This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft File: fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json) Hash identifier: 6mBvRsagJMWTk4CcGJMdNDRhV1q2gk/EpqG9KPC5PpI= Subject key identifier: 69:36:9B:C2:97:60:B5:9B:1C:D9:A7:68:00:84:B5:FB:7E:37:F9:2B Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 Certificate issuer: /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Certificate serial: 0CA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft Manifest number: 0CA0 Signing time: Thu 04 Dec 2025 17:50:41 +0000 Manifest this update: Thu 04 Dec 2025 17:50:40 +0000 Manifest next update: Thu 11 Dec 2025 17:50:40 +0000 Files and hashes: 1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: TZEKDZ2oWMppugDXXEc9ysRfV7lOjJ5GygSFDnn2wmo=) 2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: gcmOeuv4CPwiyDEbbjuVKa7sBj9FNhXZhMuz2eqrCks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Validity Not Before: Dec 4 17:50:40 2025 GMT Not After : Dec 11 17:50:40 2025 GMT Subject: CN=6931c9f1-ac03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:67:15:ce:90:2c:f0:1f:91:ec:f0:fb:5b: ec:ff:3f:75:7d:2c:03:94:b5:82:8f:99:1e:e3:cb: cd:48:01:3f:1d:f0:75:de:9e:68:94:74:be:ff:d3: 67:84:41:4b:2a:03:33:fd:f6:93:87:cf:8a:3a:d6: ba:ab:e3:c2:b8:0d:0c:cf:1b:f2:4d:58:8d:2b:a1: 41:73:54:e1:d6:db:36:cd:f9:6f:3a:f0:f6:d8:c3: 8e:1f:6f:19:c0:5f:6a:65:33:55:4e:61:1e:c9:25: d0:90:4f:c2:cf:31:66:e0:c0:0a:a5:3e:f5:d4:a2: 99:b8:18:41:04:17:c5:5d:d1:dc:6e:c1:d7:d7:97: 8b:f0:f6:6e:7c:0f:9d:89:72:29:8e:96:72:8c:db: 66:b4:f6:f9:41:5f:a6:12:3f:5d:cb:81:9b:3d:7e: 86:85:d4:56:f8:37:d0:e0:09:af:9a:a5:05:15:85: 87:e6:d9:ff:6c:dd:59:2d:dd:e2:5a:c6:58:cb:1e: 5f:0c:46:28:9b:2c:8d:6c:ed:2d:38:ea:71:b9:2b: d9:3f:90:f6:25:82:61:ce:fa:eb:ee:04:83:97:7e: e1:75:76:ae:4c:3d:b6:87:4d:c3:7a:04:b6:92:e7: de:57:ce:14:ce:57:a4:79:0f:b9:27:6e:92:8f:81: 78:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:36:9B:C2:97:60:B5:9B:1C:D9:A7:68:00:84:B5:FB:7E:37:F9:2B X509v3 Authority Key Identifier: keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:a5:bd:15:ca:ce:09:7c:45:f5:ea:f4:a0:37:94:c0:05:1d: c9:4e:0d:ac:04:6a:d6:37:3e:46:75:54:37:b8:12:ca:44:ad: 21:cd:88:92:2f:56:83:44:49:75:2d:25:05:49:f5:13:6c:fc: 03:c8:0e:45:3b:f0:7d:f1:96:a0:6a:bc:50:a1:d8:90:63:34: bb:aa:2e:c3:2a:79:2f:c6:98:3e:39:88:34:91:b4:eb:a4:53: 80:11:27:90:c2:98:24:ae:29:27:20:19:cd:12:d3:00:fb:a6: 6d:6b:61:e0:f2:c3:9b:94:55:3c:57:f5:61:a0:34:60:98:60: 87:2c:9a:97:7d:38:24:70:5c:26:19:9a:e9:5b:dc:89:5a:75: cd:93:92:cc:fc:13:a9:64:98:d3:88:9e:36:25:e9:3b:ab:03: 57:93:63:e4:29:e3:ab:9e:47:a1:e7:4e:34:cb:c4:6c:4d:f2: 8d:e3:b1:0b:55:30:fb:4d:71:e1:53:f3:39:89:c8:47:d3:08: ea:62:4f:aa:da:0e:23:da:9b:ff:d4:3e:b1:1f:d9:82:bb:70: 1f:16:d3:29:07:b1:6a:52:33:04:24:c7:3d:fe:3d:a9:ca:6b: bb:83:97:ba:61:17:9c:78:7e:6f:ac:d5:d2:f5:f1:9c:20:c2: c0:2f:58:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZFNkYxMTAvBgNVBAUTKDdDRTM3MjJEMUVDQjAwODM5QjI0NjdGRDVDMzlBNkFE NDZBNjIyNjEwHhcNMjUxMjA0MTc1MDQwWhcNMjUxMjExMTc1MDQwWjAYMRYwFAYD VQQDEw02OTMxYzlmMS1hYzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPxnFc6QLPAfkezw+1vs/z91fSwDlLWCj5ke48vNSAE/HfB13p5olHS+/9Nn hEFLKgMz/faTh8+KOta6q+PCuA0MzxvyTViNK6FBc1Th1ts2zflvOvD22MOOH28Z wF9qZTNVTmEeySXQkE/CzzFm4MAKpT711KKZuBhBBBfFXdHcbsHX15eL8PZufA+d iXIpjpZyjNtmtPb5QV+mEj9dy4GbPX6GhdRW+DfQ4AmvmqUFFYWH5tn/bN1ZLd3i WsZYyx5fDEYomyyNbO0tOOpxuSvZP5D2JYJhzvrr7gSDl37hdXauTD22h03DegS2 kufeV84UzlekeQ+5J26Sj4F4TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGk2m8KX YLWbHNmnaACEtft+N/krMB8GA1UdIwQYMBaAFHzjci0eywCDmyRn/Vw5pq1GpiJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkU2Ri9CMUI1QjNENjA2 RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJT2JKR2Y5WERtbXJVYW1J bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZPTnlMUjdMQUlPYkpHZjlYRG1tclVhbUltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkU2Ri9CMUI1QjNENjA2RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJ T2JKR2Y5WERtbXJVYW1JbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYpb0Vys4JfEX16vSgN5TABR3JTg2sBGrWNz5GdVQ3uBLKRK0hzYiS L1aDREl1LSUFSfUTbPwDyA5FO/B98ZagarxQodiQYzS7qi7DKnkvxpg+OYg0kbTr pFOAESeQwpgkriknIBnNEtMA+6Zta2Hg8sOblFU8V/VhoDRgmGCHLJqXfTgkcFwm GZrpW9yJWnXNk5LM/BOpZJjTiJ42Jek7qwNXk2PkKeOrnkeh5040y8RsTfKN47EL VTD7TXHhU/M5ichH0wjqYk+q2g4j2pv/1D6xH9mCu3AfFtMpB7FqUjMEJMc9/j2p ymu7g5e6YReceH5vrNXS9fGcIMLAL1gZ -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:19 2025 by rpki-client