This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft File: bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json) Hash identifier: idqWCjwdpPtjQ2lAMmUx6XjoMB5ZWlp3PTF9WlM/U5s= Subject key identifier: 51:9D:1D:96:94:AB:94:46:76:76:65:DC:13:12:83:C9:23:59:84:44 Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C Certificate issuer: /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft Manifest number: 07AE Signing time: Wed 24 Dec 2025 20:47:31 +0000 Manifest this update: Wed 24 Dec 2025 20:47:31 +0000 Manifest next update: Wed 31 Dec 2025 20:47:31 +0000 Files and hashes: 1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: zy/0MhhldVgrcT2Lj8tkj7r/wTy46E212k5Km1ekzk0=) 2: C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (hash: RwnDEUUAUVLXLFBhhOVnnsEMoCnye/eCleYIc6KZk8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 20:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01F7, serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Validity Not Before: Dec 24 20:47:31 2025 GMT Not After : Dec 31 20:47:31 2025 GMT Subject: CN=694c5163-91fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:be:0c:ca:43:d9:0f:72:31:04:c5:4b:0c: d9:11:68:62:c9:d3:70:56:92:da:53:0c:92:1b:b0: 8b:0c:f9:6e:ee:a8:81:6f:ef:e3:9f:ae:e5:4c:c4: d4:b1:a1:6e:03:f0:72:59:f6:bf:36:06:52:6a:fb: c9:d8:55:6a:a1:30:df:4a:25:64:cd:70:cb:10:63: ce:77:c4:19:8d:92:cb:f9:ff:69:9d:60:46:b0:6f: c6:41:32:51:05:51:1e:4c:12:1d:0d:b2:2d:d1:af: 4f:92:ae:40:f2:59:4f:df:28:a8:a9:12:3c:72:cf: b8:19:3d:53:90:e7:da:c9:30:48:06:2e:40:dd:20: a9:4e:cc:01:da:8b:06:d5:7f:7f:24:03:bd:71:6a: 15:3a:94:ce:2c:39:3f:e6:1a:e0:86:4e:1a:f0:23: f8:b4:c7:33:1c:a3:0b:c9:fc:44:cb:75:a2:cf:24: 73:ae:f4:87:78:25:b0:7a:01:8e:49:12:bd:06:90: 50:5a:26:c6:ad:aa:fe:f7:09:2f:c7:d2:e0:0d:6d: 38:0b:e7:f4:88:73:33:d9:9b:95:51:6b:a1:d4:5f: 4e:e9:1f:9b:64:01:68:a2:4d:8a:96:1b:d8:16:f8: 7b:fb:4f:eb:5b:87:76:6b:ee:49:99:89:73:da:fd: 80:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9D:1D:96:94:AB:94:46:76:76:65:DC:13:12:83:C9:23:59:84:44 X509v3 Authority Key Identifier: keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f1:0e:a9:ce:7f:a2:2c:a3:46:b0:28:7c:be:3b:bd:8e:cf: 6d:12:36:b7:bf:36:c9:ae:a6:84:d5:df:85:4c:f6:5d:92:fe: 26:61:0c:5b:47:70:17:41:1a:2e:1e:ac:59:c6:df:c7:1c:ec: df:ae:fa:66:d3:a9:a9:59:09:9d:ec:89:b9:f2:10:9d:77:3e: 99:d1:33:35:ca:25:92:da:cd:8c:3f:ac:df:88:d6:d6:f0:d6: b0:d5:e3:bc:c3:69:7a:c2:34:bb:1a:29:97:12:c5:bc:d3:32: 5f:40:1e:6f:c7:6b:12:c5:3e:67:d9:84:10:dd:bd:ad:a8:b9: da:d0:0e:f2:4c:26:a4:ed:61:e0:c7:ef:cc:35:f1:0e:bb:d8: 51:ed:86:e9:26:03:61:4f:51:33:46:09:cd:a3:d2:93:92:af: 14:6c:c4:1d:2a:ee:df:cb:f0:48:0b:26:d6:96:dd:db:3e:ed: 74:af:bf:27:7e:25:d9:8f:a6:d1:4a:4c:79:6f:22:94:08:1d: bd:ca:de:fb:db:5c:2d:d2:c4:f4:f5:3e:5e:84:c3:1d:6e:a9: e4:49:8c:21:79:57:9e:cd:1e:2b:f8:7a:63:f7:cc:04:72:88: 81:94:be:16:db:9d:50:50:54:d4:33:1b:bd:e5:ba:c2:61:4d: 09:d8:a3:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxRjcxMTAvBgNVBAUTKDZFMjcwNDNDM0FGNDBGQzVFNTk3OTM4QjE1NEY1QzhC RTBGREZGNkMwHhcNMjUxMjI0MjA0NzMxWhcNMjUxMjMxMjA0NzMxWjAYMRYwFAYD VQQDDA02OTRjNTE2My05MWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud2+DMpD2Q9yMQTFSwzZEWhiydNwVpLaUwySG7CLDPlu7qiBb+/jn67lTMTU saFuA/ByWfa/NgZSavvJ2FVqoTDfSiVkzXDLEGPOd8QZjZLL+f9pnWBGsG/GQTJR BVEeTBIdDbIt0a9Pkq5A8llP3yioqRI8cs+4GT1TkOfayTBIBi5A3SCpTswB2osG 1X9/JAO9cWoVOpTOLDk/5hrghk4a8CP4tMczHKMLyfxEy3WizyRzrvSHeCWwegGO SRK9BpBQWibGrar+9wkvx9LgDW04C+f0iHMz2ZuVUWuh1F9O6R+bZAFook2KlhvY Fvh7+0/rW4d2a+5JmYlz2v2AYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGdHZaU q5RGdnZl3BMSg8kjWYREMB8GA1UdIwQYMBaAFG4nBDw69A/F5ZeTixVPXIvg/f9s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFGNy9GOTFEMEQyODJB NUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4WGxsNU9MRlU5Y2ktRDlf MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpY0VQRHIwRDhYbGw1T0xGVTljaS1EOV8ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFGNy9GOTFEMEQyODJBNUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4 WGxsNU9MRlU5Y2ktRDlfMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR8Q6pzn+iLKNGsCh8vju9js9tEja3vzbJrqaE1d+FTPZdkv4mYQxb R3AXQRouHqxZxt/HHOzfrvpm06mpWQmd7Im58hCddz6Z0TM1yiWS2s2MP6zfiNbW 8Naw1eO8w2l6wjS7GimXEsW80zJfQB5vx2sSxT5n2YQQ3b2tqLna0A7yTCak7WHg x+/MNfEOu9hR7YbpJgNhT1EzRgnNo9KTkq8UbMQdKu7fy/BICybWlt3bPu10r78n fiXZj6bRSkx5byKUCB29yt7721wt0sT09T5ehMMdbqnkSYwheVeezR4r+Hpj98wE coiBlL4W251QUFTUMxu95brCYU0J2KPz -----END CERTIFICATE-----Generated at Thu Dec 25 16:01:22 2025 by rpki-client