This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft File: FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft (raw, json) Hash identifier: KbkHyz0C1pN6Ai599PBSJwOvZK6i1ZuhkG/iMB/eYBU= Subject key identifier: 5E:7A:6B:13:31:72:F9:53:B1:56:6F:16:9C:A3:C3:CF:C0:41:B8:35 Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31 Certificate issuer: /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft Manifest number: 8E Signing time: Fri 05 Dec 2025 04:28:09 +0000 Manifest this update: Fri 05 Dec 2025 04:28:09 +0000 Manifest next update: Fri 12 Dec 2025 04:28:09 +0000 Files and hashes: 1: FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl (hash: SaZVklMqRPcl9Zg3ptbzWKfLLANl+Xmie/ZSh0iL9lI=) 2: E2D9B7A6B32611F0BE8DF029C4F9AE02.roa (hash: blGbXq2yiWVicTOuyyoxLGQafJr97/lYQbfApO8b37w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831 Validity Not Before: Dec 5 04:28:09 2025 GMT Not After : Dec 12 04:28:09 2025 GMT Subject: CN=69325f59-c5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9b:b8:d8:7a:64:5b:5f:cc:38:88:e1:20:d8: 84:aa:d3:d1:82:68:c4:f6:3f:b8:cc:3a:0d:57:67: 68:c0:81:c9:0b:19:09:e7:91:57:b6:93:1c:4e:d7: d7:e6:d3:90:95:0b:09:1d:66:c5:c6:bc:85:77:c6: 47:c0:07:e1:a5:89:e8:d9:9e:9f:00:63:bc:f3:e6: bf:5a:0b:3d:ca:8c:06:42:d8:9b:81:3f:47:1e:f9: 41:12:a4:68:af:cd:f4:c8:7a:c6:dd:f0:4f:aa:df: 0a:80:70:87:bd:c2:49:c6:a9:92:7e:8a:09:11:69: f6:67:a3:b1:c1:e4:86:a2:c8:ad:2d:a1:6d:5c:f9: 3c:24:33:88:c0:4d:db:17:bc:d0:2b:aa:06:5b:ab: 24:41:26:4f:a4:2d:93:a5:f7:3a:ad:ae:a5:63:93: fd:ce:64:87:ad:34:ee:e4:af:e3:bf:d6:2b:f2:c7: e2:21:0c:6a:8c:b7:5b:d5:89:d4:57:7e:05:a2:38: c2:76:2d:b8:8a:e4:97:56:db:f1:a6:0a:12:a1:95: 9a:42:a6:51:b1:7d:d3:5a:a5:94:74:4b:f5:d0:f9: bb:22:ab:e0:81:8a:f6:4e:05:3e:ae:d9:78:68:cc: 35:a0:59:17:1f:e4:73:9a:47:ac:f1:f2:ee:b6:89: 21:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7A:6B:13:31:72:F9:53:B1:56:6F:16:9C:A3:C3:CF:C0:41:B8:35 X509v3 Authority Key Identifier: keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:81:0f:e9:66:31:f5:29:5f:8c:27:bb:6a:8c:71:c4:3c:e7: 93:6b:c0:86:61:6b:5a:3e:3d:5f:f3:17:df:6c:b6:ef:35:0b: bb:47:84:87:f1:a4:1b:8f:aa:92:af:e9:6b:06:65:0c:69:38: 01:bd:00:4f:a7:5b:ab:fe:65:2b:13:cc:ca:ce:42:69:89:7e: 89:b1:f3:38:79:b6:3b:c3:45:c9:00:a2:a3:26:42:f2:bb:19: 3e:99:15:27:e2:5f:f6:3c:87:2e:f5:d1:77:a4:f5:df:99:27: f3:33:4f:ab:36:9a:1f:0a:7e:af:ad:eb:17:0f:7a:b0:4b:31: fd:77:71:6c:a5:09:ce:84:ce:be:4a:e8:c0:ca:e4:99:9e:f9: c9:56:9e:09:1c:f5:8c:e0:a0:76:92:bd:7d:f7:f5:0e:61:0a: 1d:56:ab:3d:fd:b7:6d:32:1f:23:d1:38:bf:8d:c7:1a:3f:c3: b1:95:bc:db:a5:0f:63:5c:8f:17:e6:cc:02:98:4f:e8:4e:82: 97:74:d6:4a:93:13:2d:10:7a:6a:8c:3e:5f:11:7b:97:9a:eb: 49:c7:29:6b:a2:10:fd:80:80:d8:17:c9:df:d0:62:d7:46:0f: e1:c2:0a:80:21:57:5b:04:24:9f:1a:cc:bd:5b:e5:c2:fb:83: b6:1e:c6:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRCODYxMTAvBgNVBAUTKDE0RDVBRDI3MjJBQ0E4NkFEMzRGMEY5QTM0NDcyNkNC NjY5ODA4MzEwHhcNMjUxMjA1MDQyODA5WhcNMjUxMjEyMDQyODA5WjAYMRYwFAYD VQQDEw02OTMyNWY1OS1jNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Zu42HpkW1/MOIjhINiEqtPRgmjE9j+4zDoNV2dowIHJCxkJ55FXtpMcTtfX 5tOQlQsJHWbFxryFd8ZHwAfhpYno2Z6fAGO88+a/Wgs9yowGQtibgT9HHvlBEqRo r830yHrG3fBPqt8KgHCHvcJJxqmSfooJEWn2Z6OxweSGositLaFtXPk8JDOIwE3b F7zQK6oGW6skQSZPpC2Tpfc6ra6lY5P9zmSHrTTu5K/jv9Yr8sfiIQxqjLdb1YnU V34FojjCdi24iuSXVtvxpgoSoZWaQqZRsX3TWqWUdEv10Pm7IqvggYr2TgU+rtl4 aMw1oFkXH+Rzmkes8fLutokhbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF56axMx cvlTsVZvFpyjw8/AQbg1MB8GA1UdIwQYMBaAFBTVrScirKhq008PmjRHJstmmAgx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEI4Ni85MzA2QTJDNEY3 RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9GTld0SnlLc3FHclRUdy1hTkVjbXkyYVlD REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZOV3RKeUtzcUdyVFR3LWFORWNteTJhWUNERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEI4Ni85MzA2QTJDNEY3RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9GTld0SnlLc3FH clRUdy1hTkVjbXkyYVlDREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkgQ/pZjH1KV+MJ7tqjHHEPOeTa8CGYWtaPj1f8xffbLbvNQu7R4SH 8aQbj6qSr+lrBmUMaTgBvQBPp1ur/mUrE8zKzkJpiX6JsfM4ebY7w0XJAKKjJkLy uxk+mRUn4l/2PIcu9dF3pPXfmSfzM0+rNpofCn6vresXD3qwSzH9d3FspQnOhM6+ SujAyuSZnvnJVp4JHPWM4KB2kr199/UOYQodVqs9/bdtMh8j0Ti/jccaP8Oxlbzb pQ9jXI8X5swCmE/oToKXdNZKkxMtEHpqjD5fEXuXmutJxylrohD9gIDYF8nf0GLX Rg/hwgqAIVdbBCSfGsy9W+XC+4O2HsbW -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:23 2025 by rpki-client