This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json) Hash identifier: /22T6dnFb+khl2OXJqwUUnO/TFDlQl1ST6xTwDbdtKU= Subject key identifier: 22:D0:1B:71:E7:EE:24:3C:BE:6A:79:46:A4:97:65:2F:A3:1C:65:8B Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Certificate serial: 05FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft Manifest number: 05EF Signing time: Mon 22 Dec 2025 22:09:40 +0000 Manifest this update: Mon 22 Dec 2025 22:09:39 +0000 Manifest next update: Mon 29 Dec 2025 22:09:39 +0000 Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: F+19BTc9kY3RcMs0dYnPTnwMUmqvSJWWAd9dMHOhId0=) 2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: qEzwTZZUC4uMW1HAy4f00w0OgM+P5McKSsq6Y4WD9MM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1533 (0x5fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Validity Not Before: Dec 22 22:09:39 2025 GMT Not After : Dec 29 22:09:39 2025 GMT Subject: CN=6949c1a3-a4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:45:f5:db:f1:18:7c:c6:f8:69:f0:2d:e7:20: 09:43:25:9b:75:36:d3:e3:00:c1:52:f5:cd:42:fa: 44:1b:cb:c6:41:b9:96:86:8d:3c:db:54:9b:4b:e9: 58:9f:ec:93:6d:dc:92:48:b7:d9:f7:e5:93:97:22: 26:2e:9a:1a:9a:8e:9c:3c:d3:68:dc:32:4f:30:c0: d7:6c:ce:27:35:81:c4:13:c6:93:a5:d0:ce:f4:7f: 7f:58:02:3f:c7:ac:ad:4f:a0:3a:44:82:42:22:3b: 3f:c4:02:75:90:f1:d8:7b:53:9b:21:da:f0:18:49: 70:e5:8f:25:02:a2:df:05:8b:2a:5e:2a:58:78:76: e5:44:29:3e:eb:d3:0a:a0:46:a5:af:6b:28:7b:67: 96:68:96:32:7f:c6:bd:46:26:40:bc:51:64:e9:6c: 11:96:dd:10:b5:a6:78:dc:8e:7d:b7:56:3c:02:e8: c0:37:6f:6a:69:87:60:72:ac:16:66:cc:9f:b6:30: 9c:b2:c6:33:a8:28:74:8c:af:4c:13:d9:53:ed:a8: 4d:76:61:61:56:07:b0:b5:92:aa:89:d8:8a:ad:31: a8:db:42:34:7e:07:f3:6b:cf:b1:45:83:0b:a2:94: ab:94:ab:e7:da:0d:ac:e0:cd:52:73:a9:7b:83:75: 8f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D0:1B:71:E7:EE:24:3C:BE:6A:79:46:A4:97:65:2F:A3:1C:65:8B X509v3 Authority Key Identifier: keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:95:a5:5b:ce:d0:89:0d:c9:b6:c0:b5:91:03:7b:a3:18:3c: ef:a8:54:a0:8c:2f:c8:67:74:83:3b:00:62:e8:0b:a0:7d:75: d1:65:db:6b:e4:8e:15:52:60:b3:06:0c:0a:b6:a9:38:b4:18: 77:e6:b1:71:2b:80:49:e5:d3:85:93:1a:12:12:07:12:46:e3: 71:fc:b1:c5:b4:6b:e3:e0:cd:1b:97:b5:25:f3:e4:bb:22:d2: 23:26:aa:73:71:34:fe:26:f4:dc:90:a6:f8:c3:ed:83:41:e0: 63:c6:c5:2b:45:b4:83:87:36:4e:42:1b:2d:1e:b4:d2:d0:b9: 3a:48:d5:5e:a5:2b:c3:24:1f:13:32:83:58:e7:96:9e:5f:4b: 3a:8b:62:2e:bb:ec:43:18:d3:d0:cd:82:11:52:4f:f8:ba:b3: 13:82:ed:8d:49:6c:fc:23:62:e5:5e:bd:55:4e:6c:d5:e9:86: 03:cb:30:a0:ab:3f:b9:13:6c:75:69:26:8b:b5:3f:eb:8e:14: f9:29:e6:a8:11:42:66:26:b8:95:ee:f2:c8:c3:4a:72:4e:ac: 31:ec:49:39:08:27:ed:27:f4:6e:65:47:ef:e4:1c:78:b7:b6: b7:21:16:db:3a:e6:30:fe:c6:9d:5f:ae:af:db:22:37:ad:a0: b0:40:d3:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKDE1MjhGNjNEMjhGM0UxMzY2OTAyQzZCNjRBRjU4NjZD Q0JBOERBQzQwHhcNMjUxMjIyMjIwOTM5WhcNMjUxMjI5MjIwOTM5WjAYMRYwFAYD VQQDDA02OTQ5YzFhMy1hNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUX12/EYfMb4afAt5yAJQyWbdTbT4wDBUvXNQvpEG8vGQbmWho0821SbS+lY n+yTbdySSLfZ9+WTlyImLpoamo6cPNNo3DJPMMDXbM4nNYHEE8aTpdDO9H9/WAI/ x6ytT6A6RIJCIjs/xAJ1kPHYe1ObIdrwGElw5Y8lAqLfBYsqXipYeHblRCk+69MK oEalr2soe2eWaJYyf8a9RiZAvFFk6WwRlt0QtaZ43I59t1Y8AujAN29qaYdgcqwW ZsyftjCcssYzqCh0jK9ME9lT7ahNdmFhVgewtZKqidiKrTGo20I0fgfza8+xRYML opSrlKvn2g2s4M1Sc6l7g3WPDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLQG3Hn 7iQ8vmp5RqSXZS+jHGWLMB8GA1UdIwQYMBaAFBUo9j0o8+E2aQLGtkr1hmzLqNrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9BNDQ3ODY3NERG Q0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRUWnBBc2EyU3ZXR2JNdW8y c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTajJQU2p6NFRacEFzYTJTdldHYk11bzJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9BNDQ3ODY3NERGQ0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRU WnBBc2EyU3ZXR2JNdW8yc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWlaVbztCJDcm2wLWRA3ujGDzvqFSgjC/IZ3SDOwBi6AugfXXRZdtr 5I4VUmCzBgwKtqk4tBh35rFxK4BJ5dOFkxoSEgcSRuNx/LHFtGvj4M0bl7Ul8+S7 ItIjJqpzcTT+JvTckKb4w+2DQeBjxsUrRbSDhzZOQhstHrTS0Lk6SNVepSvDJB8T MoNY55aeX0s6i2Iuu+xDGNPQzYIRUk/4urMTgu2NSWz8I2LlXr1VTmzV6YYDyzCg qz+5E2x1aSaLtT/rjhT5KeaoEUJmJriV7vLIw0pyTqwx7Ek5CCftJ/RuZUfv5Bx4 t7a3IRbbOuYw/sadX66v2yI3raCwQNNm -----END CERTIFICATE-----Generated at Wed Dec 24 01:13:56 2025 by rpki-client