This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json) Hash identifier: AES+BL8ISQqtZqIybBRh43YDrL5IIyvF21lhEhszHNg= Subject key identifier: F0:60:E5:2B:83:1A:FA:15:8A:6A:7D:5C:BA:1A:D0:35:35:DB:CE:F2 Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft Manifest number: 04A6 Signing time: Thu 04 Dec 2025 22:30:53 +0000 Manifest this update: Thu 04 Dec 2025 22:30:52 +0000 Manifest next update: Thu 11 Dec 2025 22:30:52 +0000 Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: 7URxshoTxxYTR0Qrvk9HMo/zUg32hrK0NkVtbJfxquY=) 2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: y1lAMNBHmo8LOCH2UbQd6lp4y3+4hOTNpmp++HIjEDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Validity Not Before: Dec 4 22:30:52 2025 GMT Not After : Dec 11 22:30:52 2025 GMT Subject: CN=69320b9c-b302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:06:1f:75:5d:09:e8:ec:e6:8d:b2:33:95: 94:96:fd:22:a1:47:22:b5:ff:15:16:27:e0:88:50: 8d:08:55:04:dc:b6:7e:b7:35:57:9c:81:12:de:92: ce:d7:58:b1:5f:d7:96:b4:f6:97:1c:f0:e0:c5:29: 39:c2:8c:b3:40:8f:6a:f7:62:da:46:07:44:3d:d6: d6:05:b1:a0:3f:0b:a8:9f:6f:4a:90:e9:42:55:12: d5:92:b2:8e:8f:e3:cd:b8:ce:31:6a:a8:f5:24:a4: 43:14:43:c8:57:82:47:37:84:0a:7f:38:ac:e4:15: 41:94:c1:f5:b1:ea:13:95:01:de:66:d6:f8:49:3c: 5d:5b:ab:13:c3:54:41:77:be:4a:b7:c9:72:7b:dc: 67:21:c5:79:5f:9e:e3:c6:e5:37:8c:f0:10:1e:b6: ab:4e:5c:b2:5d:b9:8c:43:09:54:58:8f:2b:5e:47: 86:e5:f8:77:b4:e5:b6:f0:be:13:ec:f5:ca:60:0b: 37:55:0b:f2:43:11:c3:c0:c6:f7:de:15:36:a5:15: 16:83:2a:d4:bf:75:43:ad:f2:78:e8:a1:09:91:40: 5a:fe:36:df:66:84:4c:81:ef:49:26:3f:79:14:9e: 80:84:b0:89:fd:84:97:63:b5:2e:20:0a:08:da:67: d4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:60:E5:2B:83:1A:FA:15:8A:6A:7D:5C:BA:1A:D0:35:35:DB:CE:F2 X509v3 Authority Key Identifier: keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:09:71:c0:94:43:cb:e1:9c:98:6a:10:c0:48:93:f0:f3:e6: 88:59:8e:34:2b:99:71:9e:67:82:9e:c4:1f:29:f2:54:41:d4: 69:ba:59:16:73:40:0a:a8:86:c6:7b:b2:60:d5:45:50:7e:18: 73:8c:fa:5e:cd:80:da:d3:ed:3e:c3:b3:ca:f1:3c:96:31:da: 2c:af:37:ac:93:7d:00:cd:bb:f9:46:1d:46:b1:ec:fb:a2:25: 33:a5:9e:ee:c9:2b:41:e3:82:fa:31:3e:59:50:2e:a6:b8:78: 89:10:0f:a4:31:16:32:cf:16:62:96:fa:53:e4:0a:14:fb:b3: 4d:b8:88:25:e5:de:fb:eb:fb:9f:24:07:b5:b0:27:8d:6a:62: f1:2a:e4:2a:7f:cd:d3:60:bb:b6:80:f2:c6:1e:27:7a:ed:b9: 7d:c5:e5:0e:3e:cc:f6:9e:a7:9f:84:2b:40:cd:3a:7b:b7:5c: 43:15:c4:83:ae:31:1d:65:8c:22:b1:23:48:ea:8a:27:3a:a5: 5d:e1:11:69:8d:c8:2a:6e:d8:fa:3c:f5:7f:ae:9c:58:34:58: d7:8f:1a:77:25:ca:07:ca:00:e4:1b:24:fb:55:37:ca:57:71: 43:d9:76:6b:3f:c1:e5:a3:6a:ab:9e:c2:bc:94:25:2f:00:e8: f1:26:23:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2 QTMzRTVDQUYwHhcNMjUxMjA0MjIzMDUyWhcNMjUxMjExMjIzMDUyWjAYMRYwFAYD VQQDEw02OTMyMGI5Yy1iMzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOoGH3VdCejs5o2yM5WUlv0ioUcitf8VFifgiFCNCFUE3LZ+tzVXnIES3pLO 11ixX9eWtPaXHPDgxSk5woyzQI9q92LaRgdEPdbWBbGgPwuon29KkOlCVRLVkrKO j+PNuM4xaqj1JKRDFEPIV4JHN4QKfzis5BVBlMH1seoTlQHeZtb4STxdW6sTw1RB d75Kt8lye9xnIcV5X57jxuU3jPAQHrarTlyyXbmMQwlUWI8rXkeG5fh3tOW28L4T 7PXKYAs3VQvyQxHDwMb33hU2pRUWgyrUv3VDrfJ46KEJkUBa/jbfZoRMge9JJj95 FJ6AhLCJ/YSXY7UuIAoI2mfU1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBg5SuD GvoVimp9XLoa0DU1287yMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk5Mi81QjNEMDgwMjVDMEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZr SFhjUHd0LWtBOUZxTS1YSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvCXHAlEPL4ZyYahDASJPw8+aIWY40K5lxnmeCnsQfKfJUQdRpulkW c0AKqIbGe7Jg1UVQfhhzjPpezYDa0+0+w7PK8TyWMdosrzesk30Azbv5Rh1Gsez7 oiUzpZ7uyStB44L6MT5ZUC6muHiJEA+kMRYyzxZilvpT5AoU+7NNuIgl5d776/uf JAe1sCeNamLxKuQqf83TYLu2gPLGHid67bl9xeUOPsz2nqefhCtAzTp7t1xDFcSD rjEdZYwisSNI6oonOqVd4RFpjcgqbtj6PPV/rpxYNFjXjxp3JcoHygDkGyT7VTfK V3FD2XZrP8Hlo2qrnsK8lCUvAOjxJiOj -----END CERTIFICATE-----Generated at Sat Dec 6 21:46:10 2025 by rpki-client