This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft File: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft (raw, json) Hash identifier: vkzo/MCQoUWoMbY6VhDB0UOXIu5o+fRdRj1ruizYCJw= Subject key identifier: 9F:C5:7F:4E:77:E3:75:D3:54:6C:E0:93:25:A5:F2:3D:9E:8B:02:F7 Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB Certificate issuer: /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB Certificate serial: 03A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft Manifest number: 0394 Signing time: Sun 21 Dec 2025 00:02:21 +0000 Manifest this update: Sun 21 Dec 2025 00:02:21 +0000 Manifest next update: Sun 28 Dec 2025 00:02:21 +0000 Files and hashes: 1: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl (hash: lIPDreNHqGuu75bmmyZQCFt03b2OvNuewwo1aRBxCzo=) 2: 245B417CADD411EE95FF6C6DC4F9AE02.roa (hash: bivJnwcabrf/iwZuZLc+oQKC0osH7DqM8uD5h0VU2hw=) 3: 121437B45ABB11EF8C696E58C4F9AE02.roa (hash: Sr1dJPYf4TMlmdyHmkZ3DvPV6/M5+cUFUvIXCjxQ2mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 930 (0x3a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380B5, serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB Validity Not Before: Dec 21 00:02:21 2025 GMT Not After : Dec 28 00:02:21 2025 GMT Subject: CN=6947390d-036b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d8:0b:97:93:a2:e8:2b:25:b7:e2:64:8c:cc: e4:ff:c1:98:1d:b2:37:90:1d:02:08:6b:a5:3d:55: e8:49:95:4e:de:68:f3:86:65:8e:e9:e9:0e:71:e9: 50:3a:d1:bc:61:3c:cc:4a:2a:95:a2:70:db:44:ec: ee:cd:56:32:70:ef:6d:9e:0e:c7:f8:9f:8e:32:95: bd:5d:94:ae:6b:a9:d5:de:a2:77:8a:65:ff:5f:5c: c1:66:49:8b:ad:bf:68:eb:31:7f:28:d0:cc:18:78: 15:9d:6e:4a:54:88:2f:a4:9f:43:5b:07:fc:b2:c0: a2:d5:c6:38:aa:4d:9c:58:97:f1:ca:18:9e:36:eb: 3f:50:39:d5:ee:85:c9:cf:70:72:b6:cc:b3:05:e9: 2e:c7:9f:99:9c:d0:3c:e6:4e:e8:e2:4d:9f:63:0f: 4c:79:e2:7e:bb:54:ce:32:41:0a:ce:44:31:c6:aa: 38:07:3b:9d:f0:32:6a:65:4a:7a:6c:df:9b:f3:21: 41:1d:f1:f0:73:10:8c:b9:c7:c3:18:44:f2:85:eb: b5:92:e0:cd:49:df:38:65:9b:bc:3e:8d:b0:c6:51: f2:c7:88:53:69:98:d5:20:c1:84:6d:3d:5c:6c:de: 77:8f:eb:57:f7:57:00:53:21:97:1d:8d:fa:d5:10: 29:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C5:7F:4E:77:E3:75:D3:54:6C:E0:93:25:A5:F2:3D:9E:8B:02:F7 X509v3 Authority Key Identifier: keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:42:05:48:a4:16:2e:2e:b2:d3:3b:c7:ac:f0:83:fc:64:69: