This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft File: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft (raw, json) Hash identifier: EXI/ixePy9PVhuaZhLrK3O0c4Z1RWsecgNS27kYY04Q= Subject key identifier: 44:B2:96:3D:8E:4D:4E:CD:F9:F4:D5:1C:B2:44:33:F7:84:3A:54:AE Authority key identifier: 16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5 Certificate issuer: /CN=A918259F/serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5 Certificate serial: 08AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft Manifest number: 08A7 Signing time: Sat 20 Dec 2025 19:55:26 +0000 Manifest this update: Sat 20 Dec 2025 19:55:26 +0000 Manifest next update: Sat 27 Dec 2025 19:55:26 +0000 Files and hashes: 1: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl (hash: itmERTDeTZ0jB4eiiqkJrL/fqDzX97ledBqGNPWu810=) 2: 760B9414D50911EB81567986C4F9AE02.roa (hash: QPsDfSV6so0OjIlOy/DIgPY7VNOYY4wsn5e2KkaKPCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223 (0x8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918259F, serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5 Validity Not Before: Dec 20 19:55:26 2025 GMT Not After : Dec 27 19:55:26 2025 GMT Subject: CN=6946ff2e-3a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:60:96:0a:75:26:11:e8:b5:9a:ec:7e:e7:b8: 67:9c:50:e8:43:71:14:7b:41:26:14:fc:26:0a:fa: db:7b:02:e0:4b:a4:b7:4c:f9:0c:c9:7d:16:6e:28: 84:7f:9a:f6:f3:3c:a6:4b:1c:5f:e3:2e:c4:0f:bf: 1d:09:51:c8:33:1a:43:0c:af:f5:d1:d9:d0:63:13: 9e:9e:08:89:79:fa:24:78:99:ed:ba:ba:d8:21:f7: 9a:7d:d4:20:08:82:95:62:78:19:65:fb:8e:4b:5b: 3b:0b:23:80:c2:02:cd:09:f0:ff:56:d2:d6:b8:54: 1c:b6:78:d6:48:f6:1d:f7:66:c6:05:76:3b:50:0b: c5:10:c4:f6:72:6a:c2:c5:10:81:90:6b:3a:d6:2c: cb:dc:a2:16:18:40:6f:de:30:02:11:49:5d:06:f5: a6:00:23:a3:f7:49:ad:cf:61:ae:2d:7b:00:0c:e5: f7:e9:59:54:70:bd:7e:3d:3e:8a:8d:a8:fb:c9:0a: e3:e4:0d:6c:ed:7a:3e:93:78:5c:b2:5c:bd:7d:87: c2:1c:82:f3:6a:78:2c:73:88:30:a9:a6:de:00:af: ca:5a:61:5f:46:52:36:73:c2:f7:d7:0b:c0:42:63: 49:35:9b:95:a7:4c:38:54:bd:d4:4e:72:c9:99:84: 68:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B2:96:3D:8E:4D:4E:CD:F9:F4:D5:1C:B2:44:33:F7:84:3A:54:AE X509v3 Authority Key Identifier: keyid:16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:50:f3:4f:c7:e9:9c:d3:c5:0e:58:7d:b5:ae:bb:7f:55:c1: 06:16:ad:00:d5:72:86:32:e9:79:1b:5b:9f:31:be:35:d7:88: b0:41:84:e7:5e:bf:e2:57:ff:c2:9c:a2:cf:1b:ad:71:a3:36: 8f:c9:e2:1f:b4:9e:67:e6:0b:80:67:9c:23:a1:e0:9e:16:f1: d9:95:b1:3c:b2:94:a4:17:ab:e6:8c:47:32:b7:1f:c2:e4:73: cd:8e:5d:0c:b4:7e:a2:56:32:e6:51:fc:6a:1f:6c:b4:e7:36: 27:ef:45:bc:28:b3:18:40:7c:ed:57:3f:40:2c:16:86:4f:c2: 8e:e1:cf:43:19:0c:31:5c:ac:0d:38:cd:aa:26:53:bd:38:25: 0e:bb:12:a2:7c:eb:80:74:e3:07:95:39:71:44:db:c4:0a:33: ef:0f:a6:b7:e2:cf:c7:0d:ca:fb:60:76:e7:48:d1:1e:02:cf: 0b:3c:e4:b9:53:c4:d2:ff:85:ba:b2:95:61:3a:44:c0:21:53: ab:93:47:9b:9e:e9:4e:7e:bb:00:43:16:3c:0a:66:ef:b4:c7: 39:21:a8:1a:97:f0:ee:9e:63:31:5f:a6:55:b8:9a:a5:7c:95: 8c:1a:7d:d0:f5:d0:cc:41:43:91:b4:f9:c7:1d:96:36:b8:b5: 6d:36:4c:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1OUYxMTAvBgNVBAUTKDE2NzVEQkQ5RUMzOUNFRUQ4MUJCQkJERTQyQ0M3OENG N0ExNjI3QzUwHhcNMjUxMjIwMTk1NTI2WhcNMjUxMjI3MTk1NTI2WjAYMRYwFAYD VQQDDA02OTQ2ZmYyZS0zYTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWCWCnUmEei1mux+57hnnFDoQ3EUe0EmFPwmCvrbewLgS6S3TPkMyX0WbiiE f5r28zymSxxf4y7ED78dCVHIMxpDDK/10dnQYxOengiJefokeJnturrYIfeafdQg CIKVYngZZfuOS1s7CyOAwgLNCfD/VtLWuFQctnjWSPYd92bGBXY7UAvFEMT2cmrC xRCBkGs61izL3KIWGEBv3jACEUldBvWmACOj90mtz2GuLXsADOX36VlUcL1+PT6K jaj7yQrj5A1s7Xo+k3hcsly9fYfCHILzangsc4gwqabeAK/KWmFfRlI2c8L31wvA QmNJNZuVp0w4VL3UTnLJmYRogwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESylj2O TU7N+fTVHLJEM/eEOlSuMB8GA1UdIwQYMBaAFBZ129nsOc7tgbu73kLMeM96FifF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjU5Ri8wRjhCNTkxMENE QUIxMUVBODgzNzUyMENDNEY5QUUwMi9GblhiMmV3NXp1MkJ1N3ZlUXN4NHozb1dK OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZuWGIyZXc1enUyQnU3dmVRc3g0ejNvV0o4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjU5Ri8wRjhCNTkxMENEQUIxMUVBODgzNzUyMENDNEY5QUUwMi9GblhiMmV3NXp1 MkJ1N3ZlUXN4NHozb1dKOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+UPNPx+mc08UOWH21rrt/VcEGFq0A1XKGMul5G1ufMb4114iwQYTn Xr/iV//CnKLPG61xozaPyeIftJ5n5guAZ5wjoeCeFvHZlbE8spSkF6vmjEcytx/C 5HPNjl0MtH6iVjLmUfxqH2y05zYn70W8KLMYQHztVz9ALBaGT8KO4c9DGQwxXKwN OM2qJlO9OCUOuxKifOuAdOMHlTlxRNvECjPvD6a34s/HDcr7YHbnSNEeAs8LPOS5 U8TS/4W6spVhOkTAIVOrk0ebnulOfrsAQxY8CmbvtMc5Iagal/DunmMxX6ZVuJql fJWMGn3Q9dDMQUORtPnHHZY2uLVtNkxE -----END CERTIFICATE-----Generated at Sun Dec 21 21:16:12 2025 by rpki-client