This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json) Hash identifier: ld0sgyV4VmljSIOQ2nxGO6U5Q/zz5TVhbWwqRKf9quM= Subject key identifier: AF:15:33:E7:F2:1C:F2:2E:5A:ED:8A:B1:CB:6C:D0:B9:B8:51:B7:C3 Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Certificate serial: 34E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft Manifest number: 397E Signing time: Sat 06 Dec 2025 14:33:14 +0000 Manifest this update: Sat 06 Dec 2025 14:33:14 +0000 Manifest next update: Sat 13 Dec 2025 14:33:14 +0000 Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: ItVcZoIA3K7z/+LXrMDE1aCHV/Ylav9F63MXpL0V6sU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13543 (0x34e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Validity Not Before: Dec 6 14:33:14 2025 GMT Not After : Dec 13 14:33:14 2025 GMT Subject: CN=69343eaa-ab83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:af:2e:32:8f:6d:59:a8:6c:70:46:32:41: 1d:68:fc:22:90:48:32:30:c5:eb:88:39:68:a6:ee: e9:ca:c6:45:58:75:96:e7:a8:f2:e9:e1:fe:e0:77: c6:53:d0:e4:e8:67:c6:44:39:a5:6d:8a:ec:e2:fb: d1:a9:56:66:b6:26:ce:87:7b:6c:22:f6:fa:6a:f6: 24:21:bc:5c:67:a4:a6:30:73:5c:02:52:d5:60:cb: a1:9a:2a:d5:85:91:a3:ed:cc:33:0e:89:15:ac:ec: e7:91:18:2c:62:6e:01:45:e5:a9:bd:b8:3b:00:0d: 21:ab:2e:0a:d7:10:51:1e:2f:0e:27:cb:8a:69:eb: c3:36:c2:db:49:b4:0d:4b:9f:20:84:15:32:e2:63: a8:c6:2d:a5:83:0b:e3:3c:58:80:ce:85:8e:26:3a: 51:7f:ed:c0:4d:9a:0f:fd:21:7a:ac:61:bb:c1:64: 8e:08:2a:2f:ef:e0:32:6a:e3:54:94:c3:c6:80:ba: b7:f7:70:bf:3d:7e:02:75:79:69:c6:42:e4:73:fb: fd:9c:0b:79:fa:09:30:ef:a1:3b:da:d7:3e:2c:e8: 89:41:5f:c7:1e:ec:46:bc:64:3f:db:0e:a0:eb:a2: a1:3e:55:b6:25:e0:73:32:96:41:33:b1:d0:fa:b8: 81:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:15:33:E7:F2:1C:F2:2E:5A:ED:8A:B1:CB:6C:D0:B9:B8:51:B7:C3 X509v3 Authority Key Identifier: keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:39:50:2e:18:b3:5c:99:ed:19:5d:01:aa:5a:e9:ba:28:8c: 57:c8:cc:2f:03:54:8e:5f:23:e4:12:6f:84:c5:f3:9d:fc:06: 0d:bf:f8:24:11:2c:ba:f4:e9:2f:47:a6:dc:60:ed:21:e7:c1: a3:1a:02:71:a4:6f:de:d1:88:6a:39:7e:6e:bb:f5:da:b8:16: f5:5f:8f:2e:71:5f:a6:96:99:7d:57:6a:5d:5c:d3:e0:97:b6: 1d:a8:ae:81:83:77:16:41:8b:87:ff:8f:2a:52:9b:21:6a:0c: bf:05:e8:86:dc:d3:d8:56:27:95:69:8c:52:8d:b5:ad:1b:bb: 75:22:e9:d9:8a:c0:94:a8:09:33:8e:06:d4:f7:92:e8:41:b0: e5:8a:0f:14:50:3b:7f:d7:8b:78:cb:bb:9b:1b:91:42:e9:4e: 99:b7:57:35:b6:84:07:90:2e:91:55:48:55:af:55:e6:cd:d9: 94:82:cb:4c:62:9a:c2:63:17:73:fa:0f:a5:a2:5f:2a:1d:e9: 6b:1c:08:13:70:db:0b:4b:46:3d:9b:fb:fa:ad:55:bd:be:bf: e3:f7:6e:42:59:19:1c:c1:f5:8d:0e:9e:60:d1:6a:c1:37:e7: ef:3b:12:dd:7f:da:17:47:6d:ef:6b:35:8d:33:9c:c1:7c:90: 4d:a2:89:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDE2MjEwREM2NTJBMTYwREVFNEU0MDE1QkJDQjQwOUZB ODc3MjQ2NDAwHhcNMjUxMjA2MTQzMzE0WhcNMjUxMjEzMTQzMzE0WjAYMRYwFAYD VQQDEw02OTM0M2VhYS1hYjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUavLjKPbVmobHBGMkEdaPwikEgyMMXriDlopu7pysZFWHWW56jy6eH+4HfG U9Dk6GfGRDmlbYrs4vvRqVZmtibOh3tsIvb6avYkIbxcZ6SmMHNcAlLVYMuhmirV hZGj7cwzDokVrOznkRgsYm4BReWpvbg7AA0hqy4K1xBRHi8OJ8uKaevDNsLbSbQN S58ghBUy4mOoxi2lgwvjPFiAzoWOJjpRf+3ATZoP/SF6rGG7wWSOCCov7+AyauNU lMPGgLq393C/PX4CdXlpxkLkc/v9nAt5+gkw76E72tc+LOiJQV/HHuxGvGQ/2w6g 66KhPlW2JeBzMpZBM7HQ+riBcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8VM+fy HPIuWu2Kscts0Lm4UbfDMB8GA1UdIwQYMBaAFBYhDcZSoWDe5OQBW7y0CfqHckZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlON2s1QUZidkxRSi1vZHlS a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZpRU54bEtoWU43azVBRmJ2TFFKLW9keVJrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlO N2s1QUZidkxRSi1vZHlSa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMOVAuGLNcme0ZXQGqWum6KIxXyMwvA1SOXyPkEm+ExfOd/AYNv/gk ESy69OkvR6bcYO0h58GjGgJxpG/e0YhqOX5uu/XauBb1X48ucV+mlpl9V2pdXNPg l7YdqK6Bg3cWQYuH/48qUpshagy/BeiG3NPYVieVaYxSjbWtG7t1IunZisCUqAkz jgbU95LoQbDlig8UUDt/14t4y7ubG5FC6U6Zt1c1toQHkC6RVUhVr1XmzdmUgstM YprCYxdz+g+lol8qHelrHAgTcNsLS0Y9m/v6rVW9vr/j925CWRkcwfWNDp5g0WrB N+fvOxLdf9oXR23vazWNM5zBfJBNoom5 -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:32 2025 by rpki-client