This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft File: Fp97ebHLC9YNnChOysqKz1dZgFE.mft (raw, json) Hash identifier: EgrX6kYtab9IRq9hc0S+32391rYe4mRC/avI49K6u2c= Subject key identifier: 48:51:BD:29:79:3C:DB:91:90:9D:4A:C1:D2:3B:DD:73:7B:15:EC:A8 Authority key identifier: 16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51 Certificate issuer: /CN=A9137627/serialNumber=169F7B79B1CB0BD60D9C284ECACA8ACF57598051 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft Manifest number: CD Signing time: Tue 23 Dec 2025 04:45:10 +0000 Manifest this update: Tue 23 Dec 2025 04:45:10 +0000 Manifest next update: Tue 30 Dec 2025 04:45:10 +0000 Files and hashes: 1: Fp97ebHLC9YNnChOysqKz1dZgFE.crl (hash: Ba5a2eJ8KidsKtJhXgZgPnohWVGWcdp8XOBYD6PgO54=) 2: 3C249D62A89211EF881C732EC4F9AE02.roa (hash: 16sFKWaBVI982QZ/6/KmLXMiB3r2iqeJrJq3Bgjp0jI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.crl rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137627, serialNumber=169F7B79B1CB0BD60D9C284ECACA8ACF57598051 Validity Not Before: Dec 23 04:45:10 2025 GMT Not After : Dec 30 04:45:10 2025 GMT Subject: CN=694a1e56-807c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3e:0d:7a:d8:fc:7b:08:0b:4c:8e:2e:91:b5: 13:53:e4:94:a2:90:6a:50:ff:7d:e0:98:86:45:fd: 70:cb:8f:f4:3d:c9:ff:e6:b0:ad:24:d4:1f:71:e3: 64:50:98:24:31:28:6a:1b:4e:c1:d2:18:47:a5:c2: 32:11:47:98:4d:83:da:b2:b6:b2:1f:af:a2:ba:fb: 02:dc:f0:ee:3c:8c:b6:cf:61:56:e3:fe:7c:c9:ee: bb:ed:71:9e:dc:90:61:59:4f:c4:79:02:2b:f1:41: 68:33:b1:08:cc:46:f6:f7:f1:15:5c:61:ab:a1:6d: 40:0d:c5:82:ea:9b:d2:fb:4c:d5:1e:46:7e:34:c4: a2:70:02:67:79:6c:72:b9:c4:86:c1:19:9d:98:3b: 7b:8f:b2:7c:4b:b0:e2:15:a9:89:9b:92:da:d4:84: d6:fc:d0:e9:b2:d8:27:d2:a0:3a:cd:cc:d0:4b:1b: 43:4e:e7:ff:57:c2:c7:8b:8b:5f:a8:92:6b:f4:10: d7:0c:c0:59:ad:96:2b:6d:fc:61:aa:35:48:38:16: 79:00:70:82:cf:26:cd:a5:1b:9b:70:2d:ed:c6:54: 27:25:de:4a:ae:0a:ee:81:61:fa:d1:bc:69:ca:ae: 93:33:08:78:6b:71:34:45:a5:c2:2e:4f:11:55:7c: 7a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:51:BD:29:79:3C:DB:91:90:9D:4A:C1:D2:3B:DD:73:7B:15:EC:A8 X509v3 Authority Key Identifier: keyid:16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d0:42:1a:e5:d7:99:40:04:b8:f0:34:a1:47:f3:ac:1e:24: 69:bb:c8:f3:95:30:35:78:10:d8:a0:e6:43:4c:91:90:13:53: 67:3d:ea:b1:04:6f:fc:c1:c8:50:62:20:5e:5d:70:b0:e0:b6: c5:fb:30:cc:19:27:a5:62:52:eb:47:1a:cc:3a:30:0d:fa:7d: b7:2a:b7:c5:c4:35:5b:be:e9:ef:2c:61:c8:8c:47:36:6e:c0: 27:1e:ea:83:87:1c:4a:c8:c6:6f:fb:df:db:fd:f7:4b:8c:fe: 70:0e:1a:eb:50:8e:fc:11:0f:7e:d6:bf:a4:4c:7c:db:b7:32: a5:44:89:b5:d4:c4:ba:5d:9b:30:06:5b:03:9a:39:7f:cb:32: 29:3b:96:7c:16:54:03:fd:1a:51:6d:8e:2f:77:0b:4e:e3:d1: ae:6c:7f:c6:fb:13:3e:c6:ba:a3:26:f8:bc:7c:2b:18:ac:88: 8b:a8:b4:2d:84:ca:73:78:bf:f4:ec:fe:e8:c1:45:d8:6f:ae: c0:0b:85:a6:6e:80:57:a5:d9:49:5e:23:ff:2e:70:97:26:db: 01:ff:f1:11:13:8b:67:a1:aa:dc:a2:3e:ee:7a:2b:84:be:7a: 16:89:18:7a:09:ec:8e:03:73:98:8a:f8:54:b7:f6:ae:39:6d: 0f:8c:04:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2MjcxMTAvBgNVBAUTKDE2OUY3Qjc5QjFDQjBCRDYwRDlDMjg0RUNBQ0E4QUNG NTc1OTgwNTEwHhcNMjUxMjIzMDQ0NTEwWhcNMjUxMjMwMDQ0NTEwWjAYMRYwFAYD VQQDDA02OTRhMWU1Ni04MDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4z4Netj8ewgLTI4ukbUTU+SUopBqUP994JiGRf1wy4/0Pcn/5rCtJNQfceNk UJgkMShqG07B0hhHpcIyEUeYTYPasrayH6+iuvsC3PDuPIy2z2FW4/58ye677XGe 3JBhWU/EeQIr8UFoM7EIzEb29/EVXGGroW1ADcWC6pvS+0zVHkZ+NMSicAJneWxy ucSGwRmdmDt7j7J8S7DiFamJm5La1ITW/NDpstgn0qA6zczQSxtDTuf/V8LHi4tf qJJr9BDXDMBZrZYrbfxhqjVIOBZ5AHCCzybNpRubcC3txlQnJd5KrgrugWH60bxp yq6TMwh4a3E0RaXCLk8RVXx6ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhRvSl5 PNuRkJ1KwdI73XN7FeyoMB8GA1UdIwQYMBaAFBafe3mxywvWDZwoTsrKis9XWYBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzYyNy9ERjgyRjVBRUE4 OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9GcDk3ZWJITEM5WU5uQ2hPeXNxS3oxZFpn RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZwOTdlYkhMQzlZTm5DaE95c3FLejFkWmdGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzYyNy9ERjgyRjVBRUE4OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9GcDk3ZWJITEM5 WU5uQ2hPeXNxS3oxZFpnRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm0EIa5deZQAS48DShR/OsHiRpu8jzlTA1eBDYoOZDTJGQE1NnPeqx BG/8wchQYiBeXXCw4LbF+zDMGSelYlLrRxrMOjAN+n23KrfFxDVbvunvLGHIjEc2 bsAnHuqDhxxKyMZv+9/b/fdLjP5wDhrrUI78EQ9+1r+kTHzbtzKlRIm11MS6XZsw BlsDmjl/yzIpO5Z8FlQD/RpRbY4vdwtO49GubH/G+xM+xrqjJvi8fCsYrIiLqLQt hMpzeL/07P7owUXYb67AC4WmboBXpdlJXiP/LnCXJtsB//ERE4tnoarcoj7ueiuE vnoWiRh6CeyOA3OYivhUt/auOW0PjATF -----END CERTIFICATE-----Generated at Tue Dec 23 12:39:31 2025 by rpki-client