This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json) Hash identifier: 8ssUGwWzY8BpAfS9pvvTMM10Mp2NTFgYfVe46BzCMZE= Subject key identifier: 15:A5:D8:06:67:FF:1B:DD:76:23:60:87:A0:E7:9C:FE:3A:DD:48:46 Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 Certificate issuer: /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Certificate serial: 0BB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft Manifest number: 0BB1 Signing time: Sat 06 Dec 2025 18:15:08 +0000 Manifest this update: Sat 06 Dec 2025 18:15:07 +0000 Manifest next update: Sat 13 Dec 2025 18:15:07 +0000 Files and hashes: 1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: 0PlLxP93nIYV1MKJLdnhxsrOWdcmXkXeoyhxRAf9Nxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2996 (0xbb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Validity Not Before: Dec 6 18:15:07 2025 GMT Not After : Dec 13 18:15:07 2025 GMT Subject: CN=693472ac-0157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:06:16:ad:10:60:ad:78:4e:e9:b6:8f:3e:33: c8:f6:bb:0d:fc:1d:12:45:02:a5:d7:14:85:2a:7d: d6:80:96:14:1d:72:46:e6:9f:a0:13:2e:2c:75:fb: fe:fd:b9:df:77:68:e2:71:85:f4:c6:2c:70:dc:25: bc:f1:a0:dd:39:4d:be:d0:89:a7:83:3b:41:b6:eb: d3:bb:b2:db:4f:26:3a:1c:a1:6f:16:7e:df:d3:9b: b1:d5:b7:71:87:ca:84:f4:1d:dc:ef:ba:13:75:8f: 9f:92:7d:62:14:fb:b4:da:5b:29:75:8e:c5:de:3a: 91:a6:91:c7:ca:ff:91:d0:a1:32:d0:8c:1d:ae:1f: b0:bc:d0:e1:a7:aa:cc:3b:79:4e:15:bd:ba:2e:84: e2:59:40:09:c6:9a:bb:1b:a0:ba:91:8e:89:17:fb: cd:47:e3:e7:10:18:c3:57:12:ab:dc:45:95:1e:db: 5f:3c:24:74:5d:db:83:f8:8f:53:10:61:bf:f7:89: 09:b8:e2:b0:48:c5:48:d5:52:f3:3a:f0:53:53:70: b7:79:90:89:94:9e:b2:dd:bc:77:87:d6:7a:72:1a: 2c:1d:95:65:e0:5d:cc:f1:b4:81:85:4c:f9:f8:a0: 7f:9a:58:1f:01:78:ef:7c:9c:e5:d4:72:1f:2a:bc: 23:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A5:D8:06:67:FF:1B:DD:76:23:60:87:A0:E7:9C:FE:3A:DD:48:46 X509v3 Authority Key Identifier: keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:0b:9e:16:f1:36:9c:ee:e8:26:cb:2c:b7:2b:43:f2:af:e6: 1c:81:d3:fb:46:c9:dd:f1:29:c3:97:d5:9b:86:1b:fb:b3:d4: 91:f0:71:4f:cb:76:cf:9e:b9:ce:b9:24:01:69:02:6b:c7:51: 7d:89:09:b4:8d:ff:e1:02:79:88:5c:40:8f:6b:d8:2f:d4:2a: a3:40:34:02:e7:10:2c:de:1c:00:09:ca:2b:00:7a:06:34:d6: 1e:64:af:32:f8:5d:72:a4:92:07:09:88:e4:27:48:88:45:64: 54:0c:74:07:d3:f5:52:f7:6e:89:85:36:48:e2:d3:65:81:b3: 62:74:9f:05:c5:63:69:da:02:f0:b6:7d:1f:8d:e7:35:89:3f: ad:8f:6e:f6:ef:46:23:19:fe:86:49:fa:0d:83:8e:d2:94:17: bc:fc:f4:6a:4c:02:1a:1a:5b:cd:b0:be:05:24:5b:b8:00:72: 44:09:d6:05:20:7b:4c:f8:06:89:da:bf:2f:6a:02:18:30:1f: 83:93:be:8d:aa:77:6b:f6:8c:cc:a1:8c:db:61:69:f4:0b:c7: 8c:15:b3:b3:b4:6f:44:f5:46:71:57:18:ba:bc:1d:29:62:69: c8:37:ff:86:10:c2:6a:1c:d5:f4:97:5f:30:17:2b:97:25:ab: 80:fb:5f:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwMkExMTAvBgNVBAUTKDdDQkY4MUM1OUUzMjVFRjAwNjk3MzEwQjM5NDVGRUEx QzEwNkIzNzgwHhcNMjUxMjA2MTgxNTA3WhcNMjUxMjEzMTgxNTA3WjAYMRYwFAYD VQQDEw02OTM0NzJhYy0wMTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwYWrRBgrXhO6baPPjPI9rsN/B0SRQKl1xSFKn3WgJYUHXJG5p+gEy4sdfv+ /bnfd2jicYX0xixw3CW88aDdOU2+0ImngztBtuvTu7LbTyY6HKFvFn7f05ux1bdx h8qE9B3c77oTdY+fkn1iFPu02lspdY7F3jqRppHHyv+R0KEy0Iwdrh+wvNDhp6rM O3lOFb26LoTiWUAJxpq7G6C6kY6JF/vNR+PnEBjDVxKr3EWVHttfPCR0XduD+I9T EGG/94kJuOKwSMVI1VLzOvBTU3C3eZCJlJ6y3bx3h9Z6chosHZVl4F3M8bSBhUz5 +KB/mlgfAXjvfJzl1HIfKrwjnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWl2AZn /xvddiNgh6DnnP463UhGMB8GA1UdIwQYMBaAFHy/gcWeMl7wBpcxCzlF/qHBBrN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAyQS83N0ExRDk1RTMz QkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2QUdsekVMT1VYLW9jRUdz M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMLUJ4WjR5WHZBR2x6RUxPVVgtb2NFR3MzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDAyQS83N0ExRDk1RTMzQkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2 QUdsekVMT1VYLW9jRUdzM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCC54W8Tac7ugmyyy3K0Pyr+YcgdP7Rsnd8SnDl9Wbhhv7s9SR8HFP y3bPnrnOuSQBaQJrx1F9iQm0jf/hAnmIXECPa9gv1CqjQDQC5xAs3hwACcorAHoG NNYeZK8y+F1ypJIHCYjkJ0iIRWRUDHQH0/VS926JhTZI4tNlgbNidJ8FxWNp2gLw tn0fjec1iT+tj27270YjGf6GSfoNg47SlBe8/PRqTAIaGlvNsL4FJFu4AHJECdYF IHtM+AaJ2r8vagIYMB+Dk76Nqndr9ozMoYzbYWn0C8eMFbOztG9E9UZxVxi6vB0p YmnIN/+GEMJqHNX0l18wFyuXJauA+18j -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:49 2025 by rpki-client