This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft File: FyftFR9AiSEOw-Nopaae45SE4-Y.mft (raw, json) Hash identifier: fdoPmwrx1h6UD3MKjq2hFXQNNW8mjRgeAA0nLKVPBGg= Subject key identifier: 7B:31:B1:50:E5:8C:CA:24:D6:84:CE:D5:EA:36:F1:D3:C2:FD:87:71 Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 Certificate issuer: /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft Manifest number: 0101 Signing time: Wed 03 Dec 2025 03:31:11 +0000 Manifest this update: Wed 03 Dec 2025 03:31:10 +0000 Manifest next update: Wed 10 Dec 2025 03:31:10 +0000 Files and hashes: 1: FyftFR9AiSEOw-Nopaae45SE4-Y.crl (hash: ktRUxAtA35bgJ61VuZe2+psaiD+ldHM853hkRPDrVkU=) 2: F149E6BE45B611EFA10B0632C4F9AE02.roa (hash: oxyCeNFM/JV3FlgREEjrGNxGIzoK5Vk5MzO+fwua+7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B5E, serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Validity Not Before: Dec 3 03:31:10 2025 GMT Not After : Dec 10 03:31:10 2025 GMT Subject: CN=692faefe-0301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:fe:3c:44:ee:a5:fa:af:d2:d6:cc:a5:7c: ea:5d:a5:7d:f0:f3:3b:ee:02:cd:a2:9b:56:75:1d: ee:e2:b0:23:2b:2e:87:40:cc:6a:be:31:63:61:5e: e4:5d:a9:c1:db:02:07:ff:e1:8b:54:65:64:5b:95: c1:f2:68:0c:ee:24:87:ee:4a:35:43:38:b0:f7:8f: a7:5c:57:4d:07:e7:39:6d:95:71:70:2c:94:ee:28: ac:a9:a8:59:d1:ed:f6:21:98:23:1c:7b:66:f4:24: 79:1b:03:92:ad:12:d8:42:eb:73:07:35:b6:cf:14: 7b:40:6f:4f:7b:16:c9:f0:85:e8:84:9a:9a:17:d5: 1d:e5:c3:88:17:a6:e8:14:8b:d1:2e:e3:7d:88:09: c1:d0:ac:dd:42:4a:27:d5:d9:ec:c6:3c:82:4c:8e: 6e:8f:ac:a6:8b:11:3f:e3:74:95:e7:5c:f4:a5:84: 32:76:d9:c1:61:dd:0b:dc:2a:5b:33:7e:0b:d5:7c: 58:75:7e:1b:ff:f6:9b:7c:f6:51:da:f3:0f:2a:67: 72:21:af:89:46:14:57:0d:06:94:f8:de:05:ec:10: 21:b8:68:59:db:da:9b:51:30:e3:d5:58:69:26:cb: a5:5f:7c:5f:ea:63:26:3e:4f:f9:80:8a:4b:4b:89: 5e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:31:B1:50:E5:8C:CA:24:D6:84:CE:D5:EA:36:F1:D3:C2:FD:87:71 X509v3 Authority Key Identifier: keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:47:f8:8d:96:98:67:9b:a8:14:25:27:8d:43:b1:76:35:dd: 47:a1:ca:65:9e:78:75:6f:a9:b2:d7:31:87:df:43:a8:53:dd: dd:b6:b7:fa:a2:36:9a:af:e4:bf:23:1f:63:2e:b5:fe:cf:c5: bf:f5:66:33:63:e4:88:e6:65:eb:a7:69:9a:2f:45:09:fa:7e: b7:43:e8:f5:45:4e:98:87:53:ea:8f:00:06:f4:68:73:d8:6d: 1e:7a:df:93:f7:ec:ab:12:9c:18:3d:d8:da:0f:51:15:e4:fa: 7e:f4:88:38:a9:8f:b9:b0:44:1c:fe:49:18:51:85:4f:24:ab: 8d:2c:f4:9c:a5:c5:ec:42:cc:57:c6:3c:a3:d2:cf:15:0b:58: 97:eb:68:6d:1b:17:fc:6c:e0:74:1c:22:dd:58:28:17:bd:c1: 25:af:15:ca:ae:a5:b6:d4:7e:81:65:d9:87:f4:32:69:2c:66: d8:c8:7f:32:e1:29:43:97:b3:bb:50:fc:e3:4e:f1:fc:cf:d8: 58:ee:02:de:75:3a:66:1a:a1:3d:8c:39:2d:06:46:44:3e:8b: 62:5e:ff:5b:94:0f:27:4f:41:a8:68:fe:fd:4b:b6:5f:94:eb: 4b:8c:6a:04:af:db:bb:b8:4c:d9:60:b7:0f:db:0c:1f:c6:13: ca:c5:9a:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCNUUxMTAvBgNVBAUTKDE3MjdFRDE1MUY0MDg5MjEwRUMzRTM2OEE1QTY5RUUz OTQ4NEUzRTYwHhcNMjUxMjAzMDMzMTEwWhcNMjUxMjEwMDMzMTEwWjAYMRYwFAYD VQQDEw02OTJmYWVmZS0wMzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwj+PETupfqv0tbMpXzqXaV98PM77gLNoptWdR3u4rAjKy6HQMxqvjFjYV7k XanB2wIH/+GLVGVkW5XB8mgM7iSH7ko1Qziw94+nXFdNB+c5bZVxcCyU7iisqahZ 0e32IZgjHHtm9CR5GwOSrRLYQutzBzW2zxR7QG9PexbJ8IXohJqaF9Ud5cOIF6bo FIvRLuN9iAnB0KzdQkon1dnsxjyCTI5uj6ymixE/43SV51z0pYQydtnBYd0L3Cpb M34L1XxYdX4b//abfPZR2vMPKmdyIa+JRhRXDQaU+N4F7BAhuGhZ29qbUTDj1Vhp JsulX3xf6mMmPk/5gIpLS4leNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsxsVDl jMok1oTO1eo28dPC/YdxMB8GA1UdIwQYMBaAFBcn7RUfQIkhDsPjaKWmnuOUhOPm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUI1RS83REQ3QkJCQzQ1 QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9GeWZ0RlI5QWlTRU93LU5vcGFhZTQ1U0U0 LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Z5ZnRGUjlBaVNFT3ctTm9wYWFlNDVTRTQtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUI1RS83REQ3QkJCQzQ1QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9GeWZ0RlI5QWlT RU93LU5vcGFhZTQ1U0U0LVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwR/iNlphnm6gUJSeNQ7F2Nd1Hocplnnh1b6my1zGH30OoU93dtrf6 ojaar+S/Ix9jLrX+z8W/9WYzY+SI5mXrp2maL0UJ+n63Q+j1RU6Yh1PqjwAG9Ghz 2G0eet+T9+yrEpwYPdjaD1EV5Pp+9Ig4qY+5sEQc/kkYUYVPJKuNLPScpcXsQsxX xjyj0s8VC1iX62htGxf8bOB0HCLdWCgXvcElrxXKrqW21H6BZdmH9DJpLGbYyH8y 4SlDl7O7UPzjTvH8z9hY7gLedTpmGqE9jDktBkZEPotiXv9blA8nT0GoaP79S7Zf lOtLjGoEr9u7uEzZYLcP2wwfxhPKxZqA -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:38 2025 by rpki-client