This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft File: Fq85Z82e72n-cs9m28bg-wDKONQ.mft (raw, json) Hash identifier: +vmwt7F5AYowdNgKTgbwKcieC/BiHJlHBj+2JUxVH1E= Subject key identifier: 24:F5:59:7A:E8:72:13:57:6A:C8:F8:83:E7:3F:A3:1D:C9:E4:53:32 Authority key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 Certificate issuer: /CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft Manifest number: 0101 Signing time: Fri 05 Dec 2025 03:08:50 +0000 Manifest this update: Fri 05 Dec 2025 03:08:50 +0000 Manifest next update: Fri 12 Dec 2025 03:08:50 +0000 Files and hashes: 1: Fq85Z82e72n-cs9m28bg-wDKONQ.crl (hash: 7F9/U91IfAI+3luUnIjnH9xuZmw9mwVDLT0wPJZ2lbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Validity Not Before: Dec 5 03:08:50 2025 GMT Not After : Dec 12 03:08:50 2025 GMT Subject: CN=69324cc2-33d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:fd:30:3a:96:37:d8:7b:b8:0c:5f:f7:3b: 9c:41:bf:6e:d8:01:b4:cc:34:39:7a:20:16:9c:f0: eb:40:27:73:0c:52:55:47:1e:99:25:60:37:3d:b8: 79:e7:9a:a9:ad:ff:70:cf:14:7b:b3:8f:26:d3:17: a3:3d:46:6d:13:04:f6:56:fd:82:54:8b:dc:07:f0: 65:bc:b9:31:a3:04:c1:e9:de:ec:1e:b0:f5:d7:a4: 9a:58:24:ab:5f:73:63:c7:e3:8c:6d:11:f6:29:03: b1:8b:3c:19:d9:2f:c0:65:54:b1:46:3f:85:13:e3: 41:12:5a:6a:fa:e5:da:7b:cd:a4:47:b7:1a:66:7a: 7f:fe:66:d2:4a:a6:91:97:c7:b9:ff:7c:6c:0e:cb: 54:ab:d6:67:9f:30:2b:30:54:98:8c:5b:59:df:92: 94:09:3b:06:b0:8f:2b:cd:a3:6a:d9:8f:0d:2c:fb: 4e:7a:29:10:31:15:ad:2a:a2:74:60:6e:44:e6:db: b0:cc:90:90:49:3a:e5:14:9e:ad:30:1f:a6:ab:fc: aa:76:0e:cd:ec:27:0a:40:80:09:66:5c:c0:db:a3: 42:d7:0d:3b:47:5a:1f:67:ea:ad:83:22:ab:fb:a2: 0c:59:6e:a4:ec:0a:0a:20:cc:de:7c:b4:ff:a0:7d: 7b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F5:59:7A:E8:72:13:57:6A:C8:F8:83:E7:3F:A3:1D:C9:E4:53:32 X509v3 Authority Key Identifier: keyid:16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:0f:01:e3:22:ae:a9:9c:3f:e3:88:24:3e:f1:1f:59:47:9a: 23:e5:c8:ac:ea:76:f0:8c:da:b5:d2:64:5a:bd:cd:30:cb:eb: 4b:5b:43:4a:80:4b:17:bc:ad:bd:04:bd:08:ac:89:31:10:f9: 5e:d9:5c:b6:87:9b:9e:ee:ad:1e:50:02:76:7e:8c:57:43:57: b6:a8:ab:bf:f1:9e:8d:f1:d2:09:dc:b5:5e:bf:0c:9f:ee:93: f3:de:18:14:6b:2b:4b:02:88:95:5d:91:44:89:6d:3a:3d:12: 53:a2:db:3c:23:50:2a:4a:23:d3:a8:d3:68:e8:c7:b2:43:19: 38:41:5e:f2:fa:37:c2:95:3b:e8:bd:0a:4c:e7:6a:c7:4a:c6: f0:1a:63:14:99:69:ac:8a:06:35:96:42:d7:a7:68:1c:ce:ac: 5f:e7:9f:38:f8:68:b9:2c:00:00:29:d1:94:96:5b:cc:54:9f: 43:ee:d5:66:21:1a:d8:63:29:86:c0:e9:b9:63:d9:c3:45:c5: 75:9e:6a:24:56:f5:af:e4:72:5d:e5:fc:43:4f:ec:29:31:12: d2:32:97:87:4a:44:24:19:d9:b4:32:94:fc:d8:3a:89:cd:91: 46:6b:55:c3:0d:a5:2d:5a:31:44:70:58:00:b2:69:fc:2a:c2: db:0f:2e:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM0RDAxMTAvBgNVBAUTKDE2QUYzOTY3Q0Q5RUVGNjlGRTcyQ0Y2NkRCQzZFMEZC MDBDQTM4RDQwHhcNMjUxMjA1MDMwODUwWhcNMjUxMjEyMDMwODUwWjAYMRYwFAYD VQQDEw02OTMyNGNjMi0zM2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7j9MDqWN9h7uAxf9zucQb9u2AG0zDQ5eiAWnPDrQCdzDFJVRx6ZJWA3Pbh5 55qprf9wzxR7s48m0xejPUZtEwT2Vv2CVIvcB/BlvLkxowTB6d7sHrD116SaWCSr X3Njx+OMbRH2KQOxizwZ2S/AZVSxRj+FE+NBElpq+uXae82kR7caZnp//mbSSqaR l8e5/3xsDstUq9ZnnzArMFSYjFtZ35KUCTsGsI8rzaNq2Y8NLPtOeikQMRWtKqJ0 YG5E5tuwzJCQSTrlFJ6tMB+mq/yqdg7N7CcKQIAJZlzA26NC1w07R1ofZ+qtgyKr +6IMWW6k7AoKIMzefLT/oH17vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCT1WXro chNXasj4g+c/ox3J5FMyMB8GA1UdIwQYMBaAFBavOWfNnu9p/nLPZtvG4PsAyjjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9GNTQwM0VGMjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcybi1jczltMjhiZy13REtP TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxODVaODJlNzJuLWNzOW0yOGJnLXdES09OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9GNTQwM0VGMjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcy bi1jczltMjhiZy13REtPTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxDwHjIq6pnD/jiCQ+8R9ZR5oj5cis6nbwjNq10mRavc0wy+tLW0NK gEsXvK29BL0IrIkxEPle2Vy2h5ue7q0eUAJ2foxXQ1e2qKu/8Z6N8dIJ3LVevwyf 7pPz3hgUaytLAoiVXZFEiW06PRJTots8I1AqSiPTqNNo6MeyQxk4QV7y+jfClTvo vQpM52rHSsbwGmMUmWmsigY1lkLXp2gczqxf5584+Gi5LAAAKdGUllvMVJ9D7tVm IRrYYymGwOm5Y9nDRcV1nmokVvWv5HJd5fxDT+wpMRLSMpeHSkQkGdm0MpT82DqJ zZFGa1XDDaUtWjFEcFgAsmn8KsLbDy6G -----END CERTIFICATE-----Generated at Sat Dec 6 13:29:05 2025 by rpki-client