This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft File: fwOXxqlOUll2g0u_1YAvFbeV-44.mft (raw, json) Hash identifier: d0eBDI3aukPy9ANVyXabYpFj1PBLPLJvQ5EHb7klWYk= Subject key identifier: 29:44:91:4C:ED:F3:DA:F4:A4:E3:A3:5C:43:69:28:8B:B5:7F:ED:F8 Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E Certificate issuer: /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft Manifest number: 80 Signing time: Tue 23 Dec 2025 05:41:34 +0000 Manifest this update: Tue 23 Dec 2025 05:41:34 +0000 Manifest next update: Tue 30 Dec 2025 05:41:34 +0000 Files and hashes: 1: fwOXxqlOUll2g0u_1YAvFbeV-44.crl (hash: 7eO6UV3vLWwGNIyeNXW3HUKWnpRtVCiYZqrtukFqo+o=) 2: C865C1BC8D2E11F0A977AE41C4F9AE02.roa (hash: 4+U1k9OAedZH316Ll+MqnC5sjLliIqDqE+4KiwveiWg=) 3: 552F0C342E2011F0AF4AB70CC4F9AE02.roa (hash: zQFffL0yf3R/prXBnJUsP3rRavBwBN7cKDAWt7IRmxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E Validity Not Before: Dec 23 05:41:34 2025 GMT Not After : Dec 30 05:41:34 2025 GMT Subject: CN=694a2b8e-cad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f6:b2:bd:4e:2d:11:0d:2b:fa:f4:3f:35:a8: cb:f6:88:5d:3c:dd:4f:c9:07:4b:b4:21:4f:26:96: 9e:d7:ce:b4:9b:59:6c:de:ca:54:a0:5c:7d:d5:b2: 57:4a:65:4a:6d:f5:74:58:fd:81:6c:bb:a9:71:8b: a7:96:ae:0a:9e:14:00:78:05:1d:4d:c4:f6:3b:c9: e5:c3:50:e4:bb:14:f7:29:40:ee:d0:4c:e2:5c:8a: 52:bc:22:ec:4d:83:59:30:21:56:66:e5:02:74:1c: 49:02:c3:de:e0:89:37:af:63:df:8c:64:f3:da:44: 58:4f:ca:c8:25:9b:84:71:41:a7:ba:19:4c:f4:7d: 47:cb:4c:09:35:f2:21:12:66:19:c0:b7:a3:69:9b: b7:17:db:2c:e1:13:38:0e:ba:2d:44:38:6b:20:ed: 48:db:3d:67:b8:ae:61:dc:82:44:df:60:f3:5f:f0: 7f:9a:69:a5:fb:cd:b8:47:ae:ac:c3:b3:88:66:79: 31:28:1e:a2:97:4d:ea:32:31:a8:5b:b7:0c:48:b4: e6:71:2c:49:c2:37:2f:7a:d6:5e:55:a2:4c:00:0c: b3:7e:d2:42:e1:74:5e:df:ef:75:7c:bc:e8:4b:6e: ad:3d:7c:0b:01:0a:86:0b:ef:8f:a6:25:e1:a0:a0: f4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:44:91:4C:ED:F3:DA:F4:A4:E3:A3:5C:43:69:28:8B:B5:7F:ED:F8 X509v3 Authority Key Identifier: keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:55:66:1a:4f:26:6b:86:0f:a8:ad:6d:50:4b:03:ab:d1:19: de:0d:cf:c2:9c:b0:7a:f0:94:7e:70:24:a5:8e:3d:86:cf:98: 9f:08:55:07:49:37:8b:0b:ac:90:0d:d6:d5:3b:b5:dd:db:07: 42:b0:af:17:1b:04:64:92:b6:e4:56:a8:21:37:ec:ee:a1:cb: 07:f1:30:a2:29:c9:a2:4b:90:a4:e2:74:c6:6c:a3:e0:de:af: 58:51:0b:04:29:4c:44:0c:08:88:61:ee:15:ae:96:97:7a:13: 84:f1:22:91:1f:96:b9:78:4c:3a:f5:62:48:0e:c6:1f:bd:8b: ad:93:60:84:4a:be:51:09:a0:e9:54:0f:26:a5:41:89:1b:fc: 5a:e6:16:bc:13:25:df:95:86:47:92:88:8f:49:ce:cc:ba:b5: 8f:04:b7:67:5d:41:31:21:cb:e2:30:8e:06:3a:8f:e7:8c:78: 6f:49:a9:8c:b7:00:4c:d6:b9:17:22:0e:9e:34:41:3b:0f:b0: 8c:d6:73:22:86:6a:cb:b5:36:ae:6f:39:cb:44:0d:c3:a2:a9: 91:9d:1f:2a:b8:84:70:e5:76:a5:71:46:54:90:86:b6:98:1e: 8a:c7:27:2d:b7:aa:58:c0:0a:43:26:4d:ed:67:75:45:a7:01: c0:29:b0:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlEOUIxMTAvBgNVBAUTKDdGMDM5N0M2QTk0RTUyNTk3NjgzNEJCRkQ1ODAyRjE1 Qjc5NUZCOEUwHhcNMjUxMjIzMDU0MTM0WhcNMjUxMjMwMDU0MTM0WjAYMRYwFAYD VQQDDA02OTRhMmI4ZS1jYWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvayvU4tEQ0r+vQ/NajL9ohdPN1PyQdLtCFPJpae1860m1ls3spUoFx91bJX SmVKbfV0WP2BbLupcYunlq4KnhQAeAUdTcT2O8nlw1DkuxT3KUDu0EziXIpSvCLs TYNZMCFWZuUCdBxJAsPe4Ik3r2PfjGTz2kRYT8rIJZuEcUGnuhlM9H1Hy0wJNfIh EmYZwLejaZu3F9ss4RM4DrotRDhrIO1I2z1nuK5h3IJE32DzX/B/mmml+824R66s w7OIZnkxKB6il03qMjGoW7cMSLTmcSxJwjcvetZeVaJMAAyzftJC4XRe3+91fLzo S26tPXwLAQqGC++PpiXhoKD0AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClEkUzt 89r0pOOjXENpKIu1f+34MB8GA1UdIwQYMBaAFH8Dl8apTlJZdoNLv9WALxW3lfuO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUQ5Qi9CMkE1NzdDMjI3 NDUxMUYwQUVEMkI0NjlDNEY5QUUwMi9md09YeHFsT1VsbDJnMHVfMVlBdkZiZVYt NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z3T1h4cWxPVWxsMmcwdV8xWUF2RmJlVi00NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUQ5Qi9CMkE1NzdDMjI3NDUxMUYwQUVEMkI0NjlDNEY5QUUwMi9md09YeHFsT1Vs bDJnMHVfMVlBdkZiZVYtNDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaVWYaTyZrhg+orW1QSwOr0RneDc/CnLB68JR+cCSljj2Gz5ifCFUH STeLC6yQDdbVO7Xd2wdCsK8XGwRkkrbkVqghN+zuocsH8TCiKcmiS5Ck4nTGbKPg 3q9YUQsEKUxEDAiIYe4VrpaXehOE8SKRH5a5eEw69WJIDsYfvYutk2CESr5RCaDp VA8mpUGJG/xa5ha8EyXflYZHkoiPSc7MurWPBLdnXUExIcviMI4GOo/njHhvSamM twBM1rkXIg6eNEE7D7CM1nMihmrLtTaubznLRA3DoqmRnR8quIRw5XalcUZUkIa2 mB6Kxyctt6pYwApDJk3tZ3VFpwHAKbDJ -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:50 2025 by rpki-client