This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft File: Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json) Hash identifier: AC8w1LSs4toIhwirJdqKMTcto+hG0x3C9OSHAAVJtJ4= Subject key identifier: 14:5B:CA:22:AC:00:F3:6D:1C:18:A3:81:35:1A:B0:50:9E:62:2E:8E Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18 Certificate issuer: /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft Manifest number: 01D1 Signing time: Tue 23 Dec 2025 01:55:31 +0000 Manifest this update: Tue 23 Dec 2025 01:55:31 +0000 Manifest next update: Tue 30 Dec 2025 01:55:31 +0000 Files and hashes: 1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: PmF6jJoE68YSJw0l7a/yFKcJBuwwL3xj66+sFRFen4c=) 2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: d9bjtW0ZUYjonxEE3MZfuZxfLKtEPtuzgQGXr7LUJRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718 Validity Not Before: Dec 23 01:55:31 2025 GMT Not After : Dec 30 01:55:31 2025 GMT Subject: CN=6949f693-3b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:22:32:c6:52:64:63:ed:22:8d:70:5c:39:27: b8:62:df:b0:1d:7f:74:8b:c3:e1:22:04:9e:54:f3: 21:53:c7:64:2b:15:36:81:53:4f:b3:4c:3f:b0:f6: 42:f5:a5:f3:3b:9e:83:c3:2b:2e:8c:67:c7:d5:6b: d8:19:b7:57:a7:b4:37:e1:ec:a3:8e:47:0a:e3:4e: 74:68:41:78:e6:0e:bc:c8:dc:a7:33:04:8e:d1:1c: 2f:6c:4e:2b:87:10:6b:bf:6d:2d:00:9e:28:f5:a6: 85:d2:28:9e:94:c1:8f:39:aa:e8:9a:c3:c6:9c:cd: bb:46:86:64:3d:c7:44:0a:13:3f:83:c9:00:62:48: 6c:39:e4:c3:81:e2:b4:e3:d9:5e:23:cd:fe:8c:ca: 42:27:95:2b:f7:11:9a:a5:83:76:fd:6f:59:1b:4e: c9:d5:86:88:41:6b:8b:5c:ce:af:2f:ac:c2:68:e0: 92:dd:19:44:d9:0b:4f:67:02:f4:c1:5d:99:9d:e1: db:63:af:94:91:94:4d:8f:c1:0a:b9:4e:af:a7:41: ad:50:44:a7:79:db:e2:21:a5:7e:fd:ec:a8:98:22: e7:89:41:a2:2e:b7:2f:07:30:ac:10:c7:dc:f6:13: 50:f0:aa:97:e0:12:2f:08:85:cf:02:2c:73:94:62: f6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5B:CA:22:AC:00:F3:6D:1C:18:A3:81:35:1A:B0:50:9E:62:2E:8E X509v3 Authority Key Identifier: keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:a6:f3:1b:b8:b0:18:4a:a4:f2:f4:69:bc:f3:9a:02:a3:2e: 38:cf:d5:7e:f7:b4:f7:3a:0a:4c:db:d7:92:73:0e:60:5e:c9: f4:4e:8d:47:04:9b:76:10:2f:fb:bb:70:73:58:c0:ca:62:89: 8a:06:64:b5:e0:39:76:8d:26:ea:84:8f:e1:83:24:a3:10:97: cc:30:e6:1a:44:04:ab:b9:bc:3f:20:ee:36:7a:8c:d5:b3:e1: cd:20:b5:7e:41:28:b6:77:98:4e:3c:06:b2:ce:09:6a:25:8a: 0e:4d:e8:b0:98:0e:2f:37:42:e7:32:a9:9a:69:1a:6d:03:18: b5:1d:19:94:4a:6e:93:33:17:6f:be:e5:56:ac:43:c4:51:09: 9b:46:44:2a:de:39:e6:c0:0e:53:e3:bc:d8:c3:06:cb:ec:2f: 99:aa:3d:b9:45:91:36:7d:ad:d3:c6:17:46:25:ed:b4:f4:b4: 50:59:6a:2d:74:9d:8f:c6:83:7e:b4:3d:90:f5:86:93:cf:f1: f3:7e:98:d0:d6:6b:b3:e1:da:42:04:b8:62:43:09:1e:94:f0: ef:55:86:1e:2a:4e:eb:11:56:06:bd:04:05:b2:46:2e:14:46: dd:6a:0d:5e:cf:83:3a:59:2c:56:bf:49:91:1b:98:a4:29:fc: 34:04:e5:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk1QjYxMTAvBgNVBAUTKDE2MEUwMDAxNUQyQjU4MTUzRjM0ODJFOERFOTQ3QjVG NEFENzg3MTgwHhcNMjUxMjIzMDE1NTMxWhcNMjUxMjMwMDE1NTMxWjAYMRYwFAYD VQQDDA02OTQ5ZjY5My0zYjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yIyxlJkY+0ijXBcOSe4Yt+wHX90i8PhIgSeVPMhU8dkKxU2gVNPs0w/sPZC 9aXzO56DwysujGfH1WvYGbdXp7Q34eyjjkcK4050aEF45g68yNynMwSO0RwvbE4r hxBrv20tAJ4o9aaF0iielMGPOaromsPGnM27RoZkPcdEChM/g8kAYkhsOeTDgeK0 49leI83+jMpCJ5Ur9xGapYN2/W9ZG07J1YaIQWuLXM6vL6zCaOCS3RlE2QtPZwL0 wV2ZneHbY6+UkZRNj8EKuU6vp0GtUESnedviIaV+/eyomCLniUGiLrcvBzCsEMfc 9hNQ8KqX4BIvCIXPAixzlGL2DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRbyiKs APNtHBijgTUasFCeYi6OMB8GA1UdIwQYMBaAFBYOAAFdK1gVPzSC6N6Ue19K14cY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTVCNi9GMDczMEM4ODIx NjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldCVV9OSUxvM3BSN1gwclho eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnNEFBVjByV0JVX05JTG8zcFI3WDByWGh4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTVCNi9GMDczMEM4ODIxNjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldC VV9OSUxvM3BSN1gwclhoeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDpvMbuLAYSqTy9Gm885oCoy44z9V+97T3OgpM29eScw5gXsn0To1H BJt2EC/7u3BzWMDKYomKBmS14Dl2jSbqhI/hgySjEJfMMOYaRASrubw/IO42eozV s+HNILV+QSi2d5hOPAayzglqJYoOTeiwmA4vN0LnMqmaaRptAxi1HRmUSm6TMxdv vuVWrEPEUQmbRkQq3jnmwA5T47zYwwbL7C+Zqj25RZE2fa3TxhdGJe209LRQWWot dJ2PxoN+tD2Q9YaTz/HzfpjQ1muz4dpCBLhiQwkelPDvVYYeKk7rEVYGvQQFskYu FEbdag1ez4M6WSxWv0mRG5ikKfw0BOXu -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:30 2025 by rpki-client