This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json) Hash identifier: L5hz9jedlfZw1kRdY8w7YMtvpLhsFDODkiEjfcVvVvU= Subject key identifier: D8:87:E7:25:89:01:26:86:D3:CD:B7:0C:E7:B6:17:86:07:E2:37:EF Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0CA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft Manifest number: 0C88 Signing time: Sun 28 Dec 2025 18:06:59 +0000 Manifest this update: Sun 28 Dec 2025 18:06:59 +0000 Manifest next update: Sun 04 Jan 2026 18:06:59 +0000 Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: BzR8pO9m0xN+AyY2julIi97K/VxEb8kGHg/2Hu17mhY=) 2: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: 6O0VKauTuWTfzmPjcovFKdSm/+YMqCBqWG3p+BX8OSE=) 3: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: YvJPp5TLJmmNMFrXdStXJanbJJfuz5ICtmKerDM4nQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 18:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3237 (0xca5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Validity Not Before: Dec 28 18:06:59 2025 GMT Not After : Jan 4 18:06:59 2026 GMT Subject: CN=695171c3-b974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fb:ac:e9:e8:dc:6f:2f:d3:89:15:b1:c8:92: b4:30:97:e1:03:2b:89:39:e7:25:07:87:1f:d2:ff: eb:84:12:a1:fe:7c:b8:da:f0:7e:75:94:87:93:77: 03:1b:05:50:36:3b:23:c7:30:97:0a:d3:26:ea:e9: ce:04:73:f5:14:fb:77:86:e8:0a:ac:f4:71:0c:d1: 6d:63:8a:2c:ff:48:79:9b:a9:b6:f1:e1:51:fb:91: 37:a6:45:44:e4:0f:6f:60:55:20:84:6a:6d:42:98: 28:bf:3e:d1:20:bc:81:bd:5d:fa:a0:ef:9f:b6:81: 79:0b:de:03:c4:1f:34:a6:4b:e8:17:72:2f:8a:de: fe:99:5c:c2:7d:1f:6b:ea:45:9b:33:81:08:cc:4c: ff:b6:1e:f7:c7:2a:c6:de:6c:e0:a2:14:ac:d9:58: 55:f5:99:c7:fb:7b:a0:43:93:b6:64:d6:1c:14:87: 9e:a3:f9:a1:fc:21:73:28:ad:9c:36:97:32:f7:1c: db:2f:03:0b:4b:95:0b:ab:a1:99:63:01:87:3a:7a: 84:7a:6b:71:ea:35:3c:9b:b8:eb:d1:23:1f:34:32: 13:86:ba:7c:3c:ed:af:47:2a:1f:8f:af:3c:3c:a5: 08:73:f9:93:62:23:14:f1:74:7c:03:08:19:7f:6b: 97:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:87:E7:25:89:01:26:86:D3:CD:B7:0C:E7:B6:17:86:07:E2:37:EF X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c3:aa:fd:a6:09:7c:e2:00:34:68:0a:49:de:af:73:68:ae: aa:b9:f4:b3:4d:0a:d4:fb:6c:35:b8:6d:b1:e3:77:56:1c:db: 8c:80:c6:dc:4f:4c:38:de:b8:67:65:b7:47:bb:22:7b:cd:49: 5e:9f:8f:d3:05:63:03:7d:20:a9:d2:95:8f:b0:cc:24:3d:4d: fb:b8:85:1e:01:97:1f:af:e1:df:8b:30:46:b1:d8:ab:25:5d: 2b:13:1c:ab:9a:99:e0:4b:d3:58:f2:8a:5c:eb:8d:52:0c:f3: 03:1f:04:c6:18:c0:a5:20:6f:80:f9:91:d4:6d:88:b9:52:3e: 4c:e9:02:5d:1c:e1:31:ce:17:2b:57:0e:ee:73:53:8b:26:3d: 9a:7a:c8:4b:d1:8d:14:ff:bf:4c:f5:c0:c2:d4:a0:f1:25:cd: b9:65:b2:ec:75:6d:b1:ef:30:0e:65:41:14:9f:03:47:31:29: 74:de:e0:ce:0c:48:ac:b5:c2:80:d1:0c:c7:d1:59:74:6e:42: 32:87:e5:ee:59:8c:fc:19:4d:ed:b3:f8:62:ff:b4:cd:67:8c: 98:8c:7c:67:12:df:06:f8:da:2b:77:8d:1d:a8:c6:4a:33:c9: c4:81:11:ed:eb:97:73:5d:a1:e0:99:4b:33:01:05:d7:13:4e: 56:e3:70:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjUxMjI4MTgwNjU5WhcNMjYwMTA0MTgwNjU5WjAYMRYwFAYD VQQDDA02OTUxNzFjMy1iOTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlfus6ejcby/TiRWxyJK0MJfhAyuJOeclB4cf0v/rhBKh/ny42vB+dZSHk3cD GwVQNjsjxzCXCtMm6unOBHP1FPt3hugKrPRxDNFtY4os/0h5m6m28eFR+5E3pkVE 5A9vYFUghGptQpgovz7RILyBvV36oO+ftoF5C94DxB80pkvoF3Ivit7+mVzCfR9r 6kWbM4EIzEz/th73xyrG3mzgohSs2VhV9ZnH+3ugQ5O2ZNYcFIeeo/mh/CFzKK2c Npcy9xzbLwMLS5ULq6GZYwGHOnqEemtx6jU8m7jr0SMfNDIThrp8PO2vRyofj688 PKUIc/mTYiMU8XR8AwgZf2uXowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiH5yWJ ASaG0823DOe2F4YH4jfvMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMxMi84NTkyRTQ4ODBGNjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJF bjdPMm00YVJ6eURBRW5lYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCew6r9pgl84gA0aApJ3q9zaK6qufSzTQrU+2w1uG2x43dWHNuMgMbc T0w43rhnZbdHuyJ7zUlen4/TBWMDfSCp0pWPsMwkPU37uIUeAZcfr+HfizBGsdir JV0rExyrmpngS9NY8opc641SDPMDHwTGGMClIG+A+ZHUbYi5Uj5M6QJdHOExzhcr Vw7uc1OLJj2aeshL0Y0U/79M9cDC1KDxJc25ZbLsdW2x7zAOZUEUnwNHMSl03uDO DEistcKA0QzH0Vl0bkIyh+XuWYz8GU3ts/hi/7TNZ4yYjHxnEt8G+Nord40dqMZK M8nEgRHt65dzXaHgmUszAQXXE05W43AR -----END CERTIFICATE-----Generated at Mon Dec 29 16:10:39 2025 by rpki-client