This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: OKOYayxlaPEfkMJPTnzPPxUvaJGww5o2WIVThv3Umgg= Subject key identifier: D0:35:59:6B:E7:71:47:E8:2A:F6:81:65:17:42:70:D8:9E:CE:AF:10 Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0C9A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0C8A Signing time: Sat 06 Dec 2025 17:00:17 +0000 Manifest this update: Sat 06 Dec 2025 17:00:16 +0000 Manifest next update: Sat 13 Dec 2025 17:00:16 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: wUeDMfwwzOybZvc8wzDEPoNrRp/uXFwSm4DE6q5pTnw=) 2: DD004670C39711F0A241F86DC4F9AE02.roa (hash: I1SBr9macQO5KX8j2VSd052BaAoC6H36TX7tUwfX6hM=) 3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: 8wjeVWlfo9cZAtiKpo1BdMOi+myZ3L7JFzRUdzBXzoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3226 (0xc9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Dec 6 17:00:16 2025 GMT Not After : Dec 13 17:00:16 2025 GMT Subject: CN=69346121-e744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:ef:0a:9b:c7:70:15:e6:01:b6:8d:73:aa: 63:d9:6c:7c:25:3b:a7:e4:d7:6c:36:3f:8d:de:e2: 0a:a5:da:42:73:b6:fe:32:5c:b6:fc:92:39:00:a8: 33:99:2b:0e:e3:17:51:d2:35:b4:16:81:14:74:4e: b6:81:21:8b:f4:91:94:68:c0:af:0c:20:7d:5f:7e: 61:f4:6b:55:fa:03:0b:93:a8:fc:8b:3a:64:fc:ce: e8:53:77:2b:24:fb:4a:35:ab:1e:09:58:fd:60:b7: 69:bc:f0:e2:0b:31:69:c0:d8:e0:47:d8:f7:85:fa: 41:60:d3:52:7d:b8:c2:61:d7:a7:16:cd:af:03:d5: e0:cd:dc:b3:7f:ed:fe:e2:17:3a:de:49:15:bd:c9: 3f:f0:1e:d6:8e:28:11:51:c9:40:d5:aa:10:b6:64: fe:bf:e7:58:e9:e8:50:8d:6a:ad:5d:7e:aa:e4:d0: d0:86:2f:69:6a:25:21:fb:de:b7:50:14:4d:32:ca: 11:b1:cd:ff:0d:81:e5:75:20:10:a2:b2:c4:71:98: 82:61:1d:9d:39:2a:06:2c:58:0f:f8:6f:a9:c9:3f: 6b:a5:82:df:fa:00:42:9a:5e:40:a8:28:5a:b1:60: cc:43:fd:67:4f:9e:46:85:bc:70:f8:33:88:d0:57: 18:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:35:59:6B:E7:71:47:E8:2A:F6:81:65:17:42:70:D8:9E:CE:AF:10 X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:85:52:b9:cb:ef:d8:7e:29:f1:b2:fb:22:19:34:63:b5:e0: 42:cf:35:8b:fd:e3:af:c7:ca:f9:c5:52:e0:a2:9d:00:05:90: e2:eb:9c:eb:1a:b3:bd:f3:58:3c:df:24:f3:cf:c8:4e:1c:49: 0e:8a:f9:f1:a9:91:de:53:b3:cb:da:e3:79:64:97:55:14:45: 84:9c:a6:7a:1e:23:2c:7b:35:6e:eb:24:f8:7e:4a:7f:d4:c1: 41:ca:79:d9:96:81:27:5b:a8:49:ef:82:22:fc:92:9b:8f:d9: 9c:8d:8b:1e:0e:f9:cc:4a:7d:a5:89:91:8f:9d:2e:9a:3a:e5: 52:d2:69:e2:b6:3a:f2:80:87:1d:c7:42:48:c0:9e:db:7d:e9: 06:5c:62:e9:4b:ef:a5:44:86:47:9b:33:ce:2c:db:c7:97:10: 8d:20:e9:14:1a:01:f3:d9:cf:69:58:54:24:8c:42:bc:17:d1: 0c:be:ca:a8:63:e3:f0:de:aa:c8:03:87:be:20:ee:9e:6f:0d: c0:16:b0:cf:3f:e8:95:68:c7:ee:97:fb:c4:8e:4d:d6:df:08: 23:1c:ea:53:40:83:23:0e:3d:30:1d:3f:7b:44:fd:89:9a:1a: 2b:73:9b:cf:2a:6c:af:b0:20:21:c8:88:eb:ff:48:c7:4b:85: 50:f2:fe:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjUxMjA2MTcwMDE2WhcNMjUxMjEzMTcwMDE2WjAYMRYwFAYD VQQDEw02OTM0NjEyMS1lNzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYTvCpvHcBXmAbaNc6pj2Wx8JTun5NdsNj+N3uIKpdpCc7b+Mly2/JI5AKgz mSsO4xdR0jW0FoEUdE62gSGL9JGUaMCvDCB9X35h9GtV+gMLk6j8izpk/M7oU3cr JPtKNaseCVj9YLdpvPDiCzFpwNjgR9j3hfpBYNNSfbjCYdenFs2vA9Xgzdyzf+3+ 4hc63kkVvck/8B7WjigRUclA1aoQtmT+v+dY6ehQjWqtXX6q5NDQhi9paiUh+963 UBRNMsoRsc3/DYHldSAQorLEcZiCYR2dOSoGLFgP+G+pyT9rpYLf+gBCml5AqCha sWDMQ/1nT55Ghbxw+DOI0FcYvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNA1WWvn cUfoKvaBZRdCcNiezq8QMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGhVK5y+/YfinxsvsiGTRjteBCzzWL/eOvx8r5xVLgop0ABZDi65zr GrO981g83yTzz8hOHEkOivnxqZHeU7PL2uN5ZJdVFEWEnKZ6HiMsezVu6yT4fkp/ 1MFBynnZloEnW6hJ74Ii/JKbj9mcjYseDvnMSn2liZGPnS6aOuVS0mnitjrygIcd x0JIwJ7bfekGXGLpS++lRIZHmzPOLNvHlxCNIOkUGgHz2c9pWFQkjEK8F9EMvsqo Y+Pw3qrIA4e+IO6ebw3AFrDPP+iVaMful/vEjk3W3wgjHOpTQIMjDj0wHT97RP2J mhorc5vPKmyvsCAhyIjr/0jHS4VQ8v7g -----END CERTIFICATE-----Generated at Sat Dec 6 22:05:43 2025 by rpki-client