This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json) Hash identifier: 7X2yuVNsZe5L7RvwcdlS90S4Wk4mBvI2gGPTEzJLTKU= Subject key identifier: 60:BA:05:AD:1E:65:CA:92:28:3F:3A:11:70:F3:84:79:F1:30:BD:BC Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft Manifest number: 0146 Signing time: Fri 05 Dec 2025 02:26:16 +0000 Manifest this update: Fri 05 Dec 2025 02:26:15 +0000 Manifest next update: Fri 12 Dec 2025 02:26:15 +0000 Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: BwuMtdAPoyVO+wzzoxdOn4X3Dz4ysWA5RHYY5ToHhRw=) 2: C1F74E665C1611F0B0B40A35C4F9AE02.roa (hash: cyzmbSkuoaF4EDWEAACeoUMvRNItS2PdfJUezyi8Vms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Validity Not Before: Dec 5 02:26:15 2025 GMT Not After : Dec 12 02:26:15 2025 GMT Subject: CN=693242c7-0ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ff:fc:2b:2a:3e:28:52:2d:0d:ad:6c:ee:72: a3:e8:c3:c0:69:6d:3b:1b:a4:d8:d2:48:3b:8e:d2: fb:ed:4b:24:fd:00:e2:be:a0:fa:34:65:d1:e1:da: 43:cb:1c:e7:d7:09:ee:89:08:94:e4:3a:f6:e0:94: 4d:0b:c6:75:c0:c9:d1:a6:c6:2e:c2:09:cf:50:12: 16:06:0a:69:25:78:de:8a:94:d1:67:69:0d:72:2b: cd:54:e7:82:89:05:de:c4:9d:05:0f:52:f4:9f:26: 41:ee:77:5d:bb:6c:41:33:5f:b2:3c:c2:5e:72:13: 13:13:8f:27:39:1f:de:55:15:05:33:4e:fb:4b:5d: 36:09:e8:38:13:57:b0:a7:2e:64:c2:ee:22:d9:8b: 63:ed:96:17:3d:8f:c9:57:82:56:6f:11:a9:76:08: d8:4e:ff:9d:63:bf:a3:0a:3e:35:e2:0c:79:4e:66: d6:2d:f9:5e:f9:40:9f:a9:d3:1d:1e:93:88:76:b3: 42:bd:7b:93:d7:3c:b8:b3:47:c0:d8:2a:e2:b2:61: 24:f7:44:0b:5b:ea:69:45:45:27:60:f6:86:49:b1: 25:92:27:05:3f:25:2a:16:71:f9:10:4b:56:68:ea: e5:c0:15:a5:f8:9c:d0:1a:85:14:75:c7:c9:21:ac: 90:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BA:05:AD:1E:65:CA:92:28:3F:3A:11:70:F3:84:79:F1:30:BD:BC X509v3 Authority Key Identifier: keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:b7:0e:5f:50:50:f0:f3:2f:95:dc:30:8d:8b:59:7b:dc:7c: 74:53:1f:db:46:13:c7:f6:5b:55:db:fd:b5:14:90:28:9a:da: a5:da:b0:c5:1b:65:5c:10:4d:4c:4c:64:90:6f:e9:13:e0:8e: cd:05:ce:ca:d1:3d:c5:07:f9:a9:03:d0:0b:7a:2c:5a:04:50: 85:7f:be:03:ad:97:57:22:4b:37:63:81:88:29:1a:5d:82:aa: a9:ab:90:df:50:7b:3a:41:eb:b0:06:d4:7f:34:8a:ae:ef:e7: 8c:7f:e0:34:ed:69:09:0f:51:2e:8a:92:90:4e:ee:78:f1:35: 7a:23:bf:27:4f:b7:af:cc:f9:55:80:ff:a4:98:10:5d:c0:d0: 66:98:5c:86:5b:a8:af:f2:b5:1b:09:05:7a:df:44:af:da:3b: 48:77:1d:98:23:4b:78:4f:02:a7:ee:44:d2:ab:ff:3a:6f:b3: f8:bf:d1:9a:08:86:a5:37:cc:bc:79:f0:f5:8a:dd:55:bd:4d: 2b:f2:a3:f3:79:4c:0a:9f:57:7d:30:85:e4:a1:f0:30:92:c8: 21:b8:fc:6c:58:f5:b3:16:51:02:20:9a:1d:0b:8a:e6:fb:15: f9:fe:78:97:cc:6e:ae:0e:ad:ee:d2:56:61:3d:25:60:82:ef: fc:98:09:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5REExMTAvBgNVBAUTKDE2RDE0QUE1MTM0RDQxMTI0NjRENzk5MkRCRjFDNDUy RjdGQTI5QTAwHhcNMjUxMjA1MDIyNjE1WhcNMjUxMjEyMDIyNjE1WjAYMRYwFAYD VQQDEw02OTMyNDJjNy0wZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyf/8Kyo+KFItDa1s7nKj6MPAaW07G6TY0kg7jtL77Usk/QDivqD6NGXR4dpD yxzn1wnuiQiU5Dr24JRNC8Z1wMnRpsYuwgnPUBIWBgppJXjeipTRZ2kNcivNVOeC iQXexJ0FD1L0nyZB7nddu2xBM1+yPMJechMTE48nOR/eVRUFM077S102Ceg4E1ew py5kwu4i2Ytj7ZYXPY/JV4JWbxGpdgjYTv+dY7+jCj414gx5TmbWLfle+UCfqdMd HpOIdrNCvXuT1zy4s0fA2CrismEk90QLW+ppRUUnYPaGSbElkicFPyUqFnH5EEtW aOrlwBWl+JzQGoUUdcfJIayQJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGC6Ba0e ZcqSKD86EXDzhHnxML28MB8GA1UdIwQYMBaAFBbRSqUTTUESRk15ktvxxFL3+img MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zRTYyNEJBRURB NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFSSkdUWG1TMl9IRVV2ZjZL YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z0RktwUk5OUVJKR1RYbVMyX0hFVXZmNkthQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zRTYyNEJBRURBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFS SkdUWG1TMl9IRVV2ZjZLYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1tw5fUFDw8y+V3DCNi1l73Hx0Ux/bRhPH9ltV2/21FJAomtql2rDF G2VcEE1MTGSQb+kT4I7NBc7K0T3FB/mpA9ALeixaBFCFf74DrZdXIks3Y4GIKRpd gqqpq5DfUHs6QeuwBtR/NIqu7+eMf+A07WkJD1EuipKQTu548TV6I78nT7evzPlV gP+kmBBdwNBmmFyGW6iv8rUbCQV630Sv2jtIdx2YI0t4TwKn7kTSq/86b7P4v9Ga CIalN8y8efD1it1VvU0r8qPzeUwKn1d9MIXkofAwksghuPxsWPWzFlECIJodC4rm +xX5/niXzG6uDq3u0lZhPSVggu/8mAmN -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:04 2025 by rpki-client