This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json) Hash identifier: ZnJc6FpOMiZgrSqmHxVDHYT4goK3LfVK77PsCsSAQRQ= Subject key identifier: 0B:22:52:26:9F:34:44:29:87:A5:A5:BB:BB:B3:CA:1F:3C:BF:DA:49 Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft Manifest number: 0120 Signing time: Fri 05 Dec 2025 02:54:09 +0000 Manifest this update: Fri 05 Dec 2025 02:54:08 +0000 Manifest next update: Fri 12 Dec 2025 02:54:08 +0000 Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: 5DXAi4gEpISk/ZgFtUE7mIjUoPLUThx0+K56qZv9i30=) 2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: nyb0dAzbvJzklMfthLLqpt+z0+HXJ9fgrE8gdxbb/So=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F77, serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Validity Not Before: Dec 5 02:54:08 2025 GMT Not After : Dec 12 02:54:08 2025 GMT Subject: CN=69324951-9d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:f5:8f:66:c1:6e:ee:d2:55:bd:af:89:3b: 9b:a8:12:f7:5e:54:33:5f:9b:a7:83:ba:96:d0:93: cb:be:4e:fa:5a:0d:af:45:2e:e1:45:66:07:42:54: 4d:4d:df:04:f8:ca:da:7a:b4:1e:04:94:bc:a6:65: 1e:c7:68:0f:94:02:74:cb:0d:fe:0c:14:2a:a2:40: c8:65:df:8e:a5:93:11:63:57:8e:f2:d0:a2:cf:eb: 90:35:fe:76:01:6e:b5:7c:10:cc:a9:e0:b7:d1:2e: 34:f5:7a:1a:40:f3:5f:ca:34:32:26:75:ff:ea:05: 34:32:42:69:ff:61:45:2e:f2:2c:66:30:03:7a:0f: ae:70:70:f4:a1:d8:0b:a0:18:e3:db:7b:1e:11:78: b0:81:18:3b:b4:50:ba:3a:f5:8f:9c:73:97:e8:55: b2:f6:42:92:a4:74:91:c9:0a:2c:a1:c9:ce:c8:49: fc:11:86:7e:2e:ab:e4:3b:cd:fc:9f:dc:ba:49:37: d8:26:f7:a6:d9:81:32:e4:e6:a5:17:8a:2e:fb:f6: d8:c8:cf:c5:a4:66:d8:07:e9:2f:40:43:bb:fd:30: 98:18:3a:50:78:cd:9d:d5:16:3b:cb:07:38:aa:f1: 63:cd:ca:cb:a1:5e:59:ba:65:ca:86:63:27:06:3e: 0a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:22:52:26:9F:34:44:29:87:A5:A5:BB:BB:B3:CA:1F:3C:BF:DA:49 X509v3 Authority Key Identifier: keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:35:59:1d:51:6d:84:66:c2:58:e0:84:c9:6f:1a:47:05:12: 93:3d:b2:98:ac:b7:7b:c5:82:a1:a6:5e:5f:91:b4:cb:b2:56: 87:fb:6d:ed:b4:79:d6:de:fa:6a:60:f9:bf:8a:18:77:bb:ca: a9:32:e8:d0:a4:80:9f:c8:a3:71:e5:df:d5:fe:b1:30:9b:7b: c4:c7:96:b4:06:74:d2:28:a5:de:81:f3:7e:53:37:bb:9f:5d: 95:e1:24:ff:b8:00:2a:7d:9a:03:76:15:b9:e2:15:20:1a:58: 3e:27:8c:c2:b0:e8:5b:3f:13:24:02:ca:15:59:a7:6c:c3:77: 48:d1:27:63:04:13:19:40:f0:74:f0:d6:3f:fb:06:28:e9:3a: 82:30:77:5c:45:e3:b4:a1:d1:a4:f7:41:1f:ec:66:68:66:9e: f4:84:60:f8:10:7e:98:7d:58:3d:27:f6:fd:b2:c6:56:e8:21: fc:9a:7d:c3:86:10:cb:e3:53:f2:df:33:b3:0b:cf:f3:48:f7: 3b:bf:e5:4c:82:d5:ee:ed:b6:f6:96:5f:f6:ea:9e:34:41:40: 2c:93:a4:03:62:2a:ae:1a:0e:f8:89:a7:3e:58:fe:9b:f8:f3: d9:d1:49:fa:e7:47:9a:58:5a:9f:fc:67:8b:e3:7b:2d:ba:5a: fa:3d:a9:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNzcxMTAvBgNVBAUTKDE2MzE1QTY4QTc0NTA4MEJEREI2QzhGMDE1NkQwNDMw Njg5MzFCNTcwHhcNMjUxMjA1MDI1NDA4WhcNMjUxMjEyMDI1NDA4WjAYMRYwFAYD VQQDEw02OTMyNDk1MS05ZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGb1j2bBbu7SVb2viTubqBL3XlQzX5ung7qW0JPLvk76Wg2vRS7hRWYHQlRN Td8E+MraerQeBJS8pmUex2gPlAJ0yw3+DBQqokDIZd+OpZMRY1eO8tCiz+uQNf52 AW61fBDMqeC30S409XoaQPNfyjQyJnX/6gU0MkJp/2FFLvIsZjADeg+ucHD0odgL oBjj23seEXiwgRg7tFC6OvWPnHOX6FWy9kKSpHSRyQosocnOyEn8EYZ+LqvkO838 n9y6STfYJvem2YEy5OalF4ou+/bYyM/FpGbYB+kvQEO7/TCYGDpQeM2d1RY7ywc4 qvFjzcrLoV5ZumXKhmMnBj4KDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsiUiaf NEQph6Wlu7uzyh88v9pJMB8GA1UdIwQYMBaAFBYxWminRQgL3bbI8BVtBDBokxtX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY3Ny9DRDI4NzM4MjI1 QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNBdmR0c2p3RlcwRU1HaVRH MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZqRmFhS2RGQ0F2ZHRzandGVzBFTUdpVEcxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY3Ny9DRDI4NzM4MjI1QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNB dmR0c2p3RlcwRU1HaVRHMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgNVkdUW2EZsJY4ITJbxpHBRKTPbKYrLd7xYKhpl5fkbTLslaH+23t tHnW3vpqYPm/ihh3u8qpMujQpICfyKNx5d/V/rEwm3vEx5a0BnTSKKXegfN+Uze7 n12V4ST/uAAqfZoDdhW54hUgGlg+J4zCsOhbPxMkAsoVWadsw3dI0SdjBBMZQPB0 8NY/+wYo6TqCMHdcReO0odGk90Ef7GZoZp70hGD4EH6YfVg9J/b9ssZW6CH8mn3D hhDL41Py3zOzC8/zSPc7v+VMgtXu7bb2ll/26p40QUAsk6QDYiquGg74iac+WP6b +PPZ0Un650eaWFqf/GeL43stulr6PamF -----END CERTIFICATE-----Generated at Sun Dec 7 00:52:18 2025 by rpki-client