This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft File: Fm664SGI_4_HXurj7PjTvearJxo.mft (raw, json) Hash identifier: Uy9EIJwLndJwhbVAZUi1bFWiLVwJnsC23U/TQutlOw0= Subject key identifier: 2A:69:75:4A:CF:D9:33:89:D6:2B:90:0C:35:AD:E0:6C:C9:2E:28:0F Authority key identifier: 16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A Certificate issuer: /CN=A91C654A/serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft Manifest number: 096C Signing time: Sat 06 Dec 2025 20:33:23 +0000 Manifest this update: Sat 06 Dec 2025 20:33:23 +0000 Manifest next update: Sat 13 Dec 2025 20:33:23 +0000 Files and hashes: 1: Fm664SGI_4_HXurj7PjTvearJxo.crl (hash: NxzaD42RQgnSBYegw8x2XGXk42r/Mvpj7CD66Yn6G1o=) 2: 50F8849CFDC111ED95AAA041C4F9AE02.roa (hash: 0DD71MyNn/a0ClFzY+negnwcfIlHkrg4N1Q4gkDWcxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C654A, serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A Validity Not Before: Dec 6 20:33:23 2025 GMT Not After : Dec 13 20:33:23 2025 GMT Subject: CN=69349313-e10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:39:39:df:a8:aa:fc:e3:0f:94:4d:14:75:09: 04:7e:45:66:64:07:1c:80:6a:ff:b9:68:9c:e9:f2: 54:6a:5a:a1:e6:5e:dd:b8:ff:a5:56:64:7d:bf:90: 17:5d:b2:70:ae:2e:f4:0d:6f:a5:ea:00:d5:6c:c8: a9:00:70:85:03:33:e4:94:80:bf:ab:eb:38:ba:77: 4a:6a:cd:b4:7b:30:55:51:b6:f2:ac:59:0b:f9:96: b9:8b:1d:a2:77:01:92:8a:36:cd:86:5f:1a:5e:a1: a3:82:1c:02:b0:88:ff:14:49:96:4c:c6:ea:71:1a: 36:72:53:00:37:af:f0:a9:18:d1:d4:c3:df:42:8b: 0a:d4:70:86:8c:70:1e:2b:0b:7e:7d:39:4f:2f:a6: 94:ec:66:20:c6:46:26:48:f6:e2:17:52:a7:1a:f5: ba:ce:d5:ff:b8:a5:3c:d4:b6:d7:74:b9:b7:fc:87: bd:ac:38:c7:be:a8:07:7d:7d:6c:11:c0:74:6f:f7: 10:1d:b7:1f:50:b4:9c:8e:bc:5e:35:e5:ab:65:ba: 6d:6e:b5:ff:19:69:fa:8a:ff:67:7e:67:63:7f:06: 94:31:cb:6e:46:a1:f0:da:f8:da:dc:a6:00:8b:6c: 1c:cc:c4:f2:83:cd:0d:0e:9b:89:93:2a:2c:d0:ca: be:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:69:75:4A:CF:D9:33:89:D6:2B:90:0C:35:AD:E0:6C:C9:2E:28:0F X509v3 Authority Key Identifier: keyid:16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b4:a8:b9:23:a7:0a:ef:88:de:68:9f:b0:8b:76:2c:e0:17: 88:af:63:f1:d9:3c:22:e2:a7:b5:34:0f:1f:e3:25:ea:49:5d: 0e:91:e2:68:de:94:d8:d4:30:ec:38:94:6c:1c:ef:06:c6:24: ca:25:a8:87:85:0a:29:d3:1d:b7:c3:3b:d6:ef:3d:8c:3a:65: 0d:70:95:45:9f:06:21:61:11:10:f4:8f:39:86:7c:e0:91:d9: 6a:16:13:6e:0f:18:8b:ae:42:fb:62:ed:28:65:7d:40:df:c6: 28:93:97:c4:25:68:64:82:c5:ff:c9:9b:f8:2a:f6:7c:47:96: b2:87:78:ce:ef:b9:e0:f6:08:da:13:4b:61:d8:c1:54:ca:ba: 4d:ce:c9:70:63:ef:40:63:6c:9b:b1:d3:2f:ca:be:bc:c6:13: 73:89:0b:63:b4:1a:80:19:15:6d:0e:60:6f:9d:e7:24:57:1d: a8:9a:1d:e8:d3:07:c6:0e:84:43:90:10:ab:9c:03:e6:98:e9: 7a:7e:e9:79:78:52:9a:7f:bd:da:0a:e4:fe:5e:af:15:59:d7: 69:ca:1c:33:59:cd:ba:23:73:c1:05:23:ae:ff:fd:bc:a1:65: b7:59:41:99:39:42:b9:1f:51:77:95:d5:9d:89:b8:b9:51:8e: 54:79:98:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NEExMTAvBgNVBAUTKDE2NkVCQUUxMjE4OEZGOEZDNzVFRUFFM0VDRjhEM0JE RTZBQjI3MUEwHhcNMjUxMjA2MjAzMzIzWhcNMjUxMjEzMjAzMzIzWjAYMRYwFAYD VQQDEw02OTM0OTMxMy1lMTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jk536iq/OMPlE0UdQkEfkVmZAccgGr/uWic6fJUalqh5l7duP+lVmR9v5AX XbJwri70DW+l6gDVbMipAHCFAzPklIC/q+s4undKas20ezBVUbbyrFkL+Za5ix2i dwGSijbNhl8aXqGjghwCsIj/FEmWTMbqcRo2clMAN6/wqRjR1MPfQosK1HCGjHAe Kwt+fTlPL6aU7GYgxkYmSPbiF1KnGvW6ztX/uKU81LbXdLm3/Ie9rDjHvqgHfX1s EcB0b/cQHbcfULScjrxeNeWrZbptbrX/GWn6iv9nfmdjfwaUMctuRqHw2vja3KYA i2wczMTyg80NDpuJkyos0Mq+6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCppdUrP 2TOJ1iuQDDWt4GzJLigPMB8GA1UdIwQYMBaAFBZuuuEhiP+Px17q4+z4073mqyca MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU0QS83MUZBQjBEODM1 MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9GbTY2NFNHSV80X0hYdXJqN1BqVHZlYXJK eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZtNjY0U0dJXzRfSFh1cmo3UGpUdmVhckp4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjU0QS83MUZBQjBEODM1MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9GbTY2NFNHSV80 X0hYdXJqN1BqVHZlYXJKeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOtKi5I6cK74jeaJ+wi3Ys4BeIr2Px2Twi4qe1NA8f4yXqSV0OkeJo 3pTY1DDsOJRsHO8GxiTKJaiHhQop0x23wzvW7z2MOmUNcJVFnwYhYREQ9I85hnzg kdlqFhNuDxiLrkL7Yu0oZX1A38Yok5fEJWhkgsX/yZv4KvZ8R5ayh3jO77ng9gja E0th2MFUyrpNzslwY+9AY2ybsdMvyr68xhNziQtjtBqAGRVtDmBvneckVx2omh3o 0wfGDoRDkBCrnAPmmOl6ful5eFKaf73aCuT+Xq8VWddpyhwzWc26I3PBBSOu//28 oWW3WUGZOUK5H1F3ldWdibi5UY5UeZh4 -----END CERTIFICATE-----Generated at Sun Dec 7 08:12:40 2025 by rpki-client