This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
File: FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json)
Hash identifier: Ee5RWooSViEQAVPawIbevMZr1ViBTc6IwNj5GZm6m3k=
Subject key identifier: 3F:9A:DE:4A:B6:5A:66:B6:4C:1C:D1:10:A3:3C:FC:58:96:0B:1E:6D
Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19
Certificate issuer: /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
Manifest number: 026C
Signing time: Thu 04 Dec 2025 23:59:00 +0000
Manifest this update: Thu 04 Dec 2025 23:58:59 +0000
Manifest next update: Thu 11 Dec 2025 23:58:59 +0000
Files and hashes: 1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: N/wwEzWtGMgHiViGBt8BY6JiMjszWVi956rgLqkNpu4=)
2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: z3vMrh+MfifC7nf/d8HWXEmLlkM4nBll9m3BXQVcSyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl
rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:58:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8F4, serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719
Validity
Not Before: Dec 4 23:58:59 2025 GMT
Not After : Dec 11 23:58:59 2025 GMT
Subject: CN=69322043-546f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:53:a9:e2:b3:9e:85:c8:40:cc:34:95:75:28:
95:c6:13:5c:db:37:42:89:2b:b2:b4:86:8a:01:ca:
ed:dc:5a:74:31:5f:73:7f:b0:dc:b2:29:f8:65:26:
a5:6f:dc:e4:65:59:a9:9c:db:db:ea:4a:d4:87:40:
a1:55:13:ef:ae:49:96:e2:61:f5:88:e1:dd:5b:98:
12:66:b7:a4:79:32:ba:d8:64:3e:ff:61:d9:8d:9e:
37:7b:8c:93:15:7a:7b:9b:a4:e7:04:c4:04:08:85:
67:ab:fe:82:31:40:30:43:84:1a:12:5f:19:e6:cb:
5e:31:f3:60:c7:93:58:ea:e8:b8:fd:7f:c0:71:6f:
b1:a0:4e:76:0f:5f:14:19:31:c6:17:39:fe:ce:e6:
82:2d:e1:07:8c:6e:a9:85:c9:10:a6:9e:21:b4:9b:
bd:37:ac:69:33:c1:46:67:32:a8:2e:b2:6e:ff:70:
fa:e0:70:1e:80:44:46:87:ab:ba:c3:ad:ed:8d:2e:
80:28:7e:84:c9:23:3a:0b:88:8e:42:b9:3c:42:25:
5d:60:8d:bb:cc:04:cb:bc:4d:81:b1:22:44:62:7e:
d0:12:50:12:bd:33:a8:12:70:e5:03:fe:8f:61:e2:
63:53:62:b3:71:95:c6:21:05:ce:9d:d3:03:b0:ca:
db:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9A:DE:4A:B6:5A:66:B6:4C:1C:D1:10:A3:3C:FC:58:96:0B:1E:6D
X509v3 Authority Key Identifier:
keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:02:a3:89:e5:a9:91:9c:66:8e:a9:84:3e:e1:d1:37:5f:dc:
6a:40:aa:30:fe:ac:75:03:be:06:6b:1b:09:0f:a4:6f:e2:ff:
74:2d:f3:d9:15:72:e2:df:40:59:97:f5:d2:df:f0:49:61:e9:
2d:d8:c7:e3:4b:c5:48:c2:64:d4:85:f5:f0:1e:a7:d3:0e:54:
ec:27:ab:8a:e2:56:84:94:c7:b8:e5:f1:25:89:d3:e0:1b:a5:
d8:19:9c:e5:76:b5:16:1f:69:6c:be:2f:79:92:d9:39:24:94:
a3:f2:32:d7:9b:a0:24:21:81:9a:b7:ec:55:15:f2:c7:a9:67:
5a:10:ef:83:e8:b8:b4:3e:e6:17:de:ae:6a:ea:5d:17:9d:51:
9c:44:a3:5c:d5:92:68:65:f3:3b:6f:c0:f4:9d:01:a7:0e:d6:
eb:78:49:3a:07:2b:59:d8:31:ad:09:4c:34:51:16:74:5d:61:
d7:36:7b:20:e5:d9:05:df:45:2d:5f:5e:37:e5:2b:c6:db:60:
e3:56:30:c5:53:cb:8c:0e:3a:c2:7b:5e:98:fb:0a:f2:99:f6:
d0:0a:6c:39:c2:9b:76:c3:c7:44:0c:89:63:b6:3f:9a:ec:9c:
e0:f0:7c:4f:88:09:00:07:c8:16:f1:fd:2d:24:fa:b6:00:59:
d6:e0:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:02:16 2025 by rpki-client