This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft File: Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json) Hash identifier: Tzy9VrcEoRJ77ILjPmljLSqLa8tM9a15t8nNZrs0wo4= Subject key identifier: BF:4A:A9:76:B0:4C:0C:59:26:E2:31:7B:79:F6:52:2D:29:C4:7D:DC Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Certificate serial: 0C36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft Manifest number: 0C28 Signing time: Sat 06 Dec 2025 18:03:05 +0000 Manifest this update: Sat 06 Dec 2025 18:03:05 +0000 Manifest next update: Sat 13 Dec 2025 18:03:05 +0000 Files and hashes: 1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: D+YkM0Kxj42TNxuon6skNPSjNJK7u5OO4xZqf69z4Ug=) 2: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: ufbhLIgMA/VLskicM2b7dedBW1kGeaUN1gsoMiATTdU=) 3: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: P1+1DUz+vfXoEUhgbF6Z4GWZWQs4iS84lJdf+sr/ADs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3126 (0xc36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Validity Not Before: Dec 6 18:03:05 2025 GMT Not After : Dec 13 18:03:05 2025 GMT Subject: CN=69346fd9-bc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:58:45:45:26:26:52:8f:ae:0b:bf:2a:49:57: d0:66:55:6a:de:fe:ee:18:f7:b5:14:b2:b8:1b:9f: 9d:45:c8:9c:bd:4c:f8:29:73:ba:56:dc:f7:c7:12: 79:90:d8:64:97:27:04:2e:7e:b0:37:f7:2a:3d:4c: 83:ea:f5:23:c9:ac:b0:8d:41:38:02:58:18:19:18: a3:0e:85:8b:1e:b1:9c:7d:20:b7:f2:af:f0:91:1b: 76:9d:2b:00:15:a4:f4:6f:3a:fa:7d:35:ef:16:22: f8:86:44:ff:16:69:19:60:14:6d:14:9e:d4:c8:c0: e7:d6:df:90:83:83:80:73:07:ec:c0:ea:7a:f8:02: 4b:47:3d:9a:8e:3e:82:1f:1e:25:b0:78:dc:dc:e9: 63:34:36:62:cf:31:ad:56:52:c5:d5:0b:24:78:64: 3c:c2:e4:fc:49:a8:1f:04:a2:f1:93:0c:de:01:c2: b2:75:61:01:8a:6c:36:d9:51:cc:ff:83:d9:35:7c: c4:0b:59:d3:c3:47:eb:ea:80:16:0a:a9:25:e7:78: 56:04:71:58:11:d5:17:3e:f3:ec:82:08:e1:11:35: cc:11:e5:80:34:49:f0:46:be:3a:cb:a5:4a:e3:26: 7f:38:0b:0a:61:cf:b0:f2:e1:43:d6:c0:5d:e8:ca: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4A:A9:76:B0:4C:0C:59:26:E2:31:7B:79:F6:52:2D:29:C4:7D:DC X509v3 Authority Key Identifier: keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:90:f0:47:45:50:ee:5d:81:7d:91:4c:dc:48:a3:c3:c5:fe: 92:ca:4d:69:ea:6e:f4:13:55:df:f7:54:96:8f:53:ad:b8:b3: 7d:00:ba:74:2b:74:8d:b5:b0:ca:e6:5b:b9:12:48:e0:27:43: ab:b4:90:1f:82:3b:39:71:49:16:54:35:e9:02:41:d6:69:00: 96:69:54:63:8e:a6:3c:00:df:a0:26:dd:b8:5a:07:f1:1c:74: 6d:4c:ae:1f:b5:a5:a9:a6:4b:6b:1b:95:e5:f0:0b:fe:a1:89: c0:1a:39:5d:83:3a:20:7f:5f:49:b6:4d:22:88:0e:1d:e9:7d: 9a:77:d2:be:cd:c9:b8:54:89:42:1b:56:be:8f:bf:c3:aa:f2: 78:b1:c8:7b:f3:9d:fe:0b:60:83:96:67:06:65:67:15:56:82: e4:95:94:54:d5:c3:6b:5a:a9:1d:bd:bb:82:6a:32:41:7c:18: 26:3b:f3:58:8c:d3:b2:45:a8:3b:ff:e6:51:f7:63:f6:e2:b3: b6:5f:ba:ed:35:f0:05:14:06:33:46:2c:9d:42:10:d1:f3:12: 56:87:cf:99:9a:99:fb:59:5e:2e:5f:a6:ef:1f:9a:3c:16:2a: 74:bf:e9:00:e5:40:9c:63:44:db:47:1c:c5:16:97:a3:50:86: 57:1b:2f:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NUYxMTAvBgNVBAUTKDE2MUUwMjJBRTg5NzUxMTJFRTc1ODlENDlCMzE2NjBD QTkwQTA0MTAwHhcNMjUxMjA2MTgwMzA1WhcNMjUxMjEzMTgwMzA1WjAYMRYwFAYD VQQDEw02OTM0NmZkOS1iYzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+FhFRSYmUo+uC78qSVfQZlVq3v7uGPe1FLK4G5+dRcicvUz4KXO6Vtz3xxJ5 kNhklycELn6wN/cqPUyD6vUjyaywjUE4AlgYGRijDoWLHrGcfSC38q/wkRt2nSsA FaT0bzr6fTXvFiL4hkT/FmkZYBRtFJ7UyMDn1t+Qg4OAcwfswOp6+AJLRz2ajj6C Hx4lsHjc3OljNDZizzGtVlLF1QskeGQ8wuT8SagfBKLxkwzeAcKydWEBimw22VHM /4PZNXzEC1nTw0fr6oAWCqkl53hWBHFYEdUXPvPsggjhETXMEeWANEnwRr46y6VK 4yZ/OAsKYc+w8uFD1sBd6Mq0RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9KqXaw TAxZJuIxe3n2Ui0pxH3cMB8GA1UdIwQYMBaAFBYeAirol1ES7nWJ1JsxZgypCgQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY1Ri9CRjk2NkU0QTFD ODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVSTHVkWW5VbXpGbURLa0tC QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoNENLdWlYVVJMdWRZblVtekZtREtrS0JCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODY1Ri9CRjk2NkU0QTFDODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVS THVkWW5VbXpGbURLa0tCQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCkPBHRVDuXYF9kUzcSKPDxf6Syk1p6m70E1Xf91SWj1OtuLN9ALp0 K3SNtbDK5lu5EkjgJ0OrtJAfgjs5cUkWVDXpAkHWaQCWaVRjjqY8AN+gJt24Wgfx HHRtTK4ftaWppktrG5Xl8Av+oYnAGjldgzogf19Jtk0iiA4d6X2ad9K+zcm4VIlC G1a+j7/DqvJ4sch7853+C2CDlmcGZWcVVoLklZRU1cNrWqkdvbuCajJBfBgmO/NY jNOyRag7/+ZR92P24rO2X7rtNfAFFAYzRiydQhDR8xJWh8+Zmpn7WV4uX6bvH5o8 Fip0v+kA5UCcY0TbRxzFFpejUIZXGy/1 -----END CERTIFICATE-----Generated at Sun Dec 7 07:10:36 2025 by rpki-client