This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft File: FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft (raw, json) Hash identifier: mrjBiTStNco+ttcLZrdQBt0qKI6vfz8nLPaYFfoTFNg= Subject key identifier: 69:F0:4A:59:A4:B5:CA:1A:3F:E5:68:8B:09:19:C1:39:D9:3B:45:D3 Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 Certificate issuer: /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft Manifest number: 0115 Signing time: Sun 07 Dec 2025 03:09:07 +0000 Manifest this update: Sun 07 Dec 2025 03:09:07 +0000 Manifest next update: Sun 14 Dec 2025 03:09:07 +0000 Files and hashes: 1: FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl (hash: RoRWGAOcpUQFgzmBQeT/XqwG0jwtH1T6TinPK0xUHaI=) 2: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (hash: cjQ8z/DvzlqVIyc0XMrCXb6k6xXs+7KEwBIQYpqVtTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 03:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5EBA, serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Validity Not Before: Dec 7 03:09:07 2025 GMT Not After : Dec 14 03:09:07 2025 GMT Subject: CN=6934efd3-8838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:5c:7c:5e:38:e1:a2:8f:17:de:b9:23:dc: d8:3f:51:a1:0e:a1:a7:e8:e9:6b:7b:0e:e0:8a:73: 9b:e2:f7:05:05:48:f4:09:40:53:2f:3c:a3:d8:14: 90:0a:a4:c5:0c:8e:e4:9c:eb:25:db:db:f9:75:1d: 86:9c:2f:26:7e:dd:86:a4:c8:18:52:50:83:27:06: 84:0c:05:62:99:68:00:88:7b:b4:8a:09:ee:fc:3f: 98:c4:f6:b2:29:f2:1f:45:b3:42:ac:14:29:f6:19: cd:57:cb:d1:2f:dd:a0:f3:02:d9:ef:aa:1b:4d:90: b1:81:1b:b4:bd:b7:ad:ea:c8:88:99:f9:ca:ef:49: db:c7:98:1f:4b:c3:9e:70:a1:18:29:d2:0d:86:b9: b4:fc:49:82:42:6d:9e:b7:78:69:76:e2:c6:4d:de: 73:80:83:b9:ee:c2:61:91:1b:51:c0:63:a6:49:40: bd:c5:09:f0:9c:57:84:ca:a6:87:8d:fb:a4:d2:82: 5a:b7:b4:2d:9a:34:f1:5f:99:da:a2:40:74:e5:a2: d8:69:0f:91:b2:1f:e7:dc:98:bc:14:82:30:72:73: d2:22:2d:2f:05:23:b2:f7:33:cd:e0:60:e8:c3:7e: ca:f1:a0:1f:38:6e:e9:34:ee:50:1d:90:d7:81:d6: 87:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F0:4A:59:A4:B5:CA:1A:3F:E5:68:8B:09:19:C1:39:D9:3B:45:D3 X509v3 Authority Key Identifier: keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b7:a4:2b:90:c5:f2:43:73:d3:04:97:05:85:08:ee:63:43: 84:66:fb:a4:17:b9:51:26:62:15:be:b1:7c:01:b3:28:8f:bd: af:2a:c1:0e:9e:cd:1c:70:2e:3d:73:b5:88:0d:42:8f:f7:e9: 38:9a:79:ed:7d:31:f8:b4:2a:dc:4c:c1:45:e6:9b:4b:9c:b4: d6:cb:e0:02:30:ba:f4:2e:9c:dd:28:17:8c:4b:d8:f0:d7:35: af:9b:d1:22:f9:98:e9:7e:07:b5:8e:e4:d5:9d:b0:68:2e:2f: d7:21:38:0c:f5:f7:46:49:a8:16:ef:20:92:e7:b4:28:08:7f: 09:49:d6:48:61:86:d3:a7:05:01:37:73:40:ff:7b:b6:60:f7: 53:29:f7:91:a7:fb:1f:8e:da:ab:aa:04:98:c4:33:ca:a6:6e: 1b:e0:6a:89:2a:7d:b1:01:16:08:74:80:b3:32:5b:d2:6e:df: 3f:35:de:00:41:12:58:8f:ab:b4:63:ad:83:af:0d:83:fd:d8: f4:43:18:a9:8a:f6:a2:2c:83:e5:bd:70:cd:b2:46:ca:9c:a0: f8:d5:b3:23:db:9d:a1:65:99:63:dd:25:e2:d1:4c:9f:ef:a6: ef:00:f1:cc:52:38:7c:28:e8:89:ce:ae:3c:59:1e:c3:2d:90: 23:52:84:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFQkExMTAvBgNVBAUTKDE1NkQ0QTlDNkYxNUVCMkI0QjNGMzY3RDY5RkFBMjUx MDEyODA3ODgwHhcNMjUxMjA3MDMwOTA3WhcNMjUxMjE0MDMwOTA3WjAYMRYwFAYD VQQDEw02OTM0ZWZkMy04ODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArv9cfF444aKPF965I9zYP1GhDqGn6Olrew7ginOb4vcFBUj0CUBTLzyj2BSQ CqTFDI7knOsl29v5dR2GnC8mft2GpMgYUlCDJwaEDAVimWgAiHu0ignu/D+YxPay KfIfRbNCrBQp9hnNV8vRL92g8wLZ76obTZCxgRu0vbet6siImfnK70nbx5gfS8Oe cKEYKdINhrm0/EmCQm2et3hpduLGTd5zgIO57sJhkRtRwGOmSUC9xQnwnFeEyqaH jfuk0oJat7QtmjTxX5naokB05aLYaQ+Rsh/n3Ji8FIIwcnPSIi0vBSOy9zPN4GDo w37K8aAfOG7pNO5QHZDXgdaHfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnwSlmk tcoaP+VoiwkZwTnZO0XTMB8GA1UdIwQYMBaAFBVtSpxvFesrSz82fWn6olEBKAeI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVCQS83MkU1NENGRTJD NTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5dExQelo5YWZxaVVRRW9C NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXMUtuRzhWNnl0TFB6WjlhZnFpVVFFb0I0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUVCQS83MkU1NENGRTJDNTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5 dExQelo5YWZxaVVRRW9CNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYt6QrkMXyQ3PTBJcFhQjuY0OEZvukF7lRJmIVvrF8AbMoj72vKsEO ns0ccC49c7WIDUKP9+k4mnntfTH4tCrcTMFF5ptLnLTWy+ACMLr0LpzdKBeMS9jw 1zWvm9Ei+Zjpfge1juTVnbBoLi/XITgM9fdGSagW7yCS57QoCH8JSdZIYYbTpwUB N3NA/3u2YPdTKfeRp/sfjtqrqgSYxDPKpm4b4GqJKn2xARYIdICzMlvSbt8/Nd4A QRJYj6u0Y62Drw2D/dj0QxipivaiLIPlvXDNskbKnKD41bMj252hZZlj3SXi0Uyf 76bvAPHMUjh8KOiJzq48WR7DLZAjUoTD -----END CERTIFICATE-----Generated at Sun Dec 7 08:13:49 2025 by rpki-client