This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json) Hash identifier: CbasRZdHxKg1GgAYBbmjqQBLlIs2VfFyXPWjhXzJfKY= Subject key identifier: 8D:5A:A4:DC:C9:C0:8E:81:D4:5B:DF:D9:69:F0:74:01:21:46:D5:E7 Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft Manifest number: 021D Signing time: Fri 05 Dec 2025 00:28:57 +0000 Manifest this update: Fri 05 Dec 2025 00:28:57 +0000 Manifest next update: Fri 12 Dec 2025 00:28:57 +0000 Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: 7vmg7zCzxuvTeBGRZVTY7aO5hPaVjisCeM6MEHgs8JM=) 2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 5eORjOKdJA5R5JqKv9kUobgVioj38QF3cQAhkx2yC1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Validity Not Before: Dec 5 00:28:57 2025 GMT Not After : Dec 12 00:28:57 2025 GMT Subject: CN=69322749-43d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:67:87:fa:e2:89:43:19:ba:94:5c:d6:1b: f9:fe:b2:b3:69:23:96:9e:56:14:52:f9:07:e9:08: 8d:25:18:e5:22:53:4c:f3:66:ac:8d:99:5f:a5:2a: 92:de:0a:e3:42:31:bc:34:80:9f:1a:18:c6:21:fc: 32:d9:4c:64:fd:cd:f8:6f:03:dc:77:5a:09:87:c4: 30:c1:7f:d0:d6:c5:ea:e2:d2:1e:b2:54:fe:a2:85: 3c:e6:3a:17:c4:fe:42:09:dc:35:34:32:ae:31:98: a3:5b:af:68:31:b4:9d:e5:6c:16:d8:62:14:92:ce: e7:dc:22:03:ac:b2:ee:7f:b1:10:ca:06:74:f6:3d: 8a:f2:19:09:c3:49:4e:c3:48:ca:fd:22:35:9e:1b: 76:c9:9e:6c:33:17:c4:2c:44:a8:2d:ee:20:9d:9c: 2f:04:ff:a8:d7:4b:3a:32:ec:5b:35:f7:fb:e7:bf: f0:47:3a:e1:db:c3:0f:f0:32:0d:13:5d:df:a4:0a: 45:f2:41:13:31:6e:94:f1:8e:a5:0e:52:61:af:f9: 5a:97:79:50:2d:32:bb:09:f0:80:36:29:d3:bc:e4: 72:ee:34:14:7f:5c:ab:e6:18:3c:f1:dd:bd:df:6d: 2b:33:11:1b:6c:7c:a6:f7:15:ee:ad:30:ed:84:32: a4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5A:A4:DC:C9:C0:8E:81:D4:5B:DF:D9:69:F0:74:01:21:46:D5:E7 X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:78:8c:44:91:a3:a3:9d:6c:5c:dc:da:84:ab:85:e2:80:fc: 8f:d2:db:7d:f1:e1:11:42:ea:e2:f9:8d:37:e4:2b:cd:30:f9: 55:37:c2:41:3c:82:b1:17:fe:bd:73:54:9f:33:ea:00:0f:6a: 96:81:c6:51:aa:98:cf:0c:14:ef:3f:bb:7f:17:30:71:2c:72: 52:f4:9d:3c:17:9e:17:b1:00:05:ae:ea:72:d8:99:65:03:22: 66:15:15:ee:92:d2:4b:74:a6:6b:65:ad:d2:9d:3d:07:d7:81: 86:01:7a:e5:80:1c:db:4a:be:06:9a:6d:f3:75:69:6a:1a:5b: da:7d:b2:34:3b:4e:c7:ea:8f:2e:b2:cf:de:a5:07:08:aa:26: 7a:da:88:92:87:56:01:b3:76:fb:a9:32:44:7b:76:f5:b2:dc: 21:f5:49:82:06:c2:0c:55:0c:ee:4c:dc:ec:b0:85:73:be:75: fa:31:3b:36:d6:ed:61:95:83:ec:b9:cd:e1:71:ae:b3:f0:65: 44:df:83:c8:eb:4f:10:50:55:02:87:79:e0:03:f2:71:80:74: eb:47:be:40:d5:24:89:00:4f:5d:62:d5:e2:ab:b0:5a:3c:ba: d6:24:7d:50:fb:7f:ed:c8:15:96:96:42:12:c0:4d:79:6c:94: 45:d5:0a:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjUxMjA1MDAyODU3WhcNMjUxMjEyMDAyODU3WjAYMRYwFAYD VQQDEw02OTMyMjc0OS00M2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXlnh/riiUMZupRc1hv5/rKzaSOWnlYUUvkH6QiNJRjlIlNM82asjZlfpSqS 3grjQjG8NICfGhjGIfwy2Uxk/c34bwPcd1oJh8QwwX/Q1sXq4tIeslT+ooU85joX xP5CCdw1NDKuMZijW69oMbSd5WwW2GIUks7n3CIDrLLuf7EQygZ09j2K8hkJw0lO w0jK/SI1nht2yZ5sMxfELESoLe4gnZwvBP+o10s6MuxbNff757/wRzrh28MP8DIN E13fpApF8kETMW6U8Y6lDlJhr/lal3lQLTK7CfCANinTvORy7jQUf1yr5hg88d29 320rMxEbbHym9xXurTDthDKkCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1apNzJ wI6B1Fvf2WnwdAEhRtXnMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0 cGpRdndQUkdrWWRlb19rb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBeIxEkaOjnWxc3NqEq4XigPyP0tt98eERQuri+Y035CvNMPlVN8JB PIKxF/69c1SfM+oAD2qWgcZRqpjPDBTvP7t/FzBxLHJS9J08F54XsQAFrupy2Jll AyJmFRXuktJLdKZrZa3SnT0H14GGAXrlgBzbSr4Gmm3zdWlqGlvafbI0O07H6o8u ss/epQcIqiZ62oiSh1YBs3b7qTJEe3b1stwh9UmCBsIMVQzuTNzssIVzvnX6MTs2 1u1hlYPsuc3hca6z8GVE34PI608QUFUCh3ngA/JxgHTrR75A1SSJAE9dYtXiq7Ba PLrWJH1Q+3/tyBWWlkISwE15bJRF1QrO -----END CERTIFICATE-----Generated at Sat Dec 6 15:26:48 2025 by rpki-client