69:36:CD:60:43:0B Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft Manifest number: 011F Signing time: Fri 19 Dec 2025 03:54:13 +0000 Manifest this update: Fri 19 Dec 2025 03:54:12 +0000 Manifest next update: Fri 26 Dec 2025 03:54:12 +0000 Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: iItYDFRHifeflS7lVEkC7tVKmNc7mz4ImLKNA/UVx34=) 2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: 7PT1hzEu8yFfZFQXURAd4+p59Mps1ow7oAQ1a2yeyaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Validity Not Before: Dec 19 03:54:12 2025 GMT Not After : Dec 26 03:54:12 2025 GMT Subject: CN=6944cc65-e86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d3:95:2c:3b:e1:ef:41:47:c6:ce:bf:de:c7: 94:1b:58:a3:73:20:6d:7f:56:91:9a:24:d1:3a:7b: a0:ca:d7:2a:4f:12:9f:e6:d7:71:c7:49:ef:ec:f3: 57:41:46:ed:90:7d:61:aa:8c:7b:8f:7d:38:ca:77: 56:eb:75:f6:52:4c:d5:36:33:21:3a:60:e2:6e:7d: 13:1a:d0:6e:21:57:f9:89:bc:0c:e3:f9:29:3c:73: 88:04:4a:fb:10:04:47:f5:dc:40:ff:de:44:1a:31: df:c7:72:67:b1:08:19:44:b6:cb:8b:de:2c:50:df: 93:aa:07:b1:42:50:56:59:11:cd:4e:6b:62:85:3b: 0d:1b:ed:36:ff:18:42:da:40:6e:b1:ad:16:de:ae: 07:e1:3f:3f:4f:7b:9b:c8:b0:2c:48:dd:3e:22:88: a2:f5:91:6f:30:f0:e5:cc:5b:49:d2:78:8b:15:38: fb:1a:04:35:3e:ef:a4:a8:d3:ca:40:10:bd:c7:78: 42:23:03:a5:38:d8:e3:f8:b7:08:9e:93:07:9a:17: bd:43:f3:b5:62:c5:8b:ed:59:cb:fa:4e:64:e1:df: 52:34:3d:12:42:16:75:37:51:0a:a9:e3:53:28:e0: 2f:5c:40:48:0e:98:b7:cd:00:fc:54:f8:73:81:ba: 55:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:64:69:88:E9:93:8C:26:78:0F:67:CF:FE:46:69:36:CD:60:43:0B X509v3 Authority Key Identifier: keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:6b:28:b1:43:59:6f:3d:00:ac:16:bf:dc:09:0e:9f:e6:e7: 95:a6:fc:d4:3a:86:28:97:5a:99:e2:d0:cc:75:5c:68:0e:be: c4:f1:c3:e2:2b:d1:e1:aa:02:cd:b5:83:c4:00:11:fc:c5:84: 55:ba:13:ef:27:a0:c6:02:c4:94:cb:61:d2:08:46:5f:21:a7: 33:9a:4c:ce:2f:0b:3e:c5:77:49:e0:ed:6a:d4:99:6e:40:01: e0:fc:ed:1a:6d:86:8e:4e:dd:65:05:56:6c:84:b3:85:06:42: 8b:d9:bb:67:0f:4d:ea:d6:59:66:0c:97:75:9e:f4:e6:c5:50: 28:b1:ab:c9:db:46:6c:00:e8:4b:84:27:fb:f2:e0:e2:9e:da: 9b:1c:ef:99:f1:01:b8:89:32:9b:45:e1:42:ca:dd:57:e2:7a: 5b:32:b3:99:7b:f5:e6:c7:4b:da:6d:56:21:91:29:82:85:a2: ae:0d:2b:07:1a:90:b1:0c:8b:14:89:6a:db:8e:1d:f3:ae:c1: 18:a0:48:e6:96:b7:cf:c6:5d:8f:65:7b:be:a0:7b:66:d1:78: 9a:7b:42:36:f7:43:7c:7d:a6:66:1f:5d:e7:93:bd:e0:e9:ea: 9a:1e:f7:f0:cd:ee:cf:93:68:b6:93:00:43:47:8f:aa:3e:66: 5f:45:b9:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKDA0NzRGNDA2QTE3OEQyMkM1NEQ1RUY3MjRDNkIyQzJD OUEzQjZCOTgwHhcNMjUxMjE5MDM1NDEyWhcNMjUxMjI2MDM1NDEyWjAYMRYwFAYD VQQDDA02OTQ0Y2M2NS1lODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnNOVLDvh70FHxs6/3seUG1ijcyBtf1aRmiTROnugytcqTxKf5tdxx0nv7PNX QUbtkH1hqox7j304yndW63X2UkzVNjMhOmDibn0TGtBuIVf5ibwM4/kpPHOIBEr7 EARH9dxA/95EGjHfx3JnsQgZRLbLi94sUN+TqgexQlBWWRHNTmtihTsNG+02/xhC 2kBusa0W3q4H4T8/T3ubyLAsSN0+Ioii9ZFvMPDlzFtJ0niLFTj7GgQ1Pu+kqNPK QBC9x3hCIwOlONjj+LcInpMHmhe9Q/O1YsWL7VnL+k5k4d9SND0SQhZ1N1EKqeNT KOAvXEBIDpi3zQD8VPhzgbpVPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERkaYjp k4wmeA9nz/5GaTbNYEMLMB8GA1UdIwQYMBaAFAR09AaheNIsVNXvckxrLCyaO2uY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FNTM2MDhGMDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBpeFUxZTl5VEdzc0xKbzdh NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FNTM2MDhGMDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBp eFUxZTl5VEdzc0xKbzdhNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0ayixQ1lvPQCsFr/cCQ6f5ueVpvzUOoYol1qZ4tDMdVxoDr7E8cPi K9HhqgLNtYPEABH8xYRVuhPvJ6DGAsSUy2HSCEZfIaczmkzOLws+xXdJ4O1q1Jlu QAHg/O0abYaOTt1lBVZshLOFBkKL2btnD03q1llmDJd1nvTmxVAosavJ20ZsAOhL hCf78uDintqbHO+Z8QG4iTKbReFCyt1X4npbMrOZe/Xmx0vabVYhkSmChaKuDSsH GpCxDIsUiWrbjh3zrsEYoEjmlrfPxl2PZXu+oHtm0Xiae0I290N8faZmH13nk73g 6eqaHvfwze7Pk2i2kwBDR4+qPmZfRbnf -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:02 2025 by rpki-client