This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft File: FggPXxr0qlYST_cZXRPoW5OllSE.mft (raw, json) Hash identifier: O0qb2JMtkzTUAUOaC1cLS2iVMpPshTfsayoNGLo4dG8= Subject key identifier: 9F:FC:17:7C:F8:64:6A:79:1D:F0:74:E3:11:A1:E2:49:ED:16:53:3F Authority key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21 Certificate issuer: /CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521 Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft Manifest number: 023B Signing time: Fri 19 Dec 2025 01:07:06 +0000 Manifest this update: Fri 19 Dec 2025 01:07:05 +0000 Manifest next update: Fri 26 Dec 2025 01:07:05 +0000 Files and hashes: 1: FggPXxr0qlYST_cZXRPoW5OllSE.crl (hash: GU2lFL61ZvhwfBwW4BQf3xKHWzKf8mZRwH8/NLqbA0s=) 2: F29D0E026EE311ED94338E61C4F9AE02.roa (hash: 33mYAJEejTIdphmOfEnKCIbd2zZ81lml8aEGejVT4Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193267, serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521 Validity Not Before: Dec 19 01:07:05 2025 GMT Not After : Dec 26 01:07:05 2025 GMT Subject: CN=6944a53a-3156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8d:66:cb:1d:3a:be:fe:f3:f2:d4:40:da:f7: c7:ba:9f:23:ad:ce:d5:b5:2e:ef:d6:b3:cd:aa:ae: 53:7d:2b:03:9a:19:50:09:59:c2:de:d5:50:3f:24: 3b:fe:63:2f:57:e8:b2:5a:40:dc:7d:d2:2b:18:14: 12:e9:5e:ec:42:b9:11:ce:31:4d:79:9e:6f:44:cc: 6b:14:f2:59:c6:bb:a4:20:e8:81:96:a0:c8:3f:f0: a4:4d:29:a9:83:3e:bc:e1:57:41:bd:92:be:cc:09: 17:86:d9:b9:27:41:51:5e:d0:f5:08:66:23:d4:15: 0e:15:95:3b:f4:97:a7:d0:cf:b9:0d:2c:30:da:4e: 4b:da:fc:0f:f5:08:f5:c7:36:7a:ad:bf:9a:76:b8: 51:d0:17:f0:09:43:a1:47:f3:16:df:62:a8:37:50: 2a:b1:f7:cd:62:2d:f0:d9:89:55:42:89:8e:51:cc: 74:32:98:ea:76:2c:1c:4a:f4:6a:bb:d5:43:44:c3: 10:45:62:15:ca:6e:2d:95:ee:77:69:9e:49:fa:3a: ae:76:28:b6:e0:7d:68:05:3b:39:32:d5:0e:78:d8: 80:6e:cb:df:8e:8a:a5:80:df:0f:52:f5:ae:91:c5: b7:e7:d5:01:fe:92:1e:3b:c7:e6:dd:bf:06:d1:16: 77:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FC:17:7C:F8:64:6A:79:1D:F0:74:E3:11:A1:E2:49:ED:16:53:3F X509v3 Authority Key Identifier: keyid:16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:31:95:c5:08:2b:d0:65:25:9a:32:0b:11:02:18:83:52:12: a6:c9:b5:dd:7c:2f:23:4f:ec:65:76:6e:90:e9:19:bd:6f:df: 56:70:ba:79:00:1a:f0:98:6a:49:77:ae:ac:97:4f:10:00:bb: 54:7e:c5:37:07:65:42:aa:b3:79:13:0a:60:ed:52:86:82:af: 09:5d:16:02:38:8a:5c:06:0c:9b:fb:57:55:84:99:4f:f2:a4: cf:47:cb:96:e3:33:e7:a7:04:37:26:09:52:bd:a1:5b:69:01: 05:38:45:1e:74:70:d6:e4:fa:90:fc:4b:3f:18:7a:a6:ee:32: dd:0b:5a:3e:66:f5:05:7c:33:69:05:89:7e:e5:6a:9d:87:6c: 30:20:dc:62:d1:bf:2e:f2:0f:1e:c9:f9:b3:6a:29:50:09:1b: 73:ac:f1:ec:89:3f:4b:76:53:4e:b7:cc:24:bf:de:40:88:7c: 95:a6:c0:b6:9a:7b:3d:92:f8:1c:92:41:76:8b:09:dc:1d:fd: a7:e7:8f:2b:db:5d:fb:52:3a:03:22:1b:ae:64:78:89:f0:03: fc:2f:16:2e:84:ee:0d:e7:e7:22:f6:50:67:eb:70:32:0f:0e: 50:65:04:ff:68:76:2c:f9:13:44:30:59:07:2b:8a:cc:57:d2: e4:b9:44:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMyNjcxMTAvBgNVBAUTKDE2MDgwRjVGMUFGNEFBNTYxMjRGRjcxOTVEMTNFODVC OTNBNTk1MjEwHhcNMjUxMjE5MDEwNzA1WhcNMjUxMjI2MDEwNzA1WjAYMRYwFAYD VQQDDA02OTQ0YTUzYS0zMTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoY1myx06vv7z8tRA2vfHup8jrc7VtS7v1rPNqq5TfSsDmhlQCVnC3tVQPyQ7 /mMvV+iyWkDcfdIrGBQS6V7sQrkRzjFNeZ5vRMxrFPJZxrukIOiBlqDIP/CkTSmp gz684VdBvZK+zAkXhtm5J0FRXtD1CGYj1BUOFZU79Jen0M+5DSww2k5L2vwP9Qj1 xzZ6rb+adrhR0BfwCUOhR/MW32KoN1AqsffNYi3w2YlVQomOUcx0MpjqdiwcSvRq u9VDRMMQRWIVym4tle53aZ5J+jqudii24H1oBTs5MtUOeNiAbsvfjoqlgN8PUvWu kcW359UB/pIeO8fm3b8G0RZ3fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/8F3z4 ZGp5HfB04xGh4kntFlM/MB8GA1UdIwQYMBaAFBYID18a9KpWEk/3GV0T6FuTpZUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzI2Ny84OTY2RDZGRTZF RTExMUVEQjQ1RkYzNjBDNEY5QUUwMi9GZ2dQWHhyMHFsWVNUX2NaWFJQb1c1T2xs U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnZ1BYeHIwcWxZU1RfY1pYUlBvVzVPbGxTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzI2Ny84OTY2RDZGRTZFRTExMUVEQjQ1RkYzNjBDNEY5QUUwMi9GZ2dQWHhyMHFs WVNUX2NaWFJQb1c1T2xsU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7MZXFCCvQZSWaMgsRAhiDUhKmybXdfC8jT+xldm6Q6Rm9b99WcLp5 ABrwmGpJd66sl08QALtUfsU3B2VCqrN5Ewpg7VKGgq8JXRYCOIpcBgyb+1dVhJlP 8qTPR8uW4zPnpwQ3JglSvaFbaQEFOEUedHDW5PqQ/Es/GHqm7jLdC1o+ZvUFfDNp BYl+5Wqdh2wwINxi0b8u8g8eyfmzailQCRtzrPHsiT9LdlNOt8wkv95AiHyVpsC2 mns9kvgckkF2iwncHf2n548r2137UjoDIhuuZHiJ8AP8LxYuhO4N5+ci9lBn63Ay Dw5QZQT/aHYs+RNEMFkHK4rMV9LkuURZ -----END CERTIFICATE-----Generated at Fri Dec 19 12:51:21 2025 by rpki-client