This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft File: FYOTMKge2Jkgc6I4BMn1kFOPudI.mft (raw, json) Hash identifier: 9vWEKYAh1NsPa1XPCk0u33hswbJdHzJYnR5pk3Uaxzs= Subject key identifier: D4:2D:26:DA:D1:C1:8D:59:E2:4C:EA:00:81:B4:28:CE:07:08:23:C6 Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 Certificate issuer: /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft Manifest number: 0159 Signing time: Sun 21 Dec 2025 03:21:52 +0000 Manifest this update: Sun 21 Dec 2025 03:21:51 +0000 Manifest next update: Sun 28 Dec 2025 03:21:51 +0000 Files and hashes: 1: FYOTMKge2Jkgc6I4BMn1kFOPudI.crl (hash: yxjm9XeZBTD9IsAibvVPadXAGJWFSxstaLkILt//F1k=) 2: FF5BF8249A4111F0A04F703EC4F9AE02.roa (hash: iScThtYyHAtRsJGeo4LgzdxeB5YiqkEobfpoS62JfqI=) 3: FFE844FA9A4111F0A04F703EC4F9AE02.roa (hash: CVNQ8o5vgUTo0mQqecmD6qlSNzDJS1qhWASENFVDXu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F, serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Validity Not Before: Dec 21 03:21:51 2025 GMT Not After : Dec 28 03:21:51 2025 GMT Subject: CN=694767d0-1538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fd:a2:7b:31:ef:f7:e8:fa:3c:8b:aa:12:ee: e9:ce:16:86:08:0a:a9:da:e2:9b:ff:e7:1f:e1:e7: 98:cd:91:f2:35:f5:44:7a:45:89:a1:17:8c:73:1c: af:b1:92:9b:5a:1d:7e:50:a4:e3:1e:8f:31:56:de: 23:bf:c3:72:08:99:fa:f8:27:a2:6c:7d:e3:bf:d1: df:92:5c:20:6f:ca:31:62:59:39:3e:c3:19:35:ad: 74:62:d4:b5:a2:c2:5f:8e:3e:a8:96:a0:a3:40:81: 09:91:4d:9b:e5:4f:75:b6:14:a7:6c:6e:db:09:ff: e8:8b:1f:ed:98:11:b7:b4:f6:65:1d:af:1c:e1:6c: fb:96:c0:cb:19:a8:9a:42:0d:aa:5c:d9:b2:44:0a: 2e:15:36:67:d1:75:52:b8:74:63:bc:d2:99:f9:f8: d6:2c:39:fe:38:48:2a:f2:07:97:b9:4f:2a:ef:f0: 4a:e1:11:33:32:ac:25:8a:d8:4b:bb:4e:85:a1:7e: ae:f4:0a:8e:f8:ec:10:64:a7:3f:80:d4:fc:b7:d5: 54:dc:65:b8:24:9d:be:55:46:30:89:dd:da:13:3d: ec:9f:4d:bd:a4:25:96:fb:23:ee:b2:a5:04:5d:91: 5c:f4:d6:11:71:ba:ae:2c:bc:b4:0c:ee:6e:10:e3: 59:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2D:26:DA:D1:C1:8D:59:E2:4C:EA:00:81:B4:28:CE:07:08:23:C6 X509v3 Authority Key Identifier: keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:40:ad:b2:7b:74:62:63:21:36:0f:c8:7f:69:a1:ae:5c:8c: 8d:12:6f:29:05:de:63:db:b4:2a:b8:18:77:b8:45:11:4c:5d: ca:68:db:d1:9b:b6:ed:9d:07:91:b5:aa:c9:b0:99:6c:b2:18: 4a:d2:63:3c:0b:27:b8:1b:f7:c8:75:9a:ca:91:dc:9c:e0:de: ba:5a:66:d7:35:5a:c1:cb:a3:21:95:de:ef:ca:37:b2:ee:71: d6:12:9a:68:26:7d:fa:a2:00:d1:99:f7:3e:ed:bf:12:b9:1a: 04:86:5a:b6:46:75:16:47:8c:d0:5f:2c:24:40:39:58:06:59: 6e:61:51:a3:27:64:ac:e3:59:05:17:18:4d:72:6e:3b:61:ac: 72:69:e2:90:09:8f:bd:0f:d2:0f:84:27:e5:37:45:f7:6b:11: 48:7a:f2:de:d7:fe:7d:1a:c2:7e:33:74:32:bb:b7:0c:e6:d1: ae:d8:1e:c7:21:41:73:c1:8a:7a:96:07:81:34:aa:24:49:d5: 7f:94:87:66:43:8d:8a:97:92:eb:91:b7:5c:c0:c6:40:d0:2a: 71:91:55:ed:77:96:c2:59:97:a8:70:69:be:2c:bd:f0:af:99: f3:03:1c:f4:73:20:8d:61:98:e3:82:e6:25:54:d7:5e:82:63: 60:e7:05:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlCNkYxMTAvBgNVBAUTKDE1ODM5MzMwQTgxRUQ4OTkyMDczQTIzODA0QzlGNTkw NTM4RkI5RDIwHhcNMjUxMjIxMDMyMTUxWhcNMjUxMjI4MDMyMTUxWjAYMRYwFAYD VQQDDA02OTQ3NjdkMC0xNTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnv2iezHv9+j6PIuqEu7pzhaGCAqp2uKb/+cf4eeYzZHyNfVEekWJoReMcxyv sZKbWh1+UKTjHo8xVt4jv8NyCJn6+CeibH3jv9Hfklwgb8oxYlk5PsMZNa10YtS1 osJfjj6olqCjQIEJkU2b5U91thSnbG7bCf/oix/tmBG3tPZlHa8c4Wz7lsDLGaia Qg2qXNmyRAouFTZn0XVSuHRjvNKZ+fjWLDn+OEgq8geXuU8q7/BK4REzMqwlithL u06FoX6u9AqO+OwQZKc/gNT8t9VU3GW4JJ2+VUYwid3aEz3sn029pCWW+yPusqUE XZFc9NYRcbquLLy0DO5uEONZNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQtJtrR wY1Z4kzqAIG0KM4HCCPGMB8GA1UdIwQYMBaAFBWDkzCoHtiZIHOiOATJ9ZBTj7nS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUI2Ri8yQUQ1RjZEOEQw OUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJKa2djNkk0Qk1uMWtGT1B1 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZT1RNS2dlMkprZ2M2STRCTW4xa0ZPUHVkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUI2Ri8yQUQ1RjZEOEQwOUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJK a2djNkk0Qk1uMWtGT1B1ZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIQK2ye3RiYyE2D8h/aaGuXIyNEm8pBd5j27QquBh3uEURTF3KaNvR m7btnQeRtarJsJlsshhK0mM8Cye4G/fIdZrKkdyc4N66WmbXNVrBy6Mhld7vyjey 7nHWEppoJn36ogDRmfc+7b8SuRoEhlq2RnUWR4zQXywkQDlYBlluYVGjJ2Ss41kF FxhNcm47YaxyaeKQCY+9D9IPhCflN0X3axFIevLe1/59GsJ+M3Qyu7cM5tGu2B7H IUFzwYp6lgeBNKokSdV/lIdmQ42Kl5LrkbdcwMZA0CpxkVXtd5bCWZeocGm+LL3w r5nzAxz0cyCNYZjjguYlVNdegmNg5wUL -----END CERTIFICATE-----Generated at Mon Dec 22 18:42:28 2025 by rpki-client