This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft File: fCyheDCTqbmvjuRX2glIgkIVJQs.mft (raw, json) Hash identifier: StjsEjcWeDq6oavXfQT2CVhSO848sZpo7uvMhRO50VU= Subject key identifier: 1D:14:EC:07:F2:E2:A3:89:68:CE:43:BD:D6:D1:CB:AA:2D:FB:82:6F Authority key identifier: 7C:2C:A1:78:30:93:A9:B9:AF:8E:E4:57:DA:09:48:82:42:15:25:0B Certificate issuer: /CN=A918A2D9/serialNumber=7C2CA1783093A9B9AF8EE457DA0948824215250B Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft Manifest number: 45 Signing time: Fri 05 Dec 2025 05:15:21 +0000 Manifest this update: Fri 05 Dec 2025 05:15:20 +0000 Manifest next update: Fri 12 Dec 2025 05:15:20 +0000 Files and hashes: 1: fCyheDCTqbmvjuRX2glIgkIVJQs.crl (hash: nIMF+cNTSJR8vUvPBIwsmFNuZQuKSoaXH4NsS77ZdXQ=) 2: B1B36E8A691911F08409AD61C4F9AE02.roa (hash: MstGvfkW4GBYfFu6ex+YssVwSg/+x1eym31kTHP8Xuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.crl rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A2D9, serialNumber=7C2CA1783093A9B9AF8EE457DA0948824215250B Validity Not Before: Dec 5 05:15:20 2025 GMT Not After : Dec 12 05:15:20 2025 GMT Subject: CN=69326a68-850e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:9b:a0:7c:b8:53:97:ec:09:26:61:34:3e: bd:db:26:e6:20:6c:b9:bf:9f:1d:d8:19:e9:11:2b: 1d:0b:c3:18:e4:d4:2c:54:e5:0c:85:fc:05:cf:65: db:54:e3:6b:79:a0:73:3a:b5:af:92:e4:fe:a4:e2: 9f:55:c0:75:73:93:c1:11:5a:10:4b:47:5f:d7:88: b7:de:aa:e1:69:ba:d7:04:6f:4f:77:b0:a9:36:5b: 3a:0f:f2:f1:de:75:9b:b4:97:8e:f0:d2:44:c7:cd: a3:74:4e:53:e8:06:84:12:97:a5:52:06:5e:f5:6c: cc:60:21:f1:d7:a0:05:03:45:81:0d:cb:d3:43:0d: 6a:72:8a:43:ab:c1:24:a0:3a:7c:8c:6d:a0:dd:07: 97:34:75:ab:5e:3d:0c:a4:75:fb:d8:e6:e9:b4:09: b9:ec:8d:8e:7a:34:12:6c:4c:dd:a7:54:37:a1:80: 81:9d:0d:be:7f:19:85:e3:20:e0:10:78:13:cb:8a: 4e:a9:65:83:6b:18:70:59:f1:b6:9c:e5:d5:82:90: 4e:ba:59:65:07:a4:65:b9:e3:8b:31:38:bf:a4:91: b5:6d:c8:73:55:42:eb:ea:cf:96:5b:eb:81:00:8e: 12:14:8b:38:2b:9d:d9:6c:ec:7a:a0:18:3e:9a:b1: d3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:14:EC:07:F2:E2:A3:89:68:CE:43:BD:D6:D1:CB:AA:2D:FB:82:6F X509v3 Authority Key Identifier: keyid:7C:2C:A1:78:30:93:A9:B9:AF:8E:E4:57:DA:09:48:82:42:15:25:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:a4:f3:a9:7a:b4:fc:03:a4:e1:30:72:db:5d:ff:1b:07:5d: 