This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json) Hash identifier: zbPdy6g4PX4ZM+tM/tbi/h5OgVMYpiD4/fkpPXBYqrw= Subject key identifier: 35:53:4D:58:F4:A3:F3:54:9F:FC:43:07:F8:D9:9A:48:03:2A:C5:1D Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 08F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft Manifest number: 08EC Signing time: Mon 22 Dec 2025 19:44:09 +0000 Manifest this update: Mon 22 Dec 2025 19:44:08 +0000 Manifest next update: Mon 29 Dec 2025 19:44:08 +0000 Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: kVxcoMMAJ5tL2fjhKyjT34uv8CX3HZtIzOjExoJI2q0=) 2: F902E016BFED11EABE972E5AC4F9AE02.roa (hash: Te4pe39x+PJOiuAURDPZwLT95T5tpG83Z202ebgxGsE=) 3: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: ltvBn5VJXtz7vFB4RWKdDxpG2I+f/J+ryir96EuYqEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2296 (0x8f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: Dec 22 19:44:08 2025 GMT Not After : Dec 29 19:44:08 2025 GMT Subject: CN=69499f89-5192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b1:d6:64:40:ff:f6:58:f0:99:d9:0e:4c:db: c7:6d:d5:8a:eb:52:3a:7e:cc:5b:98:b9:0a:8f:58: 26:4e:fe:07:39:f0:27:ae:d4:d7:ea:dd:e3:aa:3c: 65:ed:72:06:a9:cf:67:85:23:4e:68:8d:ea:12:7b: ce:c1:e7:cb:69:d4:2e:6c:c9:c0:ee:89:15:f5:e5: 79:bc:41:7d:13:d7:18:3c:17:72:95:c1:67:83:c9: 47:c6:7f:1f:93:7a:07:6b:9a:f5:d8:dc:ed:94:42: 53:91:82:72:a1:ff:9e:c0:0e:f7:6e:8f:b0:2d:dc: 63:16:19:2e:5b:cd:17:cd:2e:26:26:93:08:b2:d5: b3:b7:06:76:6f:05:f4:31:36:36:c2:6b:0a:58:ac: 5b:02:ba:d1:e8:be:09:1a:20:d1:a8:ed:d9:77:68: 5c:bb:95:c4:ee:21:83:71:3b:e9:37:8a:5d:02:b5: b8:ca:f3:b9:90:38:c1:31:c8:a9:1c:43:b8:85:48: 7a:df:a3:b3:81:b9:f3:8e:1d:50:6c:c1:d6:85:3d: 2f:cf:f1:76:43:5d:0a:e2:85:7e:73:56:8f:f3:85: 71:76:4c:04:41:e0:b8:74:f2:67:48:61:b0:0c:9f: 72:c8:5c:94:ab:c9:1b:d6:07:77:d2:78:27:a6:72: 49:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:53:4D:58:F4:A3:F3:54:9F:FC:43:07:F8:D9:9A:48:03:2A:C5:1D X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:ca:bd:96:31:3a:ed:5a:2e:ba:4b:2c:5e:41:fd:bc:cc:46: 55:69:71:d0:e3:3e:40:ea:a8:c4:5a:e6:cd:70:01:eb:1b:db: 3b:bb:c1:ef:22:7b:57:5d:94:3e:c5:3d:6b:de:1d:f8:0e:11: 9c:49:16:a2:80:07:fd:68:86:e4:34:c3:df:4b:d0:c8:2c:d3: 6f:6f:c7:e7:b7:4d:3b:60:cd:b2:43:65:76:fa:fd:9f:fc:26: f9:d5:d2:fd:fe:d7:2b:ae:12:77:95:de:b4:cf:3a:44:62:91: 6a:2e:d2:34:d6:98:68:87:08:ae:29:bd:aa:df:ea:c5:09:82: 3b:82:39:82:8a:ee:6c:78:fb:85:4a:75:37:ef:e9:f5:bb:d7: 74:06:d4:72:62:83:c3:4d:e9:22:1e:aa:b8:ac:5f:43:88:a3: 7b:a1:d5:13:39:95:0c:ce:ae:c9:e4:da:6a:64:93:51:83:38: df:1b:9f:39:e0:b7:e3:d6:ba:f5:bf:f2:65:b8:86:f1:3e:d1: 49:38:ea:c8:3f:2b:f1:43:14:d1:a0:18:ff:b6:9e:4b:4a:85: 43:da:63:3c:a6:f2:28:00:21:37:d6:2a:e6:74:95:11:b0:e4: f1:50:f8:f3:76:7f:c6:d2:17:1f:f5:da:14:72:37:39:90:88: 4e:0b:e5:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjUxMjIyMTk0NDA4WhcNMjUxMjI5MTk0NDA4WjAYMRYwFAYD VQQDDA02OTQ5OWY4OS01MTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rHWZED/9ljwmdkOTNvHbdWK61I6fsxbmLkKj1gmTv4HOfAnrtTX6t3jqjxl 7XIGqc9nhSNOaI3qEnvOwefLadQubMnA7okV9eV5vEF9E9cYPBdylcFng8lHxn8f k3oHa5r12NztlEJTkYJyof+ewA73bo+wLdxjFhkuW80XzS4mJpMIstWztwZ2bwX0 MTY2wmsKWKxbArrR6L4JGiDRqO3Zd2hcu5XE7iGDcTvpN4pdArW4yvO5kDjBMcip HEO4hUh636Ozgbnzjh1QbMHWhT0vz/F2Q10K4oV+c1aP84VxdkwEQeC4dPJnSGGw DJ9yyFyUq8kb1gd30ngnpnJJdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVTTVj0 o/NUn/xDB/jZmkgDKsUdMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3yr2WMTrtWi66SyxeQf28zEZVaXHQ4z5A6qjEWubNcAHrG9s7u8Hv IntXXZQ+xT1r3h34DhGcSRaigAf9aIbkNMPfS9DILNNvb8fnt007YM2yQ2V2+v2f /Cb51dL9/tcrrhJ3ld60zzpEYpFqLtI01phohwiuKb2q3+rFCYI7gjmCiu5sePuF SnU37+n1u9d0BtRyYoPDTekiHqq4rF9DiKN7odUTOZUMzq7J5NpqZJNRgzjfG585 4Lfj1rr1v/JluIbxPtFJOOrIPyvxQxTRoBj/tp5LSoVD2mM8pvIoACE31irmdJUR sOTxUPjzdn/G0hcf9doUcjc5kIhOC+Xv -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:57 2025 by rpki-client