This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: j1Kpd+aviHULkNJuTC7qjN16DJqHgO/8H6DNdIoyv7g= Subject key identifier: 2C:6F:22:DA:A8:E6:29:9C:E8:30:5B:E6:52:A9:38:68:62:37:BC:62 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 3591 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 353B Signing time: Sat 06 Dec 2025 14:24:28 +0000 Manifest this update: Sat 06 Dec 2025 14:24:27 +0000 Manifest next update: Sat 13 Dec 2025 14:24:27 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: S2aGq7OU7jJ0A55acMmvcFKvokWASYtIk6EasuKZACw=) 2: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: bPtENJEcOoeg2k8xe2jWRrY5UKQvlUbjR5xndoVRe10=) 3: 40DFD5AC650711EFB94FD44FC4F9AE02.roa (hash: zawwiUMAVIdG2bykFeNbnA88n/1gVRjEvWeHRre2uoI=) 4: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: 4h0iDWjsfa7NDKLfke8j7fgE3a1MCnkylqCcKoNifz0=) 5: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: IzD5q2GzmuV18q1dnBjmacTQl4qcdKe2UsljJfilqlM=) 6: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: 1DqkZy0Sr7x/NV3lD1tkE7OMsC3mnmbQH1B1oR6rOnw=) 7: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: qTYeOx6pg1ogjikS/4HOIDZ4QqzqAPHZTv7DK6zo/c4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13713 (0x3591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Dec 6 14:24:27 2025 GMT Not After : Dec 13 14:24:27 2025 GMT Subject: CN=69343c9b-12da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:de:92:e9:15:ec:6b:ee:47:4f:20:20:27:6b: f2:75:83:65:fa:8c:f2:73:c0:dc:19:b1:ed:6b:9a: f6:54:ad:00:c1:0b:c7:be:e1:52:32:31:e3:14:44: e1:95:2f:fb:61:a5:43:49:c5:f0:bb:a0:88:30:5a: e9:14:c9:42:b2:ef:2a:b9:b8:95:a2:ed:6a:db:61: a8:84:a0:d0:9b:58:65:41:7d:57:4a:3a:d8:49:c6: 14:96:b9:51:77:a2:ef:ec:5f:ad:e2:1f:43:5d:f7: f2:10:80:2d:8a:ad:92:c3:21:09:54:87:45:65:8c: 23:79:18:17:cd:a9:9e:67:c0:ec:71:44:0a:91:01: fd:00:e4:8e:f6:41:a2:75:c6:56:c9:a7:aa:b4:06: 43:ec:fc:30:b3:90:18:38:65:14:33:21:ed:9d:37: b1:e6:78:bb:f7:11:90:5e:08:c8:39:16:1b:63:c3: cc:35:0e:99:fb:ac:78:a4:01:4d:6d:0a:97:98:94: 42:af:90:a7:ef:e3:41:e9:92:b9:0f:22:bb:85:99: bd:f3:2e:06:6d:14:b3:ee:a0:4f:69:d0:dc:33:87: 98:6f:94:c5:65:4d:ad:d6:d6:ed:70:9e:39:91:28: 86:15:39:ec:05:99:6a:5c:29:fa:31:ef:6a:bf:e1: 5e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6F:22:DA:A8:E6:29:9C:E8:30:5B:E6:52:A9:38:68:62:37:BC:62 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:52:18:ec:f5:63:e0:86:55:ba:b1:12:e1:5e:8a:ef:38:09: cc:f4:99:d8:e4:20:b0:56:22:5f:61:ea:1d:3e:1a:ea:cc:23: b6:71:84:19:8d:5b:d9:0f:8d:61:d2:10:69:85:af:81:49:84: 9e:0c:46:f1:2d:25:a7:ef:a2:93:34:a9:ec:e4:66:94:55:ff: ea:87:16:9e:d0:47:83:2a:ce:cc:c7:52:31:60:20:17:57:5e: 01:03:24:f2:0b:23:4f:49:83:3a:09:78:f5:56:f7:b3:53:fb: 36:86:65:65:b2:f9:07:ac:d5:ca:c1:d1:2a:ab:e4:a9:9f:42: 25:77:aa:06:28:79:f1:25:81:09:7a:5b:87:ba:b4:9a:4d:54: b9:9b:3f:f6:39:9c:c2:7d:0b:37:f1:29:3c:e0:31:81:e5:81: ce:d4:8c:43:ea:46:7b:8a:38:1c:45:23:0f:da:26:e0:94:2d: e2:e3:e6:df:c1:a0:cf:9e:d7:78:bd:cd:2d:7c:66:0e:5f:c9: 4f:d4:fe:6f:96:3c:57:9b:86:1d:fd:51:b1:2b:6f:f6:5e:3c: 9a:f3:ea:8d:9b:0d:c1:c2:55:4d:41:d8:ad:94:a1:fc:2c:ec: 70:24:5e:f9:93:6c:67:66:01:d7:12:bf:03:df:28:8d:9e:a7: 16:c6:af:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjUxMjA2MTQyNDI3WhcNMjUxMjEzMTQyNDI3WjAYMRYwFAYD VQQDEw02OTM0M2M5Yi0xMmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo96S6RXsa+5HTyAgJ2vydYNl+ozyc8DcGbHta5r2VK0AwQvHvuFSMjHjFETh lS/7YaVDScXwu6CIMFrpFMlCsu8qubiVou1q22GohKDQm1hlQX1XSjrYScYUlrlR d6Lv7F+t4h9DXffyEIAtiq2SwyEJVIdFZYwjeRgXzameZ8DscUQKkQH9AOSO9kGi dcZWyaeqtAZD7Pwws5AYOGUUMyHtnTex5ni79xGQXgjIORYbY8PMNQ6Z+6x4pAFN bQqXmJRCr5Cn7+NB6ZK5DyK7hZm98y4GbRSz7qBPadDcM4eYb5TFZU2t1tbtcJ45 kSiGFTnsBZlqXCn6Me9qv+Fe8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxvItqo 5imc6DBb5lKpOGhiN7xiMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQUhjs9WPghlW6sRLhXorvOAnM9JnY5CCwViJfYeodPhrqzCO2cYQZ jVvZD41h0hBpha+BSYSeDEbxLSWn76KTNKns5GaUVf/qhxae0EeDKs7Mx1IxYCAX V14BAyTyCyNPSYM6CXj1VvezU/s2hmVlsvkHrNXKwdEqq+Spn0Ild6oGKHnxJYEJ eluHurSaTVS5mz/2OZzCfQs38Sk84DGB5YHO1IxD6kZ7ijgcRSMP2ibglC3i4+bf waDPntd4vc0tfGYOX8lP1P5vljxXm4Yd/VGxK2/2Xjya8+qNmw3BwlVNQditlKH8 LOxwJF75k2xnZgHXEr8D3yiNnqcWxq+2 -----END CERTIFICATE-----Generated at Sun Dec 7 02:41:31 2025 by rpki-client