This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json) Hash identifier: AwIBGh0om1Kp4TMtA3TluRhs0JiZnz8SKgk/7dWZDCA= Subject key identifier: 30:CE:FC:25:C2:7A:67:77:00:DF:72:7C:9D:CA:47:8D:32:E9:22:63 Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft Manifest number: 019B Signing time: Sun 21 Dec 2025 02:38:21 +0000 Manifest this update: Sun 21 Dec 2025 02:38:20 +0000 Manifest next update: Sun 28 Dec 2025 02:38:20 +0000 Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: oRMxmkRWoob/O6AKtsyid2olGh+/lPcrr6yfYNYF5kY=) 2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: SLZLEvFIQqMp4oAp0p1ONi54RA8FIOFPctbNnoAuAEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Validity Not Before: Dec 21 02:38:20 2025 GMT Not After : Dec 28 02:38:20 2025 GMT Subject: CN=69475d9d-9218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:3c:8c:90:16:4f:ab:76:a2:04:6c:50:79: 44:2d:d8:f4:02:c3:14:66:32:b7:f0:9a:ec:75:65: c6:85:31:0f:ab:3c:19:a1:f0:42:bc:a6:39:06:8b: 2f:10:df:d0:38:0e:61:8a:1e:f2:e8:1c:e6:32:1a: 00:3c:32:1e:ea:53:2c:62:e3:47:1f:dd:68:34:15: 2b:0c:46:b0:16:df:12:7a:bc:26:61:90:8f:0a:b4: 02:f6:2d:cf:d2:9d:52:76:c4:42:ae:c0:f5:94:fd: f7:3d:1b:53:b3:39:a9:83:32:65:b5:bb:aa:1e:b6: 0c:28:f9:b5:e9:0e:d7:aa:7f:c7:db:dc:c7:8a:ca: 3d:c4:5a:ad:f7:92:0a:7a:4d:a4:04:9b:ef:17:36: 2c:fb:b4:3f:01:52:ea:87:c5:52:c6:79:3f:b7:c8: 49:e2:7e:15:c3:de:f7:20:86:b7:a8:c9:28:4a:47: dc:ea:ec:9b:51:3f:2c:b4:9f:86:d2:67:86:29:bf: 56:28:10:c5:4f:0e:53:c0:8c:56:0b:ec:a2:df:ef: 82:d7:77:88:76:46:0b:92:64:74:dd:6d:d1:98:50: 28:64:6b:33:ca:85:af:e2:ce:c8:57:05:90:c7:1e: 9c:5c:1e:b9:99:8d:7c:ad:76:7a:5f:02:48:6e:fa: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CE:FC:25:C2:7A:67:77:00:DF:72:7C:9D:CA:47:8D:32:E9:22:63 X509v3 Authority Key Identifier: keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:68:52:18:c2:a7:cd:a5:1d:23:02:79:af:ae:13:39:55:10: 5e:db:99:f7:0b:94:ec:db:33:e4:fc:33:49:03:2f:31:9e:19: b3:a3:f0:3b:22:dd:af:d9:c3:5b:c2:ab:80:dc:b9:b4:34:15: 88:85:33:12:f8:5a:fb:ff:4c:39:b1:2c:99:10:57:b0:fd:ac: a7:16:5c:82:c7:3d:b3:a8:45:ca:d3:99:b7:39:55:20:44:93: 7d:ae:64:25:a6:c9:e6:f7:c7:53:34:3c:43:37:6e:ae:5f:ce: 18:46:f9:c1:09:cb:51:17:30:70:f4:dc:f6:14:d3:45:b6:ec: 28:f2:93:80:c0:74:ee:31:2a:f4:4a:8c:c1:e8:15:48:db:e1: 57:87:ce:6b:49:6b:ad:02:26:c1:57:c4:d2:16:61:7b:3c:34: 33:65:6c:f9:b3:6b:e8:42:66:91:89:8d:0d:4a:54:42:3f:d6: 1d:bd:32:42:a5:db:c3:48:fe:7b:ce:17:ff:e7:dc:77:27:75: 6c:2f:fb:ab:26:5e:78:ee:3d:11:71:f6:74:ac:cc:cf:c4:17: aa:2b:56:77:06:04:e0:d4:df:f4:77:bf:e7:79:17:41:0d:7f: 8f:85:0c:85:bc:a9:20:75:a6:cc:8b:7a:14:ef:55:68:5e:dc: 0e:73:18:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDgwQjIxMTAvBgNVBAUTKDE1N0REQjMyM0QzNjUzNTA0RTMwODI0RTY5RTBEQjAz NzUzQTY4Q0UwHhcNMjUxMjIxMDIzODIwWhcNMjUxMjI4MDIzODIwWjAYMRYwFAYD VQQDDA02OTQ3NWQ5ZC05MjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWw8jJAWT6t2ogRsUHlELdj0AsMUZjK38JrsdWXGhTEPqzwZofBCvKY5Bosv EN/QOA5hih7y6BzmMhoAPDIe6lMsYuNHH91oNBUrDEawFt8SerwmYZCPCrQC9i3P 0p1SdsRCrsD1lP33PRtTszmpgzJltbuqHrYMKPm16Q7Xqn/H29zHiso9xFqt95IK ek2kBJvvFzYs+7Q/AVLqh8VSxnk/t8hJ4n4Vw973IIa3qMkoSkfc6uybUT8stJ+G 0meGKb9WKBDFTw5TwIxWC+yi3++C13eIdkYLkmR03W3RmFAoZGszyoWv4s7IVwWQ xx6cXB65mY18rXZ6XwJIbvqLiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDO/CXC emd3AN9yfJ3KR40y6SJjMB8GA1UdIwQYMBaAFBV92zI9NlNQTjCCTmng2wN1OmjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODBCMi80MUNCQjY0RTY4 RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUxQk9NSUpPYWVEYkEzVTZh TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYM2JNajAyVTFCT01JSk9hZURiQTNVNmFNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODBCMi80MUNCQjY0RTY4RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUx Qk9NSUpPYWVEYkEzVTZhTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCaFIYwqfNpR0jAnmvrhM5VRBe25n3C5Ts2zPk/DNJAy8xnhmzo/A7 It2v2cNbwquA3Lm0NBWIhTMS+Fr7/0w5sSyZEFew/aynFlyCxz2zqEXK05m3OVUg RJN9rmQlpsnm98dTNDxDN26uX84YRvnBCctRFzBw9Nz2FNNFtuwo8pOAwHTuMSr0 SozB6BVI2+FXh85rSWutAibBV8TSFmF7PDQzZWz5s2voQmaRiY0NSlRCP9YdvTJC pdvDSP57zhf/59x3J3VsL/urJl547j0RcfZ0rMzPxBeqK1Z3BgTg1N/0d7/neRdB DX+PhQyFvKkgdabMi3oU71VoXtwOcxii -----END CERTIFICATE-----Generated at Sun Dec 21 21:15:09 2025 by rpki-client