This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft File: FYOTMKge2Jkgc6I4BMn1kFOPudI.mft (raw, json) Hash identifier: HPv7LtW6nRuBZhvz4+zeWPF7qWohCr7amw7phjI5H5s= Subject key identifier: E1:E9:50:0E:C2:89:9C:5A:0C:FD:E8:B3:4B:CF:56:F8:2D:D0:46:31 Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 Certificate issuer: /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft Manifest number: 0151 Signing time: Fri 05 Dec 2025 02:23:09 +0000 Manifest this update: Fri 05 Dec 2025 02:23:09 +0000 Manifest next update: Fri 12 Dec 2025 02:23:09 +0000 Files and hashes: 1: FYOTMKge2Jkgc6I4BMn1kFOPudI.crl (hash: 2OP96gBmTlma/VVH9kd7xmzRF2eA5yk1MLdclkRROPM=) 2: FFE844FA9A4111F0A04F703EC4F9AE02.roa (hash: CVNQ8o5vgUTo0mQqecmD6qlSNzDJS1qhWASENFVDXu8=) 3: FF5BF8249A4111F0A04F703EC4F9AE02.roa (hash: iScThtYyHAtRsJGeo4LgzdxeB5YiqkEobfpoS62JfqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F, serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Validity Not Before: Dec 5 02:23:09 2025 GMT Not After : Dec 12 02:23:09 2025 GMT Subject: CN=6932420d-8806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:96:58:bc:2a:36:b9:85:58:c0:39:67:f9:42: 60:b2:c1:1f:98:6f:e4:be:0e:8e:fb:e2:11:b3:6b: e2:e9:8e:d8:a1:29:ed:ab:c7:06:38:43:9a:bf:25: 83:43:dc:4f:69:ae:ff:47:0f:ae:06:03:8c:fd:a1: f8:94:0f:e9:ac:b8:60:84:01:91:60:ee:90:e8:bd: d1:95:fc:64:40:29:cd:4b:f5:62:bb:24:81:8d:23: 86:b5:bd:7b:6e:c8:0a:fd:58:8f:58:84:07:34:20: 60:eb:e3:54:d2:dc:04:e4:c7:bf:ce:79:dd:17:d8: 7e:64:68:80:11:46:ab:04:dd:2c:46:22:d4:65:6c: 3e:77:03:6a:89:3e:bb:16:51:5e:6e:50:c5:57:a7: 8b:ab:cc:fe:6f:c7:67:1d:b0:03:6f:4e:e0:4c:f1: 15:85:dd:08:94:52:df:ac:63:a3:38:23:b8:ba:6f: 64:22:f4:ba:14:c6:e8:62:08:3e:17:5b:6f:6b:b1: 97:e6:69:d3:7b:f7:cf:ba:53:8b:3f:55:a1:d8:e6: b4:6c:36:16:45:3b:86:ec:8f:15:6a:5a:1c:e9:84: 4c:87:43:63:cb:74:61:16:89:fa:0c:15:b4:95:be: 56:48:39:6b:82:e8:ab:1a:43:33:8c:b4:11:41:3f: c6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E9:50:0E:C2:89:9C:5A:0C:FD:E8:B3:4B:CF:56:F8:2D:D0:46:31 X509v3 Authority Key Identifier: keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:86:02:82:6d:ec:04:85:a8:b2:86:d8:fc:9f:07:ab:1c:25: d4:81:50:98:f2:36:d1:35:10:cf:1d:a2:7e:fa:91:1f:f0:99: 25:11:05:4c:be:56:24:58:a2:bf:1a:c3:d5:24:70:dc:fe:88: 9b:5a:15:e6:f8:df:41:f1:dc:a7:75:0c:24:e9:49:96:ad:47: b6:41:48:f4:3c:0d:23:f9:7a:fd:54:9e:8e:86:48:2f:8b:82: 7b:2e:45:13:83:22:bc:ae:73:0d:08:c0:7d:d2:07:20:3c:d3: 49:dd:46:13:37:28:75:0e:50:51:85:12:63:45:cb:a9:1f:cd: 13:95:8f:f8:d2:a2:74:cc:35:25:5d:af:d8:fd:bf:9f:06:7c: 85:42:08:bb:aa:f7:22:34:12:c4:e2:8a:26:81:f8:31:50:c3: 8c:68:d8:b1:43:2a:35:1c:3b:cd:88:58:1c:da:47:86:ef:63: ba:39:27:43:f5:1b:13:ea:0f:6d:30:db:43:c9:57:65:28:71: 6b:3c:bc:3f:85:d1:36:ad:83:7f:b9:db:c6:aa:06:a5:a0:db: f3:5d:bf:06:d1:ce:a0:72:ea:cb:3b:98:19:2e:d1:93:eb:82: 94:a4:01:d1:47:0a:53:cb:6e:43:1b:0f:1a:c9:65:b5:64:ee: 4a:85:08:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlCNkYxMTAvBgNVBAUTKDE1ODM5MzMwQTgxRUQ4OTkyMDczQTIzODA0QzlGNTkw NTM4RkI5RDIwHhcNMjUxMjA1MDIyMzA5WhcNMjUxMjEyMDIyMzA5WjAYMRYwFAYD VQQDEw02OTMyNDIwZC04ODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25ZYvCo2uYVYwDln+UJgssEfmG/kvg6O++IRs2vi6Y7YoSntq8cGOEOavyWD Q9xPaa7/Rw+uBgOM/aH4lA/prLhghAGRYO6Q6L3RlfxkQCnNS/ViuySBjSOGtb17 bsgK/ViPWIQHNCBg6+NU0twE5Me/znndF9h+ZGiAEUarBN0sRiLUZWw+dwNqiT67 FlFeblDFV6eLq8z+b8dnHbADb07gTPEVhd0IlFLfrGOjOCO4um9kIvS6FMboYgg+ F1tva7GX5mnTe/fPulOLP1Wh2Oa0bDYWRTuG7I8Valoc6YRMh0Njy3RhFon6DBW0 lb5WSDlrguirGkMzjLQRQT/GVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHpUA7C iZxaDP3os0vPVvgt0EYxMB8GA1UdIwQYMBaAFBWDkzCoHtiZIHOiOATJ9ZBTj7nS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUI2Ri8yQUQ1RjZEOEQw OUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJKa2djNkk0Qk1uMWtGT1B1 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZT1RNS2dlMkprZ2M2STRCTW4xa0ZPUHVkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUI2Ri8yQUQ1RjZEOEQwOUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJK a2djNkk0Qk1uMWtGT1B1ZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBThgKCbewEhaiyhtj8nwerHCXUgVCY8jbRNRDPHaJ++pEf8JklEQVM vlYkWKK/GsPVJHDc/oibWhXm+N9B8dyndQwk6UmWrUe2QUj0PA0j+Xr9VJ6Ohkgv i4J7LkUTgyK8rnMNCMB90gcgPNNJ3UYTNyh1DlBRhRJjRcupH80TlY/40qJ0zDUl Xa/Y/b+fBnyFQgi7qvciNBLE4oomgfgxUMOMaNixQyo1HDvNiFgc2keG72O6OSdD 9RsT6g9tMNtDyVdlKHFrPLw/hdE2rYN/udvGqgaloNvzXb8G0c6gcurLO5gZLtGT 64KUpAHRRwpTy25DGw8ayWW1ZO5KhQh4 -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:49 2025 by rpki-client