This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json) Hash identifier: UAJUUxYBr3wXafeho55AO/bgsgTxq8rBpMtwtqDh4y0= Subject key identifier: 01:4B:68:6C:99:94:36:D4:CA:64:FD:24:10:64:02:01:BD:67:08:C3 Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft Manifest number: 0129 Signing time: Tue 23 Dec 2025 03:43:56 +0000 Manifest this update: Tue 23 Dec 2025 03:43:55 +0000 Manifest next update: Tue 30 Dec 2025 03:43:55 +0000 Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: upIwF9Hl9Pk6RvEdrZd2x+9JQs555ZYpAc/uRebEpNE=) 2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: nyb0dAzbvJzklMfthLLqpt+z0+HXJ9fgrE8gdxbb/So=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F77, serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Validity Not Before: Dec 23 03:43:55 2025 GMT Not After : Dec 30 03:43:55 2025 GMT Subject: CN=694a0ffc-13a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:03:cc:a8:7b:cd:6f:7a:06:b7:e6:76:f6:65: db:8d:93:87:fd:33:5e:79:3e:95:96:45:c1:ad:3c: 34:61:9d:0f:6c:04:56:d9:72:44:a5:dc:78:c5:c3: 8f:f9:9a:95:a4:25:30:bc:2f:b1:97:6d:71:80:a8: 6f:20:3b:45:7e:64:29:ec:4d:98:e6:fb:b0:e5:ab: 0a:25:e7:55:8d:b5:f3:77:ff:4a:83:7d:0c:13:c4: 9d:be:13:fb:27:86:99:39:1c:52:5b:0a:89:40:ea: 37:e2:5f:84:97:6b:d6:45:34:e5:21:be:35:76:db: c3:96:ec:90:8e:5a:5f:b5:b5:03:88:16:73:80:15: cb:c2:b2:45:9d:13:7e:ca:26:8e:fd:99:12:17:6f: 58:4e:b6:f2:5d:a4:f7:b2:b3:05:9a:48:87:a6:d3: dc:5f:9c:81:5f:22:71:29:64:cf:c6:63:f3:45:30: 3b:9f:4a:02:dc:10:ba:92:57:1d:1e:0a:b3:b5:9e: 57:0e:f1:4e:d9:5b:b7:d8:c1:69:fb:6c:81:01:21: 30:30:b2:04:cc:85:ae:74:fa:a9:25:53:8a:e6:83: b0:b1:28:9d:10:6f:74:b2:c7:e1:88:27:01:2f:a3: 89:11:74:55:e1:b2:07:8d:22:b3:61:11:f0:88:62: 88:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4B:68:6C:99:94:36:D4:CA:64:FD:24:10:64:02:01:BD:67:08:C3 X509v3 Authority Key Identifier: keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:2f:dc:64:25:8c:4a:02:4c:fd:7b:be:fd:9d:fc:58:59:7c: ca:79:7e:0f:d5:e5:b2:e5:db:9b:52:bb:40:5a:e5:f8:43:ce: 11:b1:c1:a7:a3:9e:de:65:02:53:98:4c:af:66:63:de:00:65: 2a:e3:32:b9:b5:b7:2a:e8:e5:33:fb:8f:60:7e:96:59:1e:f9: 1a:2f:82:c1:8c:d0:7a:00:ba:48:d5:52:d7:94:76:59:6b:14: 5c:c9:10:ef:fb:e9:e1:08:32:fa:21:c7:38:e3:cc:d5:dd:e5: 0f:72:55:4f:3e:29:df:1c:56:41:1c:be:56:0a:69:ef:9d:58: 97:8a:02:05:f6:55:58:53:d9:b6:67:72:d0:e9:5d:02:f0:ff: 1b:a4:9c:86:26:ab:93:c6:df:ed:b8:8c:d9:cf:52:13:21:2a: c4:7b:6f:eb:53:a1:e5:e9:93:88:80:25:11:ed:6f:ad:12:6f: bd:fa:ca:93:11:5a:70:4d:38:fa:88:80:68:71:be:1f:c9:5a: 0c:eb:0c:90:f1:05:71:fa:69:40:97:94:14:66:98:8c:7b:9b: 81:0f:82:49:9c:34:da:9a:f2:0b:9d:ec:f1:27:b4:e2:32:02: a5:28:cd:d3:07:13:8f:cf:fc:cd:b2:95:a6:b8:28:91:54:84: cb:d6:c5:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNzcxMTAvBgNVBAUTKDE2MzE1QTY4QTc0NTA4MEJEREI2QzhGMDE1NkQwNDMw Njg5MzFCNTcwHhcNMjUxMjIzMDM0MzU1WhcNMjUxMjMwMDM0MzU1WjAYMRYwFAYD VQQDDA02OTRhMGZmYy0xM2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAPMqHvNb3oGt+Z29mXbjZOH/TNeeT6VlkXBrTw0YZ0PbARW2XJEpdx4xcOP +ZqVpCUwvC+xl21xgKhvIDtFfmQp7E2Y5vuw5asKJedVjbXzd/9Kg30ME8SdvhP7 J4aZORxSWwqJQOo34l+El2vWRTTlIb41dtvDluyQjlpftbUDiBZzgBXLwrJFnRN+ yiaO/ZkSF29YTrbyXaT3srMFmkiHptPcX5yBXyJxKWTPxmPzRTA7n0oC3BC6klcd HgqztZ5XDvFO2Vu32MFp+2yBASEwMLIEzIWudPqpJVOK5oOwsSidEG90ssfhiCcB L6OJEXRV4bIHjSKzYRHwiGKIXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFLaGyZ lDbUymT9JBBkAgG9ZwjDMB8GA1UdIwQYMBaAFBYxWminRQgL3bbI8BVtBDBokxtX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY3Ny9DRDI4NzM4MjI1 QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNBdmR0c2p3RlcwRU1HaVRH MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZqRmFhS2RGQ0F2ZHRzandGVzBFTUdpVEcxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY3Ny9DRDI4NzM4MjI1QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNB dmR0c2p3RlcwRU1HaVRHMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2L9xkJYxKAkz9e779nfxYWXzKeX4P1eWy5dubUrtAWuX4Q84RscGn o57eZQJTmEyvZmPeAGUq4zK5tbcq6OUz+49gfpZZHvkaL4LBjNB6ALpI1VLXlHZZ axRcyRDv++nhCDL6Icc448zV3eUPclVPPinfHFZBHL5WCmnvnViXigIF9lVYU9m2 Z3LQ6V0C8P8bpJyGJquTxt/tuIzZz1ITISrEe2/rU6Hl6ZOIgCUR7W+tEm+9+sqT EVpwTTj6iIBocb4fyVoM6wyQ8QVx+mlAl5QUZpiMe5uBD4JJnDTamvILnezxJ7Ti MgKlKM3TBxOPz/zNspWmuCiRVITL1sXz -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:02 2025 by rpki-client