c6:ae:cf:c3:b1:c2:dd:56:b4:37:1a:11:af:a1:b5:f9:0b:09: 49:d6:9d:f8:a5:ee:50:bf:8c:81:f1:a1:ca:d8:63:9b:dd:32: 40:64:c0:ed:02:b9:b7:fe:4d:7e:72:aa:5e:a9:c7:bd:ef:41: d7:56:93:55:04:72:43:f7:dd:14:c1:7f:8f:1e:3f:bf:cc:0e: ec:8d:ac:a0:4b:0f:9a:bc:dd:c5:68:b2:77:aa:2c:04:97:c6: c5:9f:51:4b:87:fd:fd:c7:d1:a7:44:1c:cf:01:8c:8e:38:cd: 33:fc:01:86:8d:d3:85:36:74:fa:36:c5:fc:bd:e0:71:68:d1: d0:1c:f2:52:2d:ec:5b:48:b3:d7:1d:84:85:86:24:ee:6d:0b: ff:e7:81:4d:3a:d1:2f:1f:5c:0d:0d:53:86:5e:f7:dc:1f:e4: a8:5b:5a:c2:35:cc:10:03:1c:eb:03:ed:f2:a2:76:6b:ea:5e: 8c:1c:2a:e8:36:a9:7e:ee:f8:e0:02:7b:38:0a:9f:ea:94:86: e6:4e:fb:00:19:94:73:7e:18:7b:83:d2:d1:2e:55:cf:d0:a2: 87:6f:f0:3c:8a:78:9e:9b:93:25:f4:dd:0f:5a:0f:fa:7c:2d: 67:79:9c:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwQjUxMTAvBgNVBAUTKDdFNjVDNThGQTM0M0ExMEM1MzQzNTBBQjQ5N0ZEMDkw Q0VFRkJGQkIwHhcNMjUxMjIxMDAwMjIxWhcNMjUxMjI4MDAwMjIxWjAYMRYwFAYD VQQDDA02OTQ3MzkwZC0wMzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztgLl5Oi6Cslt+JkjMzk/8GYHbI3kB0CCGulPVXoSZVO3mjzhmWO6ekOcelQ OtG8YTzMSiqVonDbROzuzVYycO9tng7H+J+OMpW9XZSua6nV3qJ3imX/X1zBZkmL rb9o6zF/KNDMGHgVnW5KVIgvpJ9DWwf8ssCi1cY4qk2cWJfxyhieNus/UDnV7oXJ z3BytsyzBekux5+ZnNA85k7o4k2fYw9MeeJ+u1TOMkEKzkQxxqo4Bzud8DJqZUp6 bN+b8yFBHfHwcxCMucfDGETyheu1kuDNSd84ZZu8Po2wxlHyx4hTaZjVIMGEbT1c bN53j+tX91cAUyGXHY361RAp9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/Ff053 43XTVGzgkyWl8j2eiwL3MB8GA1UdIwQYMBaAFH5lxY+jQ6EMU0NQq0l/0JDO77+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBCNS82OTQ2M0QwNENB M0QxMUVDOTFBQzQyNkRDNEY5QUUwMi9mbVhGajZORG9ReFRRMUNyU1hfUWtNN3Z2 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZtWEZqNk5Eb1F4VFExQ3JTWF9Ra003dnY3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODBCNS82OTQ2M0QwNENBM0QxMUVDOTFBQzQyNkRDNEY5QUUwMi9mbVhGajZORG9R eFRRMUNyU1hfUWtNN3Z2N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2QgVIpBYuLrLTO8es8IP8ZGnGrs/DscLdVrQ3GhGvobX5CwlJ1p34 pe5Qv4yB8aHK2GOb3TJAZMDtArm3/k1+cqpeqce970HXVpNVBHJD990UwX+PHj+/ zA7sjaygSw+avN3FaLJ3qiwEl8bFn1FLh/39x9GnRBzPAYyOOM0z/AGGjdOFNnT6 NsX8veBxaNHQHPJSLexbSLPXHYSFhiTubQv/54FNOtEvH1wNDVOGXvfcH+SoW1rC NcwQAxzrA+3yonZr6l6MHCroNql+7vjgAns4Cp/qlIbmTvsAGZRzfhh7g9LRLlXP 0KKHb/A8iniem5Ml9N0PWg/6fC1neZxz -----END CERTIFICATE-----Generated at Mon Dec 22 02:19:49 2025 by rpki-client