This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json) Hash identifier: vImnicGTcSGzwEAS/6jsDxsxgmGb7pfEhEgtAb8VkGY= Subject key identifier: 7D:19:F6:99:90:DF:7C:DA:5A:38:47:8B:65:3F:35:76:B5:FC:88:02 Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft Manifest number: 0237 Signing time: Sun 25 Jan 2026 01:14:53 +0000 Manifest this update: Sun 25 Jan 2026 01:14:52 +0000 Manifest next update: Sun 01 Feb 2026 01:14:52 +0000 Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: QKlhAao5N/glELBIoykBu3wL7fXVCQ5MU7tZWGsd/ws=) 2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 5eORjOKdJA5R5JqKv9kUobgVioj38QF3cQAhkx2yC1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Validity Not Before: Jan 25 01:14:52 2026 GMT Not After : Feb 1 01:14:52 2026 GMT Subject: CN=69756e8d-64ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5b:a1:76:3c:99:78:43:76:a9:76:ee:2c:96: 8c:7e:c1:47:14:ce:7a:11:09:49:ac:5e:9b:66:c3: 68:e0:6c:64:51:a8:d8:8d:98:11:1c:06:fc:e7:1d: 3b:a5:15:d9:f5:d1:5d:c9:9f:44:dc:78:cd:a6:14: 84:35:74:40:35:88:48:1f:4b:93:7c:35:00:8f:9b: 3e:af:ca:11:76:72:af:60:66:a5:d8:bf:8e:c3:3d: d2:14:1f:f8:d3:bb:92:f7:6c:10:90:7f:d3:ad:1f: e7:06:83:a5:45:11:9b:9c:39:43:3a:89:8b:37:33: 17:67:77:89:fd:8a:18:77:88:af:e6:47:6c:bf:fa: bc:29:ea:be:02:4e:1d:0c:93:e0:bb:87:23:d0:c5: 4e:b3:cb:5b:ac:0c:b4:73:4f:fd:2f:60:3c:ad:ed: e5:75:a7:e6:26:55:25:4f:08:9b:b9:be:05:62:ac: 26:64:b7:89:94:82:8e:05:68:aa:0d:8a:32:90:5d: ff:68:f6:1c:5e:1a:23:00:54:1b:d3:c9:65:33:f8: 94:71:f3:50:63:33:28:b2:33:9f:0f:f5:4a:0b:7d: 18:ad:9e:68:98:9d:e6:fb:ce:ae:53:ba:15:4a:f9: 22:87:3d:19:6c:3b:a5:99:73:87:a1:94:45:9d:69: fb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:19:F6:99:90:DF:7C:DA:5A:38:47:8B:65:3F:35:76:B5:FC:88:02 X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:57:1f:f3:ca:f4:63:08:73:44:ea:12:6f:2d:68:85:34:b6: cc:57:75:69:da:18:d3:d4:9c:ce:9d:08:cb:09:5a:6d:4c:77: bb:4a:f5:27:e4:3e:f3:5c:db:12:24:50:e5:2b:db:ef:55:fb: 50:a4:c8:34:0e:11:82:4e:af:a9:3c:1f:0d:f6:15:47:01:ef: c5:fe:44:76:ca:0d:46:f9:1f:8c:3c:2f:59:d4:3e:7b:74:0a: 31:ba:e7:53:4d:1f:c9:9a:30:4c:f6:63:06:55:d0:3d:a1:fb: 43:94:b9:9d:7d:15:84:f3:aa:35:c9:d6:3f:4e:8c:b8:6c:3f: 6e:4f:e7:cc:8b:77:ee:b8:53:11:62:70:c0:b6:e7:31:00:bf: b8:5d:42:a2:5c:fb:61:75:87:74:83:00:bd:84:01:ba:e5:78: 95:c5:10:de:6c:b7:f4:7f:73:8f:4a:38:af:6f:ac:78:1f:ad: ea:59:ac:ac:86:b4:4e:6b:9b:4b:8e:e9:6f:d2:7b:a5:b2:b4: 21:88:2b:41:88:f5:50:42:62:9c:2d:f4:e8:3a:f0:41:cd:7b: 77:17:ca:3a:8f:87:81:42:a3:05:5c:22:0b:3d:9a:7d:84:29: b5:16:17:ad:7e:7a:1f:c9:16:75:46:e5:16:3b:f8:1b:83:38: b6:ab:d7:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjYwMTI1MDExNDUyWhcNMjYwMjAxMDExNDUyWjAYMRYwFAYD VQQDDA02OTc1NmU4ZC02NGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnluhdjyZeEN2qXbuLJaMfsFHFM56EQlJrF6bZsNo4GxkUajYjZgRHAb85x07 pRXZ9dFdyZ9E3HjNphSENXRANYhIH0uTfDUAj5s+r8oRdnKvYGal2L+Owz3SFB/4 07uS92wQkH/TrR/nBoOlRRGbnDlDOomLNzMXZ3eJ/YoYd4iv5kdsv/q8Keq+Ak4d DJPgu4cj0MVOs8tbrAy0c0/9L2A8re3ldafmJlUlTwibub4FYqwmZLeJlIKOBWiq DYoykF3/aPYcXhojAFQb08llM/iUcfNQYzMosjOfD/VKC30YrZ5omJ3m+86uU7oV Svkihz0ZbDulmXOHoZRFnWn7RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0Z9pmQ 33zaWjhHi2U/NXa1/IgCMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0 cGpRdndQUkdrWWRlb19rb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRVx/zyvRjCHNE6hJvLWiFNLbMV3Vp2hjT1JzOnQjLCVptTHe7SvUn 5D7zXNsSJFDlK9vvVftQpMg0DhGCTq+pPB8N9hVHAe/F/kR2yg1G+R+MPC9Z1D57 dAoxuudTTR/JmjBM9mMGVdA9oftDlLmdfRWE86o1ydY/Toy4bD9uT+fMi3fuuFMR YnDAtucxAL+4XUKiXPthdYd0gwC9hAG65XiVxRDebLf0f3OPSjivb6x4H63qWays hrROa5tLjulv0nulsrQhiCtBiPVQQmKcLfToOvBBzXt3F8o6j4eBQqMFXCILPZp9 hCm1FhetfnofyRZ1RuUWO/gbgzi2q9eQ -----END CERTIFICATE-----Generated at Sun Jan 25 13:56:53 2026 by rpki-client