This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
File: BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft (raw, json)
Hash identifier: 02/3OXDRGM6Tot+piKbp8D8tS/UtsGMuFfnTBdPEFQk=
Subject key identifier: EE:57:0B:C7:9B:3C:B2:C0:50:DF:23:BD:D5:E0:6E:4F:55:F9:D2:66
Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
Certificate issuer: /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Certificate serial: 16FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
Manifest number: 16E2
Signing time: Thu 18 Dec 2025 16:32:19 +0000
Manifest this update: Thu 18 Dec 2025 16:32:19 +0000
Manifest next update: Thu 25 Dec 2025 16:32:19 +0000
Files and hashes: 1: BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl (hash: czMD4ZVbtAbRMT0JuxXbUuTu3W50Yp+FWjCce7CreyA=)
2: 091435C84FA911EFB86F4D40C4F9AE02.roa (hash: UDYOsBhZuGxPbiC3JStIpRl29abp1z9bfR4dnN93V5Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 16:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5884 (0x16fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CE8, serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Validity
Not Before: Dec 18 16:32:19 2025 GMT
Not After : Dec 25 16:32:19 2025 GMT
Subject: CN=69442c93-36af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:b9:c4:ac:66:25:cc:a2:64:a3:a9:bd:5b:
45:66:1d:74:41:bc:81:97:c3:bd:c7:42:ae:41:fd:
1b:7d:a0:b1:35:54:d8:d3:cf:66:7b:d6:ec:08:38:
90:d7:74:3b:a9:1b:4d:78:15:7b:ea:95:a3:fc:30:
a4:53:d5:01:c9:04:69:c9:88:6a:67:ee:27:f2:1e:
c1:92:94:91:ba:99:40:fb:68:d9:bb:26:36:08:2d:
fd:2f:57:0e:bf:bd:15:f3:b8:7a:7f:a1:d4:5d:b1:
f8:10:82:22:26:ba:b2:5c:fd:d0:44:5e:26:8c:59:
aa:58:25:85:90:1f:ad:35:43:24:6c:0d:66:62:af:
6f:b1:b0:7c:e7:64:85:64:c8:30:5a:6f:05:e2:e0:
99:03:40:93:01:a8:67:06:87:b3:a1:a5:d3:34:31:
c6:76:9c:56:46:b1:a4:fd:40:18:1f:1a:62:cc:b5:
09:97:36:20:56:d1:5b:53:69:5d:18:6f:fc:7a:ee:
1e:9b:d2:07:a0:8f:6f:4c:53:ea:49:1a:56:01:6b:
b1:2c:21:a2:42:39:b4:b7:72:25:9c:69:56:da:f6:
42:2c:0a:3a:bf:a8:c5:69:9e:86:4d:a1:2d:d1:e1:
9c:db:ce:45:d6:88:2c:e8:9c:1c:4b:2c:9c:b9:d0:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:57:0B:C7:9B:3C:B2:C0:50:DF:23:BD:D5:E0:6E:4F:55:F9:D2:66
X509v3 Authority Key Identifier:
keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:3c:1f:53:6f:29:2d:e7:e6:c5:23:ba:f5:d9:cf:5b:28:2a:
18:d9:3d:a7:62:ca:16:47:ce:d8:6a:79:bb:c7:1a:c4:d0:0f:
f4:83:be:47:d1:d8:0c:b0:78:6e:00:11:c3:53:df:dc:d4:7a:
be:2c:e1:0f:c0:5b:0a:3f:ed:79:3b:68:f5:1d:9a:77:a2:ce:
21:04:30:38:ca:e2:61:9b:a8:64:d6:3e:95:70:53:67:4e:03:
5c:75:76:6c:02:ff:cc:61:a4:27:bb:c9:ab:f1:34:36:f5:bc:
98:8d:af:65:51:8a:ab:b5:d4:21:ce:a7:a2:ab:06:64:dc:20:
d5:c1:60:c1:55:64:b3:5a:38:c4:a1:f3:8c:80:cd:15:84:ca:
5d:9e:d0:2b:ce:9b:80:6d:19:58:94:6b:a6:75:21:bc:80:22:
c6:a3:5f:04:ca:71:3b:85:f8:db:bc:58:8c:46:2b:89:66:66:
ea:66:60:da:44:a6:29:f8:a2:47:c5:fd:9a:8c:1e:f2:24:58:
d4:73:33:ee:20:c0:52:66:90:96:ab:62:65:90:88:3a:19:34:
db:ef:dc:59:73:69:bb:5c:61:73:06:27:5f:c7:50:c9:45:68:
f4:30:ee:96:78:bd:49:c0:0c:83:34:b3:f2:f2:33:95:2a:49:
8d:d8:71:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:31 2025 by rpki-client