This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: XBw5eWVTq+907ZCvn7V9hA4dPmZI8UtiBnJRvg5VqCs= Subject key identifier: 4A:C2:74:16:89:7E:D0:5B:5F:F3:0A:5A:4A:C7:B9:E2:84:40:95:CA Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 05BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 058D Signing time: Sat 06 Dec 2025 22:10:54 +0000 Manifest this update: Sat 06 Dec 2025 22:10:54 +0000 Manifest next update: Sat 13 Dec 2025 22:10:54 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: wueb6YjfD0D9+zAjNmFTru7HG7mBgL552sFCGPRlENo=) 2: B589332C498611EF90B46962C4F9AE02.roa (hash: uDyhMVme3VTf+JhXqHqMKucF4UMzPNmrq3U6pJO1VaY=) 3: 06E8BCB4B3F411F0874AC55BC4F9AE02.roa (hash: Vp5etmm0b4cMTiOCVd/ik0duA4OhlC73XZbv5txdzNY=) 4: F6DBFB92B3F311F0929DA35BC4F9AE02.roa (hash: jJDQVt5YG4qUbIQgC7Oi7FePcAVc60C7b8hfBT+zvz4=) 5: 93DAAB4612BA11EF901ACD28C4F9AE02.roa (hash: l7Qd9q+JWXL9sQ4Jr7CNDbb+BXG9V5k2ZQl4V+DIHCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1470 (0x5be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Dec 6 22:10:54 2025 GMT Not After : Dec 13 22:10:54 2025 GMT Subject: CN=6934a9ee-93fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:d9:bc:4b:a0:7a:38:70:68:b9:3b:7e:a7: 90:fd:12:b3:07:1f:a5:ac:c1:d1:b6:cf:03:cf:21: 62:5b:1d:8c:d5:97:98:10:a7:69:63:b6:af:63:17: b8:67:12:6e:5c:52:30:89:2a:e5:f6:05:60:75:2b: 75:5e:2f:02:78:3e:2a:13:4a:18:a0:c5:41:6b:6e: 89:3b:60:91:6e:81:55:a3:3d:c4:e7:7e:2a:6f:96: 60:f4:68:18:4c:c0:07:c5:aa:b5:1e:a5:d4:70:22: 26:c4:e3:96:0d:c2:25:be:50:87:17:e9:a9:cf:83: 5d:7c:f3:5e:ad:70:6f:d6:4b:aa:aa:1b:11:e5:d1: 01:9d:0b:d3:dd:d6:55:40:3f:08:d0:90:68:75:9e: b2:56:45:62:a3:2d:af:ee:f4:1d:7f:91:b9:47:62: 9e:d0:ee:8d:c6:7c:ad:88:f7:ea:57:9b:a9:cf:36: 3f:4a:9b:17:91:2d:bf:5b:53:e2:1b:da:a0:57:8e: 59:7e:84:5d:7e:a4:cc:ca:34:34:5f:88:87:37:4f: cd:7f:14:f6:f3:2b:5b:5b:a6:40:ae:3c:6c:e2:f4: 72:af:84:10:ad:43:a0:36:4a:e0:b1:97:1e:d1:64: 84:c3:4a:33:9b:2e:dc:c3:3b:78:0f:a4:82:75:e8: d8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C2:74:16:89:7E:D0:5B:5F:F3:0A:5A:4A:C7:B9:E2:84:40:95:CA X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:92:67:77:b8:c1:70:c5:e8:fe:d5:4b:7e:74:05:2e:fe:08: e3:13:46:28:31:77:50:93:ce:a7:77:a2:8f:e4:16:2f:0e:47: fe:50:39:ba:7d:b1:b0:82:4e:a5:7b:3c:c5:8c:f7:6d:48:82: d4:73:43:1b:e9:bf:12:ec:7c:ad:2f:98:ee:ea:94:47:93:d0: 3c:3a:9b:e1:e1:7c:6d:78:3e:c3:1a:64:35:70:69:e0:c5:93: 29:14:e1:76:7b:18:a0:0a:5c:ba:7f:f2:b3:a3:75:f4:73:e5: 27:e4:11:f3:f2:a2:24:53:dc:e1:c2:c0:cf:bf:1f:df:79:7e: 27:bd:67:be:6a:22:9b:f2:d8:8f:57:c4:11:69:15:94:6e:57: 47:99:1b:44:e8:d6:e2:3d:85:8e:4c:53:5c:43:32:69:8a:bc: a5:dd:d0:c1:46:66:a7:9b:96:af:be:62:1e:d8:19:a6:f4:a6: c0:55:1f:37:c1:f4:ad:ae:cb:6d:c0:39:64:8a:ca:e4:d6:7a: 1b:a0:24:36:f6:39:8f:d0:0d:6b:ac:95:d4:f3:87:0d:2f:8a: fe:d9:ad:93:76:1c:56:ff:79:00:74:34:54:2c:62:35:c8:73: 4d:dd:3b:ed:3f:c0:ff:9c:22:1f:b4:be:2d:ff:f3:77:d3:ce: 59:63:d3:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjUxMjA2MjIxMDU0WhcNMjUxMjEzMjIxMDU0WjAYMRYwFAYD VQQDEw02OTM0YTllZS05M2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiTZvEugejhwaLk7fqeQ/RKzBx+lrMHRts8DzyFiWx2M1ZeYEKdpY7avYxe4 ZxJuXFIwiSrl9gVgdSt1Xi8CeD4qE0oYoMVBa26JO2CRboFVoz3E534qb5Zg9GgY TMAHxaq1HqXUcCImxOOWDcIlvlCHF+mpz4NdfPNerXBv1kuqqhsR5dEBnQvT3dZV QD8I0JBodZ6yVkVioy2v7vQdf5G5R2Ke0O6NxnytiPfqV5upzzY/SpsXkS2/W1Pi G9qgV45ZfoRdfqTMyjQ0X4iHN0/NfxT28ytbW6ZArjxs4vRyr4QQrUOgNkrgsZce 0WSEw0ozmy7cwzt4D6SCdejYDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErCdBaJ ftBbX/MKWkrHueKEQJXKMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXkmd3uMFwxej+1Ut+dAUu/gjjE0YoMXdQk86nd6KP5BYvDkf+UDm6 fbGwgk6lezzFjPdtSILUc0Mb6b8S7HytL5ju6pRHk9A8Opvh4XxteD7DGmQ1cGng xZMpFOF2exigCly6f/Kzo3X0c+Un5BHz8qIkU9zhwsDPvx/feX4nvWe+aiKb8tiP V8QRaRWUbldHmRtE6NbiPYWOTFNcQzJpiryl3dDBRmanm5avvmIe2Bmm9KbAVR83 wfStrsttwDlkisrk1noboCQ29jmP0A1rrJXU84cNL4r+2a2TdhxW/3kAdDRULGI1 yHNN3TvtP8D/nCIftL4t//N3085ZY9Ov -----END CERTIFICATE-----Generated at Sun Dec 7 10:08:15 2025 by rpki-client