This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json) Hash identifier: F5SM8NSqh2bFuWKc4ReOJ4pEV2SxY1+8zDi2DV6AkYQ= Subject key identifier: 41:DC:75:93:13:4E:16:37:5F:C6:93:6C:3C:F8:55:16:13:24:14:66 Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 08F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft Manifest number: 08E4 Signing time: Sat 06 Dec 2025 19:32:27 +0000 Manifest this update: Sat 06 Dec 2025 19:32:27 +0000 Manifest next update: Sat 13 Dec 2025 19:32:27 +0000 Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: 0VmRnb1vKCjSn+xw4ODc4MKdm4EFc57HHOMSq52D/NY=) 2: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: ltvBn5VJXtz7vFB4RWKdDxpG2I+f/J+ryir96EuYqEY=) 3: F902E016BFED11EABE972E5AC4F9AE02.roa (hash: Te4pe39x+PJOiuAURDPZwLT95T5tpG83Z202ebgxGsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2288 (0x8f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: Dec 6 19:32:27 2025 GMT Not After : Dec 13 19:32:27 2025 GMT Subject: CN=693484cb-5b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2e:6f:71:26:0a:f1:4c:79:5a:e9:b5:a9:01: 99:b0:af:a7:a9:13:c9:61:3a:e0:9a:4f:df:35:bc: 06:f0:d7:4f:17:62:17:23:9c:82:88:08:c8:76:bb: 31:1e:18:fa:0b:be:62:56:45:70:47:66:f6:aa:eb: fd:ba:38:a8:7b:1a:31:21:82:82:0c:d2:3b:89:c1: cb:d4:59:4b:cd:29:f7:2d:fc:d1:0a:c2:1f:29:47: 51:1d:7c:7a:19:47:5c:d5:e6:6e:fa:43:49:c7:b0: 93:e5:ff:a0:17:eb:74:df:6a:b1:81:8b:9f:e1:b3: ff:b4:cc:ea:69:37:4b:12:87:cb:44:0d:e9:3e:38: 28:6d:b2:6f:4c:3d:fd:94:42:e9:5f:13:f8:74:b4: 0f:9d:5a:87:b5:5b:cb:72:7c:18:96:68:a7:1c:0a: bd:ea:8a:2b:6c:e5:ea:ad:e9:ed:09:3a:d8:92:4f: be:88:0b:2b:53:2e:7a:8d:8c:9f:f3:1f:2c:86:e4: b2:96:c6:6f:75:3d:a2:eb:25:33:e4:32:7a:a8:b2: 0e:06:e2:b5:75:4b:36:62:b6:c9:49:3d:a1:e8:ff: 84:d2:90:2b:36:97:f5:e2:d0:da:e0:8c:dd:b4:99: 8f:fe:b7:11:2e:86:62:97:df:d6:80:75:13:61:db: 87:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DC:75:93:13:4E:16:37:5F:C6:93:6C:3C:F8:55:16:13:24:14:66 X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:d1:01:0a:eb:95:7a:63:98:41:98:a6:6a:77:dd:a5:c9:08: 56:35:fc:14:36:1c:18:e4:aa:d9:4f:b5:6a:ef:4a:2f:7c:56: 03:2e:d2:ee:79:8b:f9:76:07:4b:9a:36:51:13:04:4d:0f:13: c6:25:5e:ad:4c:7a:ab:23:2c:2a:0d:81:ae:b8:aa:9f:dd:9f: 88:0b:31:a5:32:22:21:78:53:6a:6e:3c:02:2c:5a:4a:82:67: 41:57:43:3d:f0:09:d9:26:93:17:6c:65:a3:4d:96:40:6d:31: 2d:77:bc:1f:b2:7e:f0:4b:b0:08:a3:77:f3:18:c9:8d:af:ed: 6d:40:51:38:47:d5:46:fc:5d:2b:4a:6b:3d:48:88:73:f1:d3: 00:d5:05:9c:a9:47:ce:e3:9b:1f:83:08:70:3c:84:50:57:85: e7:9f:8e:00:49:28:a8:bc:d5:9e:9d:21:a4:a3:e7:bb:fb:2b: f2:4f:65:2e:ff:56:ef:ef:ff:38:8e:f8:35:4d:03:7d:84:6f: a3:3c:7b:a0:53:1d:8e:38:ed:1e:2e:cc:36:0a:3a:ac:05:fb: 85:10:37:a8:9b:73:cc:61:94:24:79:2a:c1:07:e9:7d:b4:9c: a1:60:fd:e5:01:3f:19:ed:2c:0d:90:99:40:5e:7a:37:bf:18: 54:7a:b4:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjUxMjA2MTkzMjI3WhcNMjUxMjEzMTkzMjI3WjAYMRYwFAYD VQQDEw02OTM0ODRjYi01YjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2S5vcSYK8Ux5Wum1qQGZsK+nqRPJYTrgmk/fNbwG8NdPF2IXI5yCiAjIdrsx Hhj6C75iVkVwR2b2quv9ujioexoxIYKCDNI7icHL1FlLzSn3LfzRCsIfKUdRHXx6 GUdc1eZu+kNJx7CT5f+gF+t032qxgYuf4bP/tMzqaTdLEofLRA3pPjgobbJvTD39 lELpXxP4dLQPnVqHtVvLcnwYlminHAq96oorbOXqrentCTrYkk++iAsrUy56jYyf 8x8shuSylsZvdT2i6yUz5DJ6qLIOBuK1dUs2YrbJST2h6P+E0pArNpf14tDa4Izd tJmP/rcRLoZil9/WgHUTYduHMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHcdZMT ThY3X8aTbDz4VRYTJBRmMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx0QEK65V6Y5hBmKZqd92lyQhWNfwUNhwY5KrZT7Vq70ovfFYDLtLu eYv5dgdLmjZREwRNDxPGJV6tTHqrIywqDYGuuKqf3Z+ICzGlMiIheFNqbjwCLFpK gmdBV0M98AnZJpMXbGWjTZZAbTEtd7wfsn7wS7AIo3fzGMmNr+1tQFE4R9VG/F0r Sms9SIhz8dMA1QWcqUfO45sfgwhwPIRQV4Xnn44ASSiovNWenSGko+e7+yvyT2Uu /1bv7/84jvg1TQN9hG+jPHugUx2OOO0eLsw2CjqsBfuFEDeom3PMYZQkeSrBB+l9 tJyhYP3lAT8Z7SwNkJlAXno3vxhUerSK -----END CERTIFICATE-----Generated at Sat Dec 6 21:27:13 2025 by rpki-client