This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft File: fgqozSvoYXAaXKfPudRQ09kYJ-g.mft (raw, json) Hash identifier: UEoJ3GJ7oGvxyjgIBb8cRfqX9vHEPoQooz7q208XX2Q= Subject key identifier: 29:C1:B2:A2:57:16:5B:43:B6:85:C9:CA:2C:08:EF:C4:E7:C6:97:A4 Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 Certificate issuer: /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Certificate serial: 1F94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft Manifest number: 1F87 Signing time: Wed 24 Dec 2025 15:49:56 +0000 Manifest this update: Wed 24 Dec 2025 15:49:55 +0000 Manifest next update: Wed 31 Dec 2025 15:49:55 +0000 Files and hashes: 1: fgqozSvoYXAaXKfPudRQ09kYJ-g.crl (hash: EEZIIXuP9Ycb041ROzg+Z1m/tF/Mg+JbMM2XfQtvSn0=) 2: 4D94E0D6545211E6A367BC68C4F9AE02.roa (hash: DcM+Lc5+n2tyIRWKbRIwYXhW1cJ+6S2apUWAewERFcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8084 (0x1f94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB9F, serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Validity Not Before: Dec 24 15:49:55 2025 GMT Not After : Dec 31 15:49:55 2025 GMT Subject: CN=694c0ba4-8c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:20:c4:23:eb:3e:77:0a:3c:cb:f5:66:b0: 0d:67:37:99:d9:66:c6:17:fd:25:ce:42:81:e3:98: dd:84:51:f9:55:ce:4d:bd:41:5b:e0:d5:b5:7a:ec: 31:e4:07:72:c4:32:b0:cd:88:79:0a:b7:01:b7:73: 07:45:79:9d:63:fe:48:64:26:bd:89:19:9c:d8:3f: 1e:2b:df:0c:29:03:09:7d:6e:3b:1c:74:b8:00:b8: 67:4a:52:9c:38:e6:09:1d:3b:5d:b6:95:8f:fb:a6: 49:04:c9:35:24:40:a7:e3:32:bd:29:df:4e:8a:79: f4:9d:35:a2:77:64:d8:88:d3:ee:ed:10:e4:ce:93: fa:c7:93:ce:37:a9:29:88:80:ed:35:3f:e0:67:5c: af:26:75:ae:a6:f4:df:a7:7b:44:25:f6:3c:ef:4a: be:f2:c7:ba:fe:46:f2:74:27:c4:1f:af:e8:db:69: 08:9d:29:f7:99:22:d2:01:e0:ea:8c:39:fc:f3:61: b7:ec:59:37:e2:9c:59:e0:6f:e9:97:a9:9c:ee:54: 90:ce:3d:61:81:dc:cf:c3:4e:5a:b2:49:87:cd:6f: a9:9d:8e:41:44:86:fa:69:d1:53:f9:21:98:21:7a: 12:71:58:52:e6:76:01:3b:3e:3f:58:80:6b:0f:48: a3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C1:B2:A2:57:16:5B:43:B6:85:C9:CA:2C:08:EF:C4:E7:C6:97:A4 X509v3 Authority Key Identifier: keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:db:37:b4:3f:f9:82:2c:b5:15:04:60:e3:35:b9:5c:79:c8: 93:a0:68:0b:33:9b:22:ac:12:14:8a:e9:e1:9d:6f:ff:fb:c7: 10:2d:bc:6c:ce:87:ab:92:c9:d6:17:94:9d:04:20:c0:a1:97: d5:30:9f:0c:ab:96:a4:87:60:c5:9a:35:d4:b6:01:56:7a:c3: af:0e:6c:9c:ea:c9:5b:19:9c:42:cc:cf:10:7d:51:d0:44:a6: 50:ac:1e:ed:c4:cb:cb:19:5e:db:6b:57:3b:09:89:32:21:23: 77:41:e9:0b:82:73:cc:96:dd:ca:a8:99:42:de:d5:8d:30:21: 4e:68:07:36:91:ad:f6:07:5a:e2:db:09:a0:09:57:9d:0a:ec: b3:c5:02:3c:49:e3:db:fc:7f:11:55:9d:d2:b0:c0:25:a4:9a: 6f:da:4f:df:c4:56:88:15:80:2e:c3:95:56:0c:6a:c0:66:4b: 58:5f:2e:52:4e:ab:fb:ec:d2:0a:44:28:91:b2:6e:2f:fb:e8: 19:82:7a:9d:b0:51:00:8a:9a:a9:2b:3f:6e:73:82:b0:19:d1: 49:71:7c:05:e0:ec:3c:ba:42:28:5b:66:51:d9:46:11:11:9c: fb:ce:9c:0c:fb:dc:c3:68:d1:ee:c6:7f:df:25:8e:d4:e1:9b: 8e:d0:c5:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCOUYxMTAvBgNVBAUTKDdFMEFBOENEMkJFODYxNzAxQTVDQTdDRkI5RDQ1MEQz RDkxODI3RTgwHhcNMjUxMjI0MTU0OTU1WhcNMjUxMjMxMTU0OTU1WjAYMRYwFAYD VQQDDA02OTRjMGJhNC04YzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvm4gxCPrPncKPMv1ZrANZzeZ2WbGF/0lzkKB45jdhFH5Vc5NvUFb4NW1euwx 5AdyxDKwzYh5CrcBt3MHRXmdY/5IZCa9iRmc2D8eK98MKQMJfW47HHS4ALhnSlKc OOYJHTtdtpWP+6ZJBMk1JECn4zK9Kd9Oinn0nTWid2TYiNPu7RDkzpP6x5PON6kp iIDtNT/gZ1yvJnWupvTfp3tEJfY870q+8se6/kbydCfEH6/o22kInSn3mSLSAeDq jDn882G37Fk34pxZ4G/pl6mc7lSQzj1hgdzPw05askmHzW+pnY5BRIb6adFT+SGY IXoScVhS5nYBOz4/WIBrD0ijkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnBsqJX FltDtoXJyiwI78TnxpekMB8GA1UdIwQYMBaAFH4KqM0r6GFwGlynz7nUUNPZGCfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI5Ri9CODhGNDI1MjU0 NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lYQWFYS2ZQdWRSUTA5a1lK LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZncW96U3ZvWVhBYVhLZlB1ZFJRMDlrWUotZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REI5Ri9CODhGNDI1MjU0NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lY QWFYS2ZQdWRSUTA5a1lKLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA32ze0P/mCLLUVBGDjNblceciToGgLM5sirBIUiunhnW//+8cQLbxs zoerksnWF5SdBCDAoZfVMJ8Mq5akh2DFmjXUtgFWesOvDmyc6slbGZxCzM8QfVHQ RKZQrB7txMvLGV7ba1c7CYkyISN3QekLgnPMlt3KqJlC3tWNMCFOaAc2ka32B1ri 2wmgCVedCuyzxQI8SePb/H8RVZ3SsMAlpJpv2k/fxFaIFYAuw5VWDGrAZktYXy5S Tqv77NIKRCiRsm4v++gZgnqdsFEAipqpKz9uc4KwGdFJcXwF4Ow8ukIoW2ZR2UYR EZz7zpwM+9zDaNHuxn/fJY7U4ZuO0MVE -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:48 2025 by rpki-client