This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft File: Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft (raw, json) Hash identifier: B3pWoVf0YiwoewTL20CzHdkE1kc+eH/a/xh6DMnC8eQ= Subject key identifier: 31:26:56:C1:C9:30:06:5F:F9:CF:71:38:C4:06:C2:E2:F3:F7:B9:3A Authority key identifier: 15:FA:5F:E8:35:82:6A:BA:0C:8C:67:65:08:09:BD:C9:34:41:27:B0 Certificate issuer: /CN=A918D1BD/serialNumber=15FA5FE835826ABA0C8C67650809BDC9344127B0 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft Manifest number: 1D Signing time: Fri 05 Dec 2025 05:36:49 +0000 Manifest this update: Fri 05 Dec 2025 05:36:49 +0000 Manifest next update: Fri 12 Dec 2025 05:36:49 +0000 Files and hashes: 1: Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl (hash: DUExC78rXQw1YWW+VXS/WOU9dcFbISMnktchfA4zO08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1BD, serialNumber=15FA5FE835826ABA0C8C67650809BDC9344127B0 Validity Not Before: Dec 5 05:36:49 2025 GMT Not After : Dec 12 05:36:49 2025 GMT Subject: CN=69326f71-6385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:fa:25:53:aa:c0:8d:4b:34:18:d4:2b:18: ff:f1:b5:25:0b:b5:24:bf:dc:1f:60:8f:08:c0:2b: fb:7a:23:c1:b1:03:cd:81:bf:73:38:1f:a1:c3:74: 8e:9e:e6:66:f4:2f:e3:83:1e:f5:b4:b1:d5:e3:f2: 1e:43:e0:d0:b8:e5:98:a4:24:6e:0d:c4:b1:34:30: 9a:10:09:09:1f:32:d8:7f:ca:2e:ce:ae:a4:84:bb: dc:c7:be:8c:d7:20:6f:fb:17:1c:6e:4b:b8:ad:5e: a5:7e:7b:ee:96:e2:1c:e3:1f:00:58:52:99:54:78: 8e:b1:6f:b8:35:4c:70:39:f8:da:5b:0e:0b:a5:6c: 55:0c:45:55:01:c9:f9:d4:f9:a0:aa:d0:bb:ab:36: 83:72:90:a1:6f:02:d2:2e:ef:84:4d:a9:e1:39:08: 9a:a5:d8:3b:12:29:38:81:41:a5:2d:af:4f:ad:e1: 05:ca:5a:f5:1a:a1:bb:52:b8:11:78:c4:fa:66:1d: de:c9:82:7c:8b:36:70:e4:c6:3e:95:ca:c4:b9:f0: 63:f7:61:9d:9f:98:7f:8d:63:7d:ab:4c:53:79:01: 53:a6:83:da:c4:6d:12:08:2d:e0:8d:a0:c9:7f:e9: c7:8b:80:31:ed:ce:9d:67:40:25:7e:bf:32:5c:89: 41:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:26:56:C1:C9:30:06:5F:F9:CF:71:38:C4:06:C2:E2:F3:F7:B9:3A X509v3 Authority Key Identifier: keyid:15:FA:5F:E8:35:82:6A:BA:0C:8C:67:65:08:09:BD:C9:34:41:27:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:5b:12:6d:5c:f7:ee:e3:86:5e:27:7a:2c:72:38:93:e0:03: 04:76:92:56:7b:0c:a5:21:e6:f9:a3:a4:b5:65:57:87:92:5f: bf:a7:45:14:9e:90:b6:4c:4f:90:2a:5a:7b:0e:01:ae:8c:d1: 26:e2:76:36:d0:41:ac:f4:84:8b:68:14:43:03:10:ad:e4:98: f0:83:9a:21:e7:4c:d7:29:f0:e3:e3:c4:38:d7:44:9f:bb:d9: 96:da:26:94:4b:88:35:f4:03:5f:b2:6e:a3:86:32:06:89:a6: 27:e0:88:19:45:99:4d:81:5a:b6:80:71:d4:a5:c6:0f:df:0d: d6:32:5e:3d:01:c7:78:31:7c:ff:d8:8f:70:54:b0:2d:a4:55: aa:f0:04:d3:76:76:c9:7d:25:23:67:26:e2:51:34:bd:f0:6c: 11:12:4d:17:43:8d:34:72:21:b7:6b:6a:ed:7a:6e:ba:b6:a3: 6f:91:f0:e8:97:1d:0c:4e:6f:64:ff:9c:ba:90:ea:68:ef:97: 95:5d:07:7e:d0:20:a9:ce:ea:57:73:c3:95:72:b0:ed:1e:fa: 52:76:19:ee:53:47:c2:8b:38:1b:23:eb:52:c7:56:53:ce:47: 1f:23:12:e6:7c:cd:05:b6:31:28:77:e2:33:10:f3:f1:2e:aa: 1a:2b:3c:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDFCRDExMC8GA1UEBRMoMTVGQTVGRTgzNTgyNkFCQTBDOEM2NzY1MDgwOUJEQzkz NDQxMjdCMDAeFw0yNTEyMDUwNTM2NDlaFw0yNTEyMTIwNTM2NDlaMBgxFjAUBgNV BAMTDTY5MzI2ZjcxLTYzODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+dfolU6rAjUs0GNQrGP/xtSULtSS/3B9gjwjAK/t6I8GxA82Bv3M4H6HDdI6e 5mb0L+ODHvW0sdXj8h5D4NC45ZikJG4NxLE0MJoQCQkfMth/yi7OrqSEu9zHvozX IG/7FxxuS7itXqV+e+6W4hzjHwBYUplUeI6xb7g1THA5+NpbDgulbFUMRVUByfnU +aCq0LurNoNykKFvAtIu74RNqeE5CJql2DsSKTiBQaUtr0+t4QXKWvUaobtSuBF4 xPpmHd7JgnyLNnDkxj6VysS58GP3YZ2fmH+NY32rTFN5AVOmg9rEbRIILeCNoMl/ 6ceLgDHtzp1nQCV+vzJciUGbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMSZWwckw Bl/5z3E4xAbC4vP3uTowHwYDVR0jBBgwFoAUFfpf6DWCaroMjGdlCAm9yTRBJ7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMUJEL0IxNzhBNjI0QTc2 MjExRjA4RkRFMzQxM0M0RjlBRTAyL0ZmcGY2RFdDYXJvTWpHZGxDQW05eVRSQko3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRmZwZjZEV0Nhcm9NakdkbENBbTl5VFJCSjdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE MUJEL0IxNzhBNjI0QTc2MjExRjA4RkRFMzQxM0M0RjlBRTAyL0ZmcGY2RFdDYXJv TWpHZGxDQW05eVRSQko3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADFbEm1c9+7jhl4neixyOJPgAwR2klZ7DKUh5vmjpLVlV4eSX7+nRRSe kLZMT5AqWnsOAa6M0SbidjbQQaz0hItoFEMDEK3kmPCDmiHnTNcp8OPjxDjXRJ+7 2ZbaJpRLiDX0A1+ybqOGMgaJpifgiBlFmU2BWraAcdSlxg/fDdYyXj0Bx3gxfP/Y j3BUsC2kVarwBNN2dsl9JSNnJuJRNL3wbBESTRdDjTRyIbdrau16brq2o2+R8OiX HQxOb2T/nLqQ6mjvl5VdB37QIKnO6ldzw5VysO0e+lJ2Ge5TR8KLOBsj61LHVlPO Rx8jEuZ8zQW2MSh34jMQ8/EuqhorPAY= -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:25 2025 by rpki-client