This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json) Hash identifier: pNZ5i4vRJzrbpYHoZGLFu4KBuKp43jLQZCFYeR3nBvM= Subject key identifier: 7A:9B:66:0F:9C:F6:95:C5:1B:A7:08:DC:B2:F4:62:66:AA:A5:40:17 Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Certificate serial: 0B47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft Manifest number: 0B54 Signing time: Thu 04 Dec 2025 18:36:32 +0000 Manifest this update: Thu 04 Dec 2025 18:36:32 +0000 Manifest next update: Thu 11 Dec 2025 18:36:32 +0000 Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: 4e5MRtqfq0tFV9PJI+nRdOEwlTeMjBkwSOuTCE9J7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2887 (0xb47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Validity Not Before: Dec 4 18:36:32 2025 GMT Not After : Dec 11 18:36:32 2025 GMT Subject: CN=6931d4b0-cd05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b6:32:d6:06:03:2f:9c:65:f2:21:83:8f:9d: c3:a1:7b:50:f5:9b:5e:7b:cc:33:c1:0b:2e:ab:15: 0e:80:6c:57:7e:1c:fd:98:0a:88:9c:1b:4c:d0:05: 17:09:56:24:3c:69:80:d1:6b:32:37:13:c9:c0:bc: 50:7e:2a:a0:d7:95:c7:5d:da:70:6d:af:8b:6f:89: b1:48:ca:d8:a9:7d:93:96:98:25:84:87:59:82:cf: ea:50:f9:61:33:9a:fe:8b:34:82:a8:37:1d:d7:9a: 7e:57:d4:2b:f0:48:d2:6c:87:e3:31:a5:71:a6:73: 20:90:9b:13:14:e1:50:d5:ec:c1:1d:06:b3:3b:5d: ce:12:db:e4:64:0f:32:ba:c1:09:4c:02:61:aa:6a: ac:2c:3f:01:07:99:65:45:e7:12:d4:08:bd:9f:11: ec:c4:6f:16:1b:c9:08:d3:f1:52:33:20:b4:6b:23: 1d:ec:de:95:56:47:60:4d:c3:9a:57:3c:d7:ec:c2: 34:45:0a:a8:2e:e2:a0:27:19:9b:b7:82:ac:7f:07: 95:2c:af:5b:8f:1c:0d:f6:69:a8:a4:a0:81:96:c2: 5c:e5:ef:22:57:9d:c3:38:5f:77:f3:0c:36:3d:73: c0:e7:dc:bf:49:4d:21:24:96:35:2b:46:88:59:48: a3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9B:66:0F:9C:F6:95:C5:1B:A7:08:DC:B2:F4:62:66:AA:A5:40:17 X509v3 Authority Key Identifier: keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2e:58:5a:8e:3c:b7:13:cf:7f:80:e7:66:83:f6:10:61:f6: a5:99:fc:ce:9b:03:87:85:6f:50:04:93:1f:c9:3f:9f:98:29: e9:e1:23:76:d6:73:d0:37:89:41:2b:28:bd:07:e2:9b:5b:6c: 68:9b:6a:2f:8a:31:39:ee:3e:f6:e6:1e:0e:44:ae:ac:f1:51: b3:42:a6:7c:d8:d6:d7:12:99:e3:5e:6b:57:1b:39:9a:f9:6a: ba:c2:a5:d5:61:ef:80:2a:b4:46:57:95:84:04:2a:7a:4f:7c: ad:ea:b2:f1:38:84:ca:d4:c1:d0:30:31:6e:25:ec:2d:55:07: e2:7a:fc:ec:38:8c:41:91:cf:75:9f:cd:03:43:cd:78:52:2a: 38:b0:18:2d:32:a7:27:64:75:0f:f3:d4:9b:10:84:5d:c0:59: bd:b4:69:f3:18:e7:e3:57:54:70:81:75:76:4a:35:f7:45:b0: 61:53:e7:2d:60:7f:45:be:3c:fd:3a:4e:f5:ee:60:9a:aa:14: 22:2f:d7:e5:5a:ed:4e:1b:e4:a1:12:ec:bb:bb:03:54:0a:0c: 80:71:0f:d9:6f:86:0e:3b:aa:7c:38:6d:9a:a6:0f:ff:c7:3b: 4c:34:b3:64:48:fb:bf:69:65:50:70:00:97:d0:08:15:68:94: 35:bc:aa:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE MUE4MzI3MEYwHhcNMjUxMjA0MTgzNjMyWhcNMjUxMjExMTgzNjMyWjAYMRYwFAYD VQQDEw02OTMxZDRiMC1jZDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rYy1gYDL5xl8iGDj53DoXtQ9Ztee8wzwQsuqxUOgGxXfhz9mAqInBtM0AUX CVYkPGmA0WsyNxPJwLxQfiqg15XHXdpwba+Lb4mxSMrYqX2TlpglhIdZgs/qUPlh M5r+izSCqDcd15p+V9Qr8EjSbIfjMaVxpnMgkJsTFOFQ1ezBHQazO13OEtvkZA8y usEJTAJhqmqsLD8BB5llRecS1Ai9nxHsxG8WG8kI0/FSMyC0ayMd7N6VVkdgTcOa VzzX7MI0RQqoLuKgJxmbt4KsfweVLK9bjxwN9mmopKCBlsJc5e8iV53DOF938ww2 PXPA59y/SU0hJJY1K0aIWUijYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqbZg+c 9pXFG6cI3LL0YmaqpUAXMB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhx RlZEZWNQUllReTNScURKdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9Llhajjy3E89/gOdmg/YQYfalmfzOmwOHhW9QBJMfyT+fmCnp4SN2 1nPQN4lBKyi9B+KbW2xom2ovijE57j725h4ORK6s8VGzQqZ82NbXEpnjXmtXGzma +Wq6wqXVYe+AKrRGV5WEBCp6T3yt6rLxOITK1MHQMDFuJewtVQfievzsOIxBkc91 n80DQ814Uio4sBgtMqcnZHUP89SbEIRdwFm9tGnzGOfjV1RwgXV2SjX3RbBhU+ct YH9Fvjz9Ok717mCaqhQiL9flWu1OG+ShEuy7uwNUCgyAcQ/Zb4YOO6p8OG2apg// xztMNLNkSPu/aWVQcACX0AgVaJQ1vKrY -----END CERTIFICATE-----Generated at Sat Dec 6 13:55:43 2025 by rpki-client