This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: THKAlgGsAUp1MmWr+Y81jU6hQw5bkjm92e0sCEEExhA= Subject key identifier: 15:00:17:10:65:3E:CB:AD:6C:C2:4E:04:07:8A:07:C6:34:2D:11:2D Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: 0180 Signing time: Fri 05 Dec 2025 01:51:44 +0000 Manifest this update: Fri 05 Dec 2025 01:51:44 +0000 Manifest next update: Fri 12 Dec 2025 01:51:44 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: pr0bQV4rtK/DAf9QSvcgNGXpT6eQ0v5a4zRnCXta3o4=) 2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: wBNq6qKZKki1MEW6RuBHHAWRuhM23JZZju/jw5M2+o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: Dec 5 01:51:44 2025 GMT Not After : Dec 12 01:51:44 2025 GMT Subject: CN=69323ab0-8ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f8:2c:b3:cd:19:01:43:bd:27:54:d8:00:dd: 6b:4d:83:c5:6c:3e:99:1d:d0:39:69:fa:44:25:d4: 1c:53:8d:1e:43:56:ce:2a:f8:69:4c:c7:73:f0:91: 6a:5e:ff:dd:29:a6:99:6b:11:82:3b:f7:ec:fe:23: 70:6e:50:f8:d1:ec:77:8d:0e:d8:ea:8b:97:d9:1e: 29:b3:e7:2b:87:33:6b:ec:db:e6:45:a8:be:93:d9: 0c:6a:57:c8:2a:3a:43:2c:a8:62:f1:87:36:8e:29: ac:a3:ea:21:55:80:e1:df:46:3d:c7:5e:fd:5b:bb: d4:da:b9:82:28:c3:cf:0e:b2:4a:3b:b9:4d:e2:58: 32:65:12:8b:a2:93:a9:bc:76:8a:04:a5:b1:dc:a6: 0f:9e:48:79:6c:bb:57:4c:ac:3d:dc:7e:41:58:14: d9:7b:5a:e1:aa:b6:cd:e7:1c:88:ac:dc:7d:ea:8b: 7c:6a:6c:0f:4b:b6:58:63:5a:37:a5:01:eb:a0:45: ba:1c:10:6a:b9:39:b3:3b:a5:b4:02:90:93:eb:dc: 78:9a:86:ea:41:96:f2:cb:a4:5e:fa:64:8f:7e:74: 8a:d1:49:6d:d4:e0:36:6c:96:94:67:a2:9a:a3:2a: 7a:38:f3:6a:c1:e8:35:37:c4:e0:23:da:52:a2:36: b8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:00:17:10:65:3E:CB:AD:6C:C2:4E:04:07:8A:07:C6:34:2D:11:2D X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:51:a9:ea:a3:06:41:37:da:5d:9a:17:07:d9:8e:bd:68:bc: 91:7d:c2:18:45:e8:55:db:23:2b:56:23:37:09:00:a6:1b:5d: c8:27:c4:d3:80:2d:d5:58:27:1b:60:5c:fd:77:23:03:86:d3: 10:64:38:64:47:ac:9a:e6:df:f4:39:30:0e:65:9e:ed:4a:bb: 6d:53:4f:f4:cd:76:2f:2c:22:5d:1c:1b:87:a3:83:43:c4:26: c4:b9:cd:2b:b9:85:e3:cc:77:e5:b3:e0:a7:37:48:5d:1b:c0: 3c:40:92:54:d6:ad:e6:7a:dc:58:4a:50:3f:63:77:c2:5d:ed: 38:da:c2:57:6e:10:f2:d2:ec:ca:5f:ac:79:0c:76:50:83:bd: 83:6a:22:c6:86:d9:c1:f1:96:59:47:b1:68:f5:bc:6d:5d:93: 23:38:94:a2:8b:5f:65:48:59:89:a5:e0:fc:b8:a7:fb:73:f4: 81:80:87:17:08:3f:17:2b:b6:7a:5f:8b:8d:a2:d8:35:f3:e2: 58:7e:d5:63:53:b5:04:89:cd:49:75:63:00:d7:38:cd:f0:71: 73:ba:6e:25:19:e1:1f:e7:c7:99:77:d1:d7:a3:ba:31:3f:60: 3d:7c:83:90:e6:76:2d:3f:77:af:c6:b7:0d:ac:95:70:7f:e5: 3f:6e:31:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4 MDY3OUFGMjkwHhcNMjUxMjA1MDE1MTQ0WhcNMjUxMjEyMDE1MTQ0WjAYMRYwFAYD VQQDEw02OTMyM2FiMC04YWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/gss80ZAUO9J1TYAN1rTYPFbD6ZHdA5afpEJdQcU40eQ1bOKvhpTMdz8JFq Xv/dKaaZaxGCO/fs/iNwblD40ex3jQ7Y6ouX2R4ps+crhzNr7NvmRai+k9kMalfI KjpDLKhi8Yc2jimso+ohVYDh30Y9x179W7vU2rmCKMPPDrJKO7lN4lgyZRKLopOp vHaKBKWx3KYPnkh5bLtXTKw93H5BWBTZe1rhqrbN5xyIrNx96ot8amwPS7ZYY1o3 pQHroEW6HBBquTmzO6W0ApCT69x4mobqQZbyy6Re+mSPfnSK0Ult1OA2bJaUZ6Ka oyp6OPNqweg1N8TgI9pSoja4nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUAFxBl PsutbMJOBAeKB8Y0LREtMB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3 azFhVWlXMVFKMUtBWjVyeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCUanqowZBN9pdmhcH2Y69aLyRfcIYRehV2yMrViM3CQCmG13IJ8TT gC3VWCcbYFz9dyMDhtMQZDhkR6ya5t/0OTAOZZ7tSrttU0/0zXYvLCJdHBuHo4ND xCbEuc0ruYXjzHfls+CnN0hdG8A8QJJU1q3metxYSlA/Y3fCXe042sJXbhDy0uzK X6x5DHZQg72DaiLGhtnB8ZZZR7Fo9bxtXZMjOJSii19lSFmJpeD8uKf7c/SBgIcX CD8XK7Z6X4uNotg18+JYftVjU7UEic1JdWMA1zjN8HFzum4lGeEf58eZd9HXo7ox P2A9fIOQ5nYtP3evxrcNrJVwf+U/bjFA -----END CERTIFICATE-----Generated at Sat Dec 6 23:02:44 2025 by rpki-client