This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json) Hash identifier: JyX+5YD3K6EOhlUW2lkddoyU6hBJ9Me7twBZyNxDqlM= Subject key identifier: 4E:78:4B:FE:34:31:A3:F2:25:F6:89:67:77:FD:DC:87:FD:4D:E9:ED Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft Manifest number: 0239 Signing time: Sun 21 Dec 2025 01:12:18 +0000 Manifest this update: Sun 21 Dec 2025 01:12:17 +0000 Manifest next update: Sun 28 Dec 2025 01:12:17 +0000 Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: j1RsC2tTEIJL87/p2c7+YDvkFf18Likce3cjCCYDMts=) 2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: hlcOiwDISzas5tiOnv5T5pSK2UpZ6cfJveUb3LnTEYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Validity Not Before: Dec 21 01:12:17 2025 GMT Not After : Dec 28 01:12:17 2025 GMT Subject: CN=69474972-7f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:af:24:86:e2:e9:d0:67:48:a4:ea:7a:4c:75: 63:4a:4f:85:a1:54:d9:75:2b:9b:8d:72:21:da:2f: 7b:19:81:67:ac:b7:53:fe:5a:41:4f:ef:e3:43:96: 1a:17:38:c0:ba:dd:0e:63:fe:f2:59:8d:d1:bf:4f: 29:46:4b:ee:1f:c0:36:e6:96:70:19:f1:44:d4:9d: 99:ac:84:34:36:3a:10:ac:dd:04:14:76:fb:79:02: 44:25:24:e2:d6:7d:94:62:ed:c9:8f:f6:7e:31:7b: 78:bc:a1:36:fe:41:75:7c:c8:7d:f3:b2:1f:87:d2: 37:e2:7d:c0:df:4f:61:e0:17:d0:63:f4:d1:b6:74: b6:5b:92:cc:e4:ba:22:3d:0a:eb:8b:18:e1:88:bf: cb:05:b4:81:3c:13:15:95:77:56:04:be:4a:a1:7d: b6:f2:44:9a:b5:aa:4d:c6:42:dc:a9:fd:c5:62:a6: ee:54:d7:05:07:74:90:74:c9:fd:31:07:01:63:2e: c9:71:6b:76:7d:17:d5:32:7c:19:8a:bf:c1:15:40: 65:66:12:d0:7e:fa:ee:62:e1:8e:ef:38:f4:bf:17: fe:f3:dd:86:1b:86:0e:ab:79:57:80:62:28:07:b7: fd:00:89:a1:a3:49:85:92:d1:c2:57:9f:4b:97:05: cc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:78:4B:FE:34:31:A3:F2:25:F6:89:67:77:FD:DC:87:FD:4D:E9:ED X509v3 Authority Key Identifier: keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:83:a5:cd:7c:b0:8f:33:92:0f:38:68:a8:59:b4:bb:a1:0b: a1:bc:db:23:b9:3b:db:95:1e:fd:c5:02:76:5c:e5:6d:69:ee: 1e:11:70:9e:87:50:8d:09:86:a9:2d:c7:8c:0a:08:cb:de:8d: 39:ce:41:9b:40:4a:a9:d0:b4:3a:84:9f:7e:39:fa:fc:e9:8b: e6:4c:7a:58:76:8c:03:56:07:c3:38:9e:62:0d:d5:29:fd:7f: 84:83:63:06:0f:33:ec:57:93:04:45:cc:43:40:2b:cb:16:f2: 4d:d6:de:0a:9a:03:6a:8d:41:ad:dc:69:a4:d6:d5:b5:40:0a: b1:00:16:76:c8:93:5b:dd:34:b1:3a:29:b9:18:82:f8:5c:87: d8:76:fa:c1:dc:04:a3:44:ca:38:7d:70:81:5f:36:c1:5b:d8: 8a:cf:2e:35:9c:ae:b8:25:61:2f:f5:35:be:38:55:1d:b8:ae: a9:e7:20:79:55:69:70:2c:3a:cd:02:ba:29:85:78:72:00:a4: b9:82:ea:bc:13:a9:ac:03:43:55:b2:6d:a9:63:b4:8e:50:c0: 23:4b:04:e6:0e:2f:4d:b5:bd:28:13:51:f2:d2:2c:70:53:87: 72:f0:78:30:05:45:4b:7c:4d:7b:40:80:c9:f7:08:9d:4b:25: 9d:2a:27:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQzQxMTAvBgNVBAUTKDE1RjBBNDA2ODVFNjlBNjQxREI3MEU4MkJGNzgwQTlB QkZFM0YxNTkwHhcNMjUxMjIxMDExMjE3WhcNMjUxMjI4MDExMjE3WjAYMRYwFAYD VQQDDA02OTQ3NDk3Mi03ZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAla8khuLp0GdIpOp6THVjSk+FoVTZdSubjXIh2i97GYFnrLdT/lpBT+/jQ5Ya FzjAut0OY/7yWY3Rv08pRkvuH8A25pZwGfFE1J2ZrIQ0NjoQrN0EFHb7eQJEJSTi 1n2UYu3Jj/Z+MXt4vKE2/kF1fMh987Ifh9I34n3A309h4BfQY/TRtnS2W5LM5Loi PQrrixjhiL/LBbSBPBMVlXdWBL5KoX228kSatapNxkLcqf3FYqbuVNcFB3SQdMn9 MQcBYy7JcWt2fRfVMnwZir/BFUBlZhLQfvruYuGO7zj0vxf+892GG4YOq3lXgGIo B7f9AImho0mFktHCV59LlwXMIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE54S/40 MaPyJfaJZ3f93If9TentMB8GA1UdIwQYMBaAFBXwpAaF5ppkHbcOgr94Cpq/4/FZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBDNC9GM0E4NzJEQTdB MDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1tUWR0dzZDdjNnS21yX2o4 VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQ2tCb1htbW1RZHR3NkN2M2dLbXJfajhWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjBDNC9GM0E4NzJEQTdBMDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1t UWR0dzZDdjNnS21yX2o4VmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAig6XNfLCPM5IPOGioWbS7oQuhvNsjuTvblR79xQJ2XOVtae4eEXCe h1CNCYapLceMCgjL3o05zkGbQEqp0LQ6hJ9+Ofr86YvmTHpYdowDVgfDOJ5iDdUp /X+Eg2MGDzPsV5MERcxDQCvLFvJN1t4KmgNqjUGt3Gmk1tW1QAqxABZ2yJNb3TSx Oim5GIL4XIfYdvrB3ASjRMo4fXCBXzbBW9iKzy41nK64JWEv9TW+OFUduK6p5yB5 VWlwLDrNArophXhyAKS5guq8E6msA0NVsm2pY7SOUMAjSwTmDi9Ntb0oE1Hy0ixw U4dy8HgwBUVLfE17QIDJ9widSyWdKifz -----END CERTIFICATE-----Generated at Sun Dec 21 06:06:03 2025 by rpki-client