This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft File: fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft (raw, json) Hash identifier: Ae+mX8lJ2uVPIgOarNgN/SkodKNTb5hhqxZVwMSH0zg= Subject key identifier: B1:57:99:2A:DC:34:A5:B7:EF:B1:34:0C:B5:08:D3:0C:A9:20:18:A8 Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D Certificate issuer: /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Certificate serial: 0914 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft Manifest number: 0907 Signing time: Mon 22 Dec 2025 19:41:10 +0000 Manifest this update: Mon 22 Dec 2025 19:41:09 +0000 Manifest next update: Mon 29 Dec 2025 19:41:09 +0000 Files and hashes: 1: fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl (hash: AuMkMKTC1bcerS6cA/Q1A+bjGxzsviauO/K0ibrU3mE=) 2: 10A6E062B70A11EDB851464EC4F9AE02.roa (hash: bZt6j0f9FnqO99C81njAPqo09zXuxWqDsE/MVQG1nLI=) 3: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (hash: 6L9/grM2XRH6xQ2g7G8uPevEIhezQ/ylsuLvLV8fdNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2324 (0x914) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918753F, serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Validity Not Before: Dec 22 19:41:09 2025 GMT Not After : Dec 29 19:41:09 2025 GMT Subject: CN=69499ed6-72f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:44:e9:d0:fe:62:1f:fb:62:c3:0d:84:3d:2a: 52:8f:8d:80:7b:53:9e:40:cd:a2:a0:d7:b3:6e:1c: 0e:43:61:a4:23:97:49:da:2c:71:f3:ae:2d:b8:08: 2b:4c:36:47:66:6a:ab:96:1b:e5:49:6a:31:c6:b3: d8:b1:3d:8c:ad:77:91:af:70:7b:f6:4f:d3:90:17: d6:6c:82:f3:90:b2:3a:a5:ba:2e:bf:d1:6f:be:29: 81:67:83:92:51:b7:69:f0:23:10:6f:73:61:86:d4: 1f:cf:4e:fd:3b:a1:cc:8d:84:b7:18:3b:8e:14:11: b1:40:a8:0b:a5:91:87:6d:56:af:0b:58:13:a3:d8: a5:4e:6a:75:98:6b:fa:eb:64:1f:59:6b:99:90:1b: 58:13:b4:e2:cf:b5:d9:b7:c7:2c:c0:05:49:4c:55: fe:f4:2a:84:eb:c8:72:78:76:80:9e:a4:a3:c1:9b: 79:04:90:e2:45:e5:74:08:70:37:91:52:aa:4c:9a: 69:5d:d1:2d:b0:e8:cb:78:36:27:91:70:0b:00:30: fd:24:55:b2:32:44:a8:81:e3:1e:b1:90:af:b6:17: c3:11:21:79:9c:fa:21:e3:fe:1c:4a:23:25:3b:5b: 1f:87:4c:73:a6:94:89:c2:10:0d:e7:c0:cd:75:0c: 11:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:57:99:2A:DC:34:A5:B7:EF:B1:34:0C:B5:08:D3:0C:A9:20:18:A8 X509v3 Authority Key Identifier: keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e6:9b:77:07:08:bf:3c:09:15:17:d4:12:d4:81:df:ac:1f: 58:cc:88:f4:41:59:5a:24:5b:a5:97:8d:58:a8:b2:b3:95:14: e4:61:6d:80:21:56:83:49:51:31:d2:08:c8:b7:32:3d:6c:c4: 8b:a6:58:96:d2:36:95:d8:45:e8:d6:5f:44:71:2f:07:89:7b: 34:ac:c8:0c:36:9c:ba:94:69:6c:6a:f2:e6:35:ae:bc:5f:7f: ad:40:bd:99:d9:39:89:79:07:75:35:82:46:c5:4d:6e:aa:cd: ed:c3:4a:bf:ee:81:2f:c3:23:59:d8:5b:61:08:a9:d5:bd:ce: df:c2:83:63:03:c3:83:40:31:3b:c9:20:cd:a8:1b:8c:16:de: 56:ae:f0:72:9a:ed:53:e8:a7:fe:cd:5d:87:fb:cf:16:8c:fa: d4:9e:9b:c8:64:24:ae:8f:49:cc:42:3c:75:70:2a:9d:bf:a9: 34:20:aa:95:8e:4a:d3:ee:3c:e6:cf:7a:b7:81:55:fa:33:0d: cb:d7:91:9e:b8:6b:31:c2:4a:e7:45:40:6f:14:7f:d0:c4:eb: bc:a7:06:da:23:f7:38:b6:9a:7b:fb:49:5b:6e:3d:a1:b5:d9: 6b:26:54:e8:a5:f2:9a:67:36:3f:a8:37:fd:98:32:51:07:ac: 65:cb:15:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1M0YxMTAvBgNVBAUTKDdFNzJEODAxQjM4QTcyQUI0QjAzNzZFMTJDOTU0MTI0 QUFFNDNDNkQwHhcNMjUxMjIyMTk0MTA5WhcNMjUxMjI5MTk0MTA5WjAYMRYwFAYD VQQDDA02OTQ5OWVkNi03MmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70Tp0P5iH/tiww2EPSpSj42Ae1OeQM2ioNezbhwOQ2GkI5dJ2ixx864tuAgr TDZHZmqrlhvlSWoxxrPYsT2MrXeRr3B79k/TkBfWbILzkLI6pbouv9FvvimBZ4OS Ubdp8CMQb3NhhtQfz079O6HMjYS3GDuOFBGxQKgLpZGHbVavC1gTo9ilTmp1mGv6 62QfWWuZkBtYE7Tiz7XZt8cswAVJTFX+9CqE68hyeHaAnqSjwZt5BJDiReV0CHA3 kVKqTJppXdEtsOjLeDYnkXALADD9JFWyMkSogeMesZCvthfDESF5nPoh4/4cSiMl O1sfh0xzppSJwhAN58DNdQwRtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFXmSrc NKW377E0DLUI0wypIBioMB8GA1UdIwQYMBaAFH5y2AGzinKrSwN24SyVQSSq5Dxt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzRi9CREE1N0ZGRUJD MTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2NxdExBM2JoTEpWQkpLcmtQ RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuTFlBYk9LY3F0TEEzYmhMSlZCSktya1BHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzUzRi9CREE1N0ZGRUJDMTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2Nx dExBM2JoTEpWQkpLcmtQRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq5pt3Bwi/PAkVF9QS1IHfrB9YzIj0QVlaJFull41YqLKzlRTkYW2A IVaDSVEx0gjItzI9bMSLpliW0jaV2EXo1l9EcS8HiXs0rMgMNpy6lGlsavLmNa68 X3+tQL2Z2TmJeQd1NYJGxU1uqs3tw0q/7oEvwyNZ2FthCKnVvc7fwoNjA8ODQDE7 ySDNqBuMFt5WrvBymu1T6Kf+zV2H+88WjPrUnpvIZCSuj0nMQjx1cCqdv6k0IKqV jkrT7jzmz3q3gVX6Mw3L15GeuGsxwkrnRUBvFH/QxOu8pwbaI/c4tpp7+0lbbj2h tdlrJlTopfKaZzY/qDf9mDJRB6xlyxWU -----END CERTIFICATE-----Generated at Tue Dec 23 08:24:13 2025 by rpki-client