This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json) Hash identifier: r1QGK+z9/ua+ufCPW/P0QYgz9o02j3WAMuV7jBenUi4= Subject key identifier: FA:86:D2:8F:B8:26:B8:2E:E5:55:45:A7:62:AB:EA:A2:F4:EE:27:C4 Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Certificate serial: 1CC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft Manifest number: 1C73 Signing time: Sat 06 Dec 2025 15:53:36 +0000 Manifest this update: Sat 06 Dec 2025 15:53:36 +0000 Manifest next update: Sat 13 Dec 2025 15:53:36 +0000 Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: 5+0FbF+6DcxJAi8YeJ9Cm9DwPpieCVaAhbMN3o5W9tw=) 2: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: jFhmcGLcWRMJb2NQjPMrP9b0nQzmycMaQ535WZNL3p0=) 3: 98E30C12DCE411EDB446D65DC4F9AE02.roa (hash: uUULoxpQYQYmKQJvZhToS8NEpAyyIoYOFguK8s9wAW0=) 4: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: T9+Dc0WSoJhtGdsfkrH1jqSLtL2q8TNFDLOAk1Ci3QY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7368 (0x1cc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Validity Not Before: Dec 6 15:53:36 2025 GMT Not After : Dec 13 15:53:36 2025 GMT Subject: CN=69345180-2b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c2:95:3d:f0:2b:bb:d7:77:60:c2:8a:0f:59: 09:10:d8:23:14:9c:7f:90:c5:c1:80:fb:99:40:ad: 03:e7:2a:14:8d:8c:09:a8:ab:a9:ee:c0:3f:d9:c6: 21:55:99:4e:6e:a4:e4:89:b1:26:f6:b1:f3:2d:d5: 54:96:32:29:e0:41:0d:c6:13:d5:a6:1d:0e:db:9e: 79:e1:fc:30:9a:1f:12:81:13:55:c4:0f:0f:64:be: 95:78:12:67:5e:03:64:f7:3c:22:2c:aa:19:11:7d: 8c:17:8c:d1:ed:0c:ef:7f:14:2d:06:a2:97:54:3c: 31:b0:31:da:9b:91:5a:72:f7:1d:c3:23:b2:29:37: 4f:3f:30:5f:d1:d3:33:32:c3:65:e1:6b:12:c9:20: 16:f8:a3:55:a7:4e:17:e8:82:21:d9:92:27:61:d0: 0a:60:44:84:68:5b:53:2e:8a:89:7e:57:cc:03:96: 88:47:1c:92:65:c1:9b:4d:80:00:7d:9a:7c:84:fb: c2:54:45:81:2e:60:e0:c2:51:37:82:b6:04:a5:82: 61:4b:fb:31:7d:84:65:67:64:80:0f:41:88:38:be: 75:f1:96:96:91:ec:84:92:8a:7c:e4:d0:d6:d7:fb: 20:b5:94:51:e1:a8:29:a7:f7:ef:07:13:d7:1f:e0: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:86:D2:8F:B8:26:B8:2E:E5:55:45:A7:62:AB:EA:A2:F4:EE:27:C4 X509v3 Authority Key Identifier: keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:08:99:f8:97:40:1a:cf:40:57:7a:98:25:86:d0:f1:40:cd: 0e:96:5f:89:a8:f7:b8:5e:1f:b0:8e:41:eb:15:7c:e1:e7:13: cd:97:93:d5:ad:98:b9:6a:50:76:5b:3f:4c:e4:91:96:de:28: 41:2a:70:4b:fd:4d:9b:4e:7e:bf:d8:80:65:c8:50:31:95:a8: 14:39:e5:08:e2:ac:38:1d:17:9b:db:96:c5:da:43:a1:70:cb: 73:7c:76:3b:b4:04:4e:00:e9:23:5d:59:5d:92:49:35:89:e1: 3f:87:13:82:16:50:28:ba:25:fd:08:27:a0:e6:62:28:bd:81: c1:f8:66:0a:dc:7f:44:ac:4a:17:98:05:62:27:34:f6:a7:14: e5:d4:00:be:47:01:0f:88:a0:61:1d:20:66:59:b6:31:59:b9: 3b:e1:53:b9:19:85:cc:6a:a6:19:4b:2b:de:a1:19:27:0f:92: a2:2d:0a:17:71:89:92:7b:14:14:ee:07:46:94:98:05:dc:0e: 52:cf:d7:57:21:8e:6c:0f:61:c8:23:0b:14:39:c8:87:8f:cb: 7f:b9:25:2e:39:e9:e2:43:d6:76:09:08:fb:0d:55:25:42:ae: d6:35:b5:e8:4c:eb:c0:b7:c2:dc:a4:b4:1f:2a:53:4d:26:ba: 44:8c:a8:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5 RThEMkIzMUIwHhcNMjUxMjA2MTU1MzM2WhcNMjUxMjEzMTU1MzM2WjAYMRYwFAYD VQQDEw02OTM0NTE4MC0yYjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sKVPfAru9d3YMKKD1kJENgjFJx/kMXBgPuZQK0D5yoUjYwJqKup7sA/2cYh VZlObqTkibEm9rHzLdVUljIp4EENxhPVph0O25554fwwmh8SgRNVxA8PZL6VeBJn XgNk9zwiLKoZEX2MF4zR7QzvfxQtBqKXVDwxsDHam5FacvcdwyOyKTdPPzBf0dMz MsNl4WsSySAW+KNVp04X6IIh2ZInYdAKYESEaFtTLoqJflfMA5aIRxySZcGbTYAA fZp8hPvCVEWBLmDgwlE3grYEpYJhS/sxfYRlZ2SAD0GIOL518ZaWkeyEkop85NDW 1/sgtZRR4agpp/fvBxPXH+AtKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqG0o+4 Jrgu5VVFp2Kr6qL07ifEMB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OThBRC83MEVGQjRBQ0ZFMkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4 LWpORDFaS0NIdktlalNzeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6CJn4l0Aaz0BXepglhtDxQM0Oll+JqPe4Xh+wjkHrFXzh5xPNl5PV rZi5alB2Wz9M5JGW3ihBKnBL/U2bTn6/2IBlyFAxlagUOeUI4qw4HReb25bF2kOh cMtzfHY7tAROAOkjXVldkkk1ieE/hxOCFlAouiX9CCeg5mIovYHB+GYK3H9ErEoX mAViJzT2pxTl1AC+RwEPiKBhHSBmWbYxWbk74VO5GYXMaqYZSyveoRknD5KiLQoX cYmSexQU7gdGlJgF3A5Sz9dXIY5sD2HIIwsUOciHj8t/uSUuOeniQ9Z2CQj7DVUl Qq7WNbXoTOvAt8LcpLQfKlNNJrpEjKge -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:13 2025 by rpki-client