This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft File: FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft (raw, json) Hash identifier: YgOtfhSuI2IRxbc/cf0VcmJg925WuKdAu9cyYAJ3uTE= Subject key identifier: BB:D3:1C:99:C9:6E:38:0F:DC:4F:43:DE:89:05:43:2E:41:04:89:16 Authority key identifier: 15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44 Certificate issuer: /CN=A918E951/serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft Manifest number: 4A Signing time: Fri 05 Dec 2025 05:12:45 +0000 Manifest this update: Fri 05 Dec 2025 05:12:44 +0000 Manifest next update: Fri 12 Dec 2025 05:12:44 +0000 Files and hashes: 1: FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl (hash: W/KvEILp3rJiHlJ1tG+UdpjSr+zgoQIHAEbMPg410M4=) 2: A1E831AA623B11F0BEB49510C4F9AE02.roa (hash: lW7fDVCe8bhLbHVbi9D8490xI/Aio6OMPBNi0xrKgHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E951, serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744 Validity Not Before: Dec 5 05:12:44 2025 GMT Not After : Dec 12 05:12:44 2025 GMT Subject: CN=693269cc-97ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:65:c5:98:ff:6d:27:2b:d0:97:7f:49:39: d6:79:96:b7:d5:19:6f:fe:a6:54:17:3b:46:12:bb: 7c:37:bb:9f:01:93:f8:57:51:13:39:b8:11:3c:c0: a7:c1:ed:f9:26:ff:44:8b:14:66:3c:a4:e8:0f:e0: ab:0c:42:7f:fe:ca:e7:95:f2:4e:f6:71:95:db:c0: 16:16:94:26:bb:b1:5f:cc:32:9f:9a:f7:75:34:c9: a9:5d:dc:36:76:c3:a7:31:bc:4f:c6:65:24:57:36: a2:dd:11:1d:94:a9:b8:cd:39:8a:1e:ee:68:cd:56: 51:c6:43:e5:9b:0c:4e:1e:ad:cf:06:eb:4f:cd:ff: 6e:f8:c1:b7:c3:56:83:d8:33:e8:0e:0f:cf:63:04: e4:6a:a7:5c:5e:67:1d:27:42:c1:77:5d:eb:d0:7c: ca:78:9f:85:b8:1a:0e:48:21:16:11:09:68:82:82: 96:05:81:12:49:4e:59:bf:70:2e:3d:28:e9:4a:04: d4:b3:90:24:7c:d0:37:c4:68:65:50:6a:10:19:f9: 06:14:a5:a8:1e:ab:0c:1e:90:b4:ff:3b:b4:2d:87: c1:e1:7b:9a:1c:66:aa:e9:bd:1e:d2:4f:93:6e:50: 5d:77:be:c5:6f:d3:00:77:dc:ee:28:5d:12:84:57: d8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D3:1C:99:C9:6E:38:0F:DC:4F:43:DE:89:05:43:2E:41:04:89:16 X509v3 Authority Key Identifier: keyid:15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:e2:c5:8a:f4:72:11:0c:c2:d1:65:c6:a4:f5:98:b6:75:05: 4f:83:63:5c:79:0c:44:25:68:2d:b9:a3:a8:db:16:1a:1e:90: 9e:32:c0:88:05:5d:94:cb:2f:85:08:13:9d:c2:0f:e4:cd:0a: e9:02:6e:88:d1:5f:10:9a:af:40:ab:29:7d:c9:f3:35:33:98: b5:74:58:ca:41:da:f1:55:ee:e8:fd:f8:2e:bb:11:e2:c9:5a: 2f:f7:9f:f5:ba:35:6d:85:79:d6:1f:35:01:f8:9b:82:52:d8: 91:15:6e:2a:4b:30:20:30:6b:e9:34:6d:eb:36:59:a8:02:cc: 64:40:78:f3:01:2e:15:e4:80:70:62:22:80:04:96:32:44:3b: da:05:33:b2:3b:b3:9a:06:85:b1:30:46:50:7b:0d:46:ef:bb: bc:00:5d:17:ca:6e:6a:ec:f9:13:ce:35:71:4e:b1:3a:99:75: a8:7e:41:31:e4:d0:60:f6:50:2c:6c:6b:bd:58:3a:8a:bc:71: 4f:5e:8a:e0:f7:c3:83:25:2e:24:15:f6:60:1a:1d:5a:0d:2b: 9a:2b:04:70:de:77:a2:cc:37:b2:f9:4a:fd:7a:e9:86:82:2a: a0:dd:69:a8:36:f7:05:b8:15:4f:7f:73:39:fc:9a:fc:cd:0a: a4:13:e5:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTk1MTExMC8GA1UEBRMoMTVCQjgzNUREQjVGMjhCN0UzRjUxMjg4N0U1N0U5RkUz MTczODc0NDAeFw0yNTEyMDUwNTEyNDRaFw0yNTEyMTIwNTEyNDRaMBgxFjAUBgNV BAMTDTY5MzI2OWNjLTk3YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/j2XFmP9tJyvQl39JOdZ5lrfVGW/+plQXO0YSu3w3u58Bk/hXURM5uBE8wKfB 7fkm/0SLFGY8pOgP4KsMQn/+yueV8k72cZXbwBYWlCa7sV/MMp+a93U0yald3DZ2 w6cxvE/GZSRXNqLdER2UqbjNOYoe7mjNVlHGQ+WbDE4erc8G60/N/274wbfDVoPY M+gOD89jBORqp1xeZx0nQsF3XevQfMp4n4W4Gg5IIRYRCWiCgpYFgRJJTlm/cC49 KOlKBNSzkCR80DfEaGVQahAZ+QYUpageqwwekLT/O7Qth8Hhe5ocZqrpvR7ST5Nu UF13vsVv0wB33O4oXRKEV9hnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu9Mcmclu OA/cT0PeiQVDLkEEiRYwHwYDVR0jBBgwFoAUFbuDXdtfKLfj9RKIflfp/jFzh0Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFOTUxLzUxQkQ3RERBNjIz QTExRjBBN0UyNzYwQkM0RjlBRTAyL0ZidURYZHRmS0xmajlSS0lmbGZwX2pGemgw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRmJ1RFhkdGZLTGZqOVJLSWZsZnBfakZ6aDBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF OTUxLzUxQkQ3RERBNjIzQTExRjBBN0UyNzYwQkM0RjlBRTAyL0ZidURYZHRmS0xm ajlSS0lmbGZwX2pGemgwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMLixYr0chEMwtFlxqT1mLZ1BU+DY1x5DEQlaC25o6jbFhoekJ4ywIgF XZTLL4UIE53CD+TNCukCbojRXxCar0CrKX3J8zUzmLV0WMpB2vFV7uj9+C67EeLJ Wi/3n/W6NW2FedYfNQH4m4JS2JEVbipLMCAwa+k0bes2WagCzGRAePMBLhXkgHBi IoAEljJEO9oFM7I7s5oGhbEwRlB7DUbvu7wAXRfKbmrs+RPONXFOsTqZdah+QTHk 0GD2UCxsa71YOoq8cU9eiuD3w4MlLiQV9mAaHVoNK5orBHDed6LMN7L5Sv166YaC KqDdaag29wW4FU9/czn8mvzNCqQT5R8= -----END CERTIFICATE-----Generated at Sat Dec 6 23:46:06 2025 by rpki-client