4d:17:5d:f3:d9:20:de:03:42:36:c3:16:e5:4d:47:bf:48:58: 97:ca:c7:ce:00:eb:79:3c:ee:84:83:28:44:55:31:aa:75:d0: 7f:c6:76:f0:98:05:d0:ac:b2:e8:75:be:a6:fe:a5:2c:c4:68: 1d:63:0b:a9:42:72:c5:2d:8e:8d:01:a4:73:9c:3b:5c:6e:de: 55:e5:db:c8:f2:8e:69:c5:d1:96:d2:c8:5a:d4:ec:76:3a:42: 91:fd:99:95:2a:1c:7b:2e:3c:1f:84:2b:e1:23:20:d4:7d:37: 2c:45:59:0b:34:a3:9c:e4:6c:5e:21:52:f1:94:4d:d5:06:88: 5c:5c:d6:9d:96:c0:6a:c0:32:09:dd:ff:db:2b:7a:a3:f3:ab: 58:a1:52:6f:14:8f:bd:3a:b3:4c:35:45:b3:4e:e3:b6:05:cf: 47:51:fe:f9:03:13:f2:b5:51:0f:0b:7d:4d:c2:84:3a:06:0f: 91:e8:70:6d:38:2b:33:5c:39:fd:22:b6:1b:f3:64:d0:44:01: 81:f0:54:96:a1:4c:7a:29:03:28:35:ca:eb:90:9c:08:29:ac: eb:c8:88:d4:78:d3:c3:53:12:f5:92:d8:38:15:cb:78:74:e2: 2e:bd:94:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTJEOTExMC8GA1UEBRMoN0MyQ0ExNzgzMDkzQTlCOUFGOEVFNDU3REEwOTQ4ODI0 MjE1MjUwQjAeFw0yNTEyMDUwNTE1MjBaFw0yNTEyMTIwNTE1MjBaMBgxFjAUBgNV BAMTDTY5MzI2YTY4LTg1MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/C5ugfLhTl+wJJmE0Pr3bJuYgbLm/nx3YGekRKx0Lwxjk1CxU5QyF/AXPZdtU 42t5oHM6ta+S5P6k4p9VwHVzk8ERWhBLR1/XiLfequFputcEb093sKk2WzoP8vHe dZu0l47w0kTHzaN0TlPoBoQSl6VSBl71bMxgIfHXoAUDRYENy9NDDWpyikOrwSSg OnyMbaDdB5c0datePQykdfvY5um0CbnsjY56NBJsTN2nVDehgIGdDb5/GYXjIOAQ eBPLik6pZYNrGHBZ8bac5dWCkE66WWUHpGW544sxOL+kkbVtyHNVQuvqz5Zb64EA jhIUizgrndls7HqgGD6asdM3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHRTsB/Li o4lozkO91tHLqi37gm8wHwYDVR0jBBgwFoAUfCyheDCTqbmvjuRX2glIgkIVJQsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBMkQ5L0YyOTY2Njg4Njkx ODExRjBBMTBGOEI1RkM0RjlBRTAyL2ZDeWhlRENUcWJtdmp1UlgyZ2xJZ2tJVkpR cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZkN5aGVEQ1RxYm12anVSWDJnbElna0lWSlFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB MkQ5L0YyOTY2Njg4NjkxODExRjBBMTBGOEI1RkM0RjlBRTAyL2ZDeWhlRENUcWJt dmp1UlgyZ2xJZ2tJVkpRcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHWk86l6tPwDpOEwcttd/xsHXU0XXfPZIN4DQjbDFuVNR79IWJfKx84A 63k87oSDKERVMap10H/GdvCYBdCssuh1vqb+pSzEaB1jC6lCcsUtjo0BpHOcO1xu 3lXl28jyjmnF0ZbSyFrU7HY6QpH9mZUqHHsuPB+EK+EjINR9NyxFWQs0o5zkbF4h UvGUTdUGiFxc1p2WwGrAMgnd/9sreqPzq1ihUm8Uj706s0w1RbNO47YFz0dR/vkD E/K1UQ8LfU3ChDoGD5HocG04KzNcOf0ithvzZNBEAYHwVJahTHopAyg1yuuQnAgp rOvIiNR408NTEvWS2DgVy3h04i69lHA= -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:50 2025 by rpki-client