This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft File: FUc--zxa6KDEdke34P3liGtrH6M.mft (raw, json) Hash identifier: f9Ui7DjU3TP+h2AMvE1+RA0hDaA4ZLE02kcKj8QwZ1s= Subject key identifier: 8A:E9:BA:91:4A:CD:6A:10:EF:BE:C5:8F:C1:00:30:D2:B0:68:DB:E3 Authority key identifier: 15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 Certificate issuer: /CN=A91CE4A1/serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft Manifest number: 0453 Signing time: Sat 06 Dec 2025 22:55:44 +0000 Manifest this update: Sat 06 Dec 2025 22:55:44 +0000 Manifest next update: Sat 13 Dec 2025 22:55:44 +0000 Files and hashes: 1: FUc--zxa6KDEdke34P3liGtrH6M.crl (hash: v/q8VtDYhEhn1qbht+bJ9TCh2+qvvDOiHmygejETR5Y=) 2: 2D81FF3680BB11EC8FD7663DC4F9AE02.roa (hash: 93hMZoZD1IeR9WgZB4O3EInu2uvTAMcqxAyD5/FgSlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4A1, serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Validity Not Before: Dec 6 22:55:44 2025 GMT Not After : Dec 13 22:55:44 2025 GMT Subject: CN=6934b470-c262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0f:bd:95:10:d0:83:1b:fd:15:0a:db:28:1f: 50:39:0f:8d:79:48:91:28:8e:d5:e3:3d:47:bd:14: 9b:2b:9f:2b:67:b3:da:77:32:65:23:d8:2a:74:ed: 99:c3:cf:1b:da:41:37:c0:20:61:f9:13:d9:da:47: 4a:74:74:69:6f:26:dd:05:43:0e:5a:a2:d8:0e:d3: ac:d6:62:90:98:49:d3:6d:a4:5c:e6:85:f0:ea:52: df:f5:47:07:a8:18:72:0f:db:b7:b5:98:88:b5:04: e3:8b:93:ef:07:f5:c4:7b:3d:2d:20:47:70:a0:d5: d9:7f:c5:95:7c:d7:85:9f:0c:55:ea:d9:bf:51:1a: 2d:d0:75:e9:1e:a4:a6:60:28:6d:fe:eb:95:20:ef: d6:07:df:e4:e2:55:7f:b5:16:f9:ac:e6:a9:37:18: 90:cc:8a:1c:93:20:2f:d5:8f:04:d4:c0:25:23:ee: 7a:d2:fe:99:9f:ed:5c:ee:fc:06:42:8f:3c:44:a4: 63:84:f3:98:2c:e4:36:1b:bb:9f:04:f4:9f:bc:f1: 4b:b3:03:e0:3c:82:4c:34:09:af:3f:af:7c:d0:f8: 72:71:ad:ea:3d:e6:58:e8:2f:4a:79:69:44:db:53: 50:2f:3d:dd:54:d6:3f:71:54:47:96:08:de:1c:86: 41:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E9:BA:91:4A:CD:6A:10:EF:BE:C5:8F:C1:00:30:D2:B0:68:DB:E3 X509v3 Authority Key Identifier: keyid:15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d1:1a:0b:d2:88:59:a1:e4:11:ae:eb:b3:35:8e:80:0a:34: 67:f9:94:e9:79:5e:6b:f1:3c:85:84:11:63:56:66:4d:d4:d9: e2:62:53:99:d7:65:e5:3e:50:bf:0b:b6:d1:14:5c:6f:9d:f0: 82:96:99:87:63:b9:1f:7f:bd:94:95:cc:e3:6d:af:94:ab:5d: ba:fc:cd:4f:35:56:d2:ec:45:82:24:0c:9b:62:ad:34:06:1a: 03:e5:ee:08:f8:a2:66:ae:4b:ff:0f:17:cf:d5:0f:4c:3c:08: bc:1e:77:f4:0c:1b:64:39:fe:7e:61:1e:fd:4c:6c:a6:4c:d9: 24:b1:25:6e:96:3b:59:f7:d4:5d:25:5b:3d:9a:f0:fb:d3:a9: 2c:ab:c5:7c:3b:85:a5:10:23:16:ec:62:f3:60:51:86:f3:a7: 66:d3:54:2e:62:11:74:dc:6e:18:29:95:fc:e5:5a:64:26:0d: a4:a6:ed:99:95:be:d8:4b:f8:d2:04:dd:f2:c3:e6:2c:f2:79: 2e:ca:d1:7f:46:7c:27:3d:f3:6f:60:1c:4c:73:63:6c:fc:6d: b9:0e:fd:fa:7f:a8:ec:d3:b9:af:b6:a5:70:4a:30:00:64:d9: 30:17:25:d6:61:87:20:57:60:a0:3a:bc:be:87:b7:f5:a7:65: 7b:9b:fd:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QTExMTAvBgNVBAUTKDE1NDczRUZCM0M1QUU4QTBDNDc2NDdCN0UwRkRFNTg4 NkI2QjFGQTMwHhcNMjUxMjA2MjI1NTQ0WhcNMjUxMjEzMjI1NTQ0WjAYMRYwFAYD VQQDEw02OTM0YjQ3MC1jMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Q+9lRDQgxv9FQrbKB9QOQ+NeUiRKI7V4z1HvRSbK58rZ7PadzJlI9gqdO2Z w88b2kE3wCBh+RPZ2kdKdHRpbybdBUMOWqLYDtOs1mKQmEnTbaRc5oXw6lLf9UcH qBhyD9u3tZiItQTji5PvB/XEez0tIEdwoNXZf8WVfNeFnwxV6tm/URot0HXpHqSm YCht/uuVIO/WB9/k4lV/tRb5rOapNxiQzIockyAv1Y8E1MAlI+560v6Zn+1c7vwG Qo88RKRjhPOYLOQ2G7ufBPSfvPFLswPgPIJMNAmvP6980Phyca3qPeZY6C9KeWlE 21NQLz3dVNY/cVRHlgjeHIZBmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrpupFK zWoQ777Fj8EAMNKwaNvjMB8GA1UdIwQYMBaAFBVHPvs8WuigxHZHt+D95Yhrax+j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRBMS84NUZBMENFODgw QjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZLREVka2UzNFAzbGlHdHJI Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVYy0tenhhNktERWRrZTM0UDNsaUd0ckg2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRBMS84NUZBMENFODgwQjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZL REVka2UzNFAzbGlHdHJINk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe0RoL0ohZoeQRruuzNY6ACjRn+ZTpeV5r8TyFhBFjVmZN1NniYlOZ 12XlPlC/C7bRFFxvnfCClpmHY7kff72Ulczjba+Uq126/M1PNVbS7EWCJAybYq00 BhoD5e4I+KJmrkv/DxfP1Q9MPAi8Hnf0DBtkOf5+YR79TGymTNkksSVuljtZ99Rd JVs9mvD706ksq8V8O4WlECMW7GLzYFGG86dm01QuYhF03G4YKZX85VpkJg2kpu2Z lb7YS/jSBN3yw+Ys8nkuytF/RnwnPfNvYBxMc2Ns/G25Dv36f6js07mvtqVwSjAA ZNkwFyXWYYcgV2CgOry+h7f1p2V7m/2a -----END CERTIFICATE-----Generated at Sun Dec 7 12:41:44 2025 by rpki-client