This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft File: FxesrAU_Ex4iYUUnNlE-To9ibNs.mft (raw, json) Hash identifier: pXmxe1SRr5+R60GoN5Al7PaOuS7CpI2ibhRe9fXLOGU= Subject key identifier: 7C:52:43:20:42:BF:04:FF:52:F5:7C:9B:E9:2D:0C:CB:10:EF:E3:51 Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB Certificate issuer: /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Certificate serial: 0B39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft Manifest number: 0B21 Signing time: Sat 20 Dec 2025 18:50:37 +0000 Manifest this update: Sat 20 Dec 2025 18:50:36 +0000 Manifest next update: Sat 27 Dec 2025 18:50:36 +0000 Files and hashes: 1: FxesrAU_Ex4iYUUnNlE-To9ibNs.crl (hash: 2TxOAyFiz+ScM/loB029405k56492IUliaSuL9DMHhQ=) 2: 090D807E05F511EEBB8E1062C4F9AE02.roa (hash: UOh7++5vEfWh4Ro/LeqzWIUlR0tMNgzC3QTRX96GET8=) 3: 0878844205F511EEBB8E1062C4F9AE02.roa (hash: /6Err68K4WtTvTK2vN0EmkYV4fAmF1HeKbI8wzMjgSU=) 4: 13321D24572211EA88CE445FC4F9AE02.roa (hash: O5ljMaLXjT5F5QYrN31gp31zcfvR+zM4AIkQWAKZEY4=) 5: 618A7D781F7111F09D1AC487C4F9AE02.roa (hash: dKwlV0sWG4z1v1VE3IcZIKnEPq5EIzoE6Vqo7I/hzas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2873 (0xb39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912986D, serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Validity Not Before: Dec 20 18:50:36 2025 GMT Not After : Dec 27 18:50:36 2025 GMT Subject: CN=6946effc-7cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:08:5d:9c:44:da:8f:a9:17:0d:a7:5a:4f:3c: 21:7c:f7:03:12:7e:0f:1e:32:54:a5:be:3b:3c:ab: 6e:8d:2d:06:3d:64:06:8d:ea:23:d6:a3:0d:af:09: 9e:4c:02:18:0e:23:e1:9c:21:82:d2:c9:93:d0:6f: e3:24:00:0b:a5:79:aa:06:53:db:5c:8d:2c:aa:79: 5d:65:c6:e3:5e:62:f2:c6:0c:14:c0:7d:02:87:c3: 50:d0:8f:9e:9e:97:02:7a:39:a6:b5:6e:22:72:8c: 96:da:e9:87:ee:62:75:97:8a:04:8d:48:ce:39:f9: 3c:dd:3d:b0:26:bd:d4:c1:7c:8d:20:3d:41:8d:10: cd:6c:0d:5b:b4:82:76:ba:ff:e8:19:b1:56:0b:70: 43:f3:87:ef:67:ee:4f:41:12:fb:c1:87:1d:2b:1c: 56:c2:3f:db:7c:47:5d:77:f3:71:7b:6a:39:42:98: fe:c2:a5:ca:07:68:f4:4d:c0:51:f5:c9:fe:98:83: 60:9a:ee:06:49:28:c3:a4:47:a3:8f:7f:6b:00:e1: fd:35:d4:63:b5:a6:9a:ff:1e:cf:85:a0:f2:b0:08: 9a:e0:a6:28:c5:e4:e7:e2:12:f3:f5:5a:5a:96:7c: 79:14:14:cc:3e:19:6b:d0:b4:52:4c:97:a0:68:aa: 05:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:52:43:20:42:BF:04:FF:52:F5:7C:9B:E9:2D:0C:CB:10:EF:E3:51 X509v3 Authority Key Identifier: keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:4f:8c:e6:af:bd:91:23:53:7a:a6:fe:33:e9:89:9e:15:46: 2d:1c:f9:0f:04:25:52:c6:bc:b0:18:1a:28:fc:04:11:c8:f6: 0e:be:75:23:9f:13:f9:79:a5:c2:50:66:28:04:f7:f5:bf:ca: 89:43:cd:92:ec:80:10:75:96:7c:f7:dd:06:c4:3a:ea:c3:0d: a7:bc:02:b5:52:58:42:52:a3:4a:25:1f:9a:04:8f:12:49:e0: a4:d7:0f:65:e2:46:a6:84:af:3d:c9:db:7e:b3:ab:d5:dd:b4: 96:10:e5:e9:b7:e1:bc:5e:72:60:5a:98:e8:69:da:7c:71:83: 7a:d2:36:6b:96:35:17:41:61:c6:6f:32:60:b5:48:76:e5:58: ae:96:60:c0:87:46:8a:cc:a6:36:eb:a5:af:5d:24:4a:60:f3: 68:6a:b4:ea:e0:77:63:2b:c3:cc:c3:58:12:5e:96:f1:7f:aa: d9:da:ae:e1:df:f7:32:a1:09:fb:2f:b1:62:63:4e:b1:2b:2d: 57:bc:38:16:b0:27:0b:e4:97:e8:5f:4c:c1:a2:38:ed:d6:ff: 69:8c:fc:26:0a:f7:e6:f1:16:aa:e0:65:fa:14:74:c2:ce:59: d8:d5:53:4f:2a:c3:5d:c1:3a:4e:39:97:c8:ab:6e:85:a0:d6: 31:45:f2:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4NkQxMTAvBgNVBAUTKDE3MTdBQ0FDMDUzRjEzMUUyMjYxNDUyNzM2NTEzRTRF OEY2MjZDREIwHhcNMjUxMjIwMTg1MDM2WhcNMjUxMjI3MTg1MDM2WjAYMRYwFAYD VQQDDA02OTQ2ZWZmYy03Y2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkwhdnETaj6kXDadaTzwhfPcDEn4PHjJUpb47PKtujS0GPWQGjeoj1qMNrwme TAIYDiPhnCGC0smT0G/jJAALpXmqBlPbXI0sqnldZcbjXmLyxgwUwH0Ch8NQ0I+e npcCejmmtW4icoyW2umH7mJ1l4oEjUjOOfk83T2wJr3UwXyNID1BjRDNbA1btIJ2 uv/oGbFWC3BD84fvZ+5PQRL7wYcdKxxWwj/bfEddd/Nxe2o5Qpj+wqXKB2j0TcBR 9cn+mINgmu4GSSjDpEejj39rAOH9NdRjtaaa/x7PhaDysAia4KYoxeTn4hLz9Vpa lnx5FBTMPhlr0LRSTJegaKoFkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxSQyBC vwT/UvV8m+ktDMsQ7+NRMB8GA1UdIwQYMBaAFBcXrKwFPxMeImFFJzZRPk6PYmzb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTg2RC9BMDA3NEQxODUz M0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4NGlZVVVuTmxFLVRvOWli TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z4ZXNyQVVfRXg0aVlVVW5ObEUtVG85aWJOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTg2RC9BMDA3NEQxODUzM0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4 NGlZVVVuTmxFLVRvOWliTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTT4zmr72RI1N6pv4z6YmeFUYtHPkPBCVSxrywGBoo/AQRyPYOvnUj nxP5eaXCUGYoBPf1v8qJQ82S7IAQdZZ8990GxDrqww2nvAK1UlhCUqNKJR+aBI8S SeCk1w9l4kamhK89ydt+s6vV3bSWEOXpt+G8XnJgWpjoadp8cYN60jZrljUXQWHG bzJgtUh25ViulmDAh0aKzKY266WvXSRKYPNoarTq4HdjK8PMw1gSXpbxf6rZ2q7h 3/cyoQn7L7FiY06xKy1XvDgWsCcL5JfoX0zBojjt1v9pjPwmCvfm8Raq4GX6FHTC zlnY1VNPKsNdwTpOOZfIq26FoNYxRfJY -----END CERTIFICATE-----Generated at Sun Dec 21 09:34:11 2025 by rpki-client