This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json) Hash identifier: jbO3uGiz3QmQ9UUurSdW/Sq20V3GC4056IvJzIc0pIo= Subject key identifier: AF:D1:95:A5:1C:DB:E2:67:B2:9E:E0:E8:84:44:7E:98:97:6B:58:6A Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft Manifest number: 023A Signing time: Tue 23 Dec 2025 00:58:31 +0000 Manifest this update: Tue 23 Dec 2025 00:58:30 +0000 Manifest next update: Tue 30 Dec 2025 00:58:30 +0000 Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: HF1ecgaSTXdQBd2OnguoplQJIzfxODuR1qWJlw8e8+4=) 2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: hlcOiwDISzas5tiOnv5T5pSK2UpZ6cfJveUb3LnTEYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Validity Not Before: Dec 23 00:58:30 2025 GMT Not After : Dec 30 00:58:30 2025 GMT Subject: CN=6949e937-24ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:91:21:fb:08:aa:dd:dd:6f:91:6b:7a:b4:8a: 2e:30:9c:65:79:33:4e:22:b1:74:f7:27:e4:69:fc: f6:ef:2d:93:2d:12:e6:f8:0b:53:fc:21:46:cc:cb: d1:bf:d8:80:ba:70:92:99:91:d6:ab:4c:96:0a:3f: f4:4a:2b:dc:f5:c6:be:80:e7:d7:28:81:10:d9:1e: eb:99:e2:3d:a3:34:a6:8f:36:37:06:93:3b:b6:88: 31:cf:ac:21:29:87:97:99:6d:33:8d:2b:3b:1b:13: e3:70:40:b3:d8:ce:96:de:77:7a:91:44:f7:0b:ec: 6b:d7:1d:3b:4f:b0:58:05:b9:af:e2:d8:30:70:bd: 52:76:ac:ad:fe:99:af:31:64:af:ec:d0:bf:ab:3a: d0:05:19:6a:06:c8:30:2a:3f:ac:1a:3d:46:b6:c2: 13:e6:87:e2:60:79:02:50:a0:28:4f:fd:15:cb:cb: c3:73:0a:7d:4b:fe:b4:48:e7:09:76:7e:66:61:dc: 0c:d5:0c:26:55:99:cd:f3:9d:9d:25:39:e0:21:b5: 3e:14:0e:da:95:70:73:64:ba:91:be:21:9d:f2:f5: 2b:23:47:e6:7d:b1:9f:c4:70:15:0e:00:c6:60:47: 1b:93:ee:e4:b5:19:77:d6:e7:2c:9e:e2:ad:12:65: 3a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D1:95:A5:1C:DB:E2:67:B2:9E:E0:E8:84:44:7E:98:97:6B:58:6A X509v3 Authority Key Identifier: keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:3f:f2:af:5f:c2:23:47:09:32:6d:5e:af:0a:98:5d:9e:c9: 4f:a9:cc:97:e4:a3:b6:ac:45:36:97:47:52:93:f0:08:c1:4b: 57:cd:31:c6:02:7f:e6:48:ca:08:7b:cd:9c:51:9d:55:62:3f: cd:0b:56:31:2c:af:3e:9a:c5:d0:2c:f6:bf:54:0c:02:5b:45: f9:1f:62:b2:3f:90:84:7b:af:75:15:ff:69:e7:f7:d6:aa:be: 0e:ff:c3:c8:56:09:52:e6:74:7d:1b:cf:ed:2e:6e:76:82:d2: 4c:1c:2c:93:1d:c9:60:43:79:27:21:39:57:a9:69:3c:05:f3: a1:8b:c6:40:78:ac:84:80:8c:80:76:97:a9:f0:6d:02:95:eb: 70:42:1f:c1:f3:0a:2a:61:70:68:e9:66:65:09:d5:10:65:72: 50:59:7f:91:30:e3:30:c6:fa:9e:f5:ee:54:33:5e:09:fb:80: 1b:10:4d:49:5e:f6:ce:86:ab:77:f0:19:9f:b1:97:26:35:80: 4e:d4:3c:fd:4e:c5:52:a6:64:81:12:7e:95:99:08:2c:ed:ef: dd:74:d2:b0:5c:56:8b:c7:14:13:8b:32:ff:f2:06:8f:b6:db: 30:55:2c:16:78:e1:96:eb:ac:c2:db:87:84:f2:f3:04:5e:03: 31:1b:a1:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQzQxMTAvBgNVBAUTKDE1RjBBNDA2ODVFNjlBNjQxREI3MEU4MkJGNzgwQTlB QkZFM0YxNTkwHhcNMjUxMjIzMDA1ODMwWhcNMjUxMjMwMDA1ODMwWjAYMRYwFAYD VQQDDA02OTQ5ZTkzNy0yNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pEh+wiq3d1vkWt6tIouMJxleTNOIrF09yfkafz27y2TLRLm+AtT/CFGzMvR v9iAunCSmZHWq0yWCj/0Sivc9ca+gOfXKIEQ2R7rmeI9ozSmjzY3BpM7togxz6wh KYeXmW0zjSs7GxPjcECz2M6W3nd6kUT3C+xr1x07T7BYBbmv4tgwcL1Sdqyt/pmv MWSv7NC/qzrQBRlqBsgwKj+sGj1GtsIT5ofiYHkCUKAoT/0Vy8vDcwp9S/60SOcJ dn5mYdwM1QwmVZnN852dJTngIbU+FA7alXBzZLqRviGd8vUrI0fmfbGfxHAVDgDG YEcbk+7ktRl31ucsnuKtEmU6zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/RlaUc 2+Jnsp7g6IREfpiXa1hqMB8GA1UdIwQYMBaAFBXwpAaF5ppkHbcOgr94Cpq/4/FZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBDNC9GM0E4NzJEQTdB MDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1tUWR0dzZDdjNnS21yX2o4 VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQ2tCb1htbW1RZHR3NkN2M2dLbXJfajhWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjBDNC9GM0E4NzJEQTdBMDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1t UWR0dzZDdjNnS21yX2o4VmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCP/KvX8IjRwkybV6vCphdnslPqcyX5KO2rEU2l0dSk/AIwUtXzTHG An/mSMoIe82cUZ1VYj/NC1YxLK8+msXQLPa/VAwCW0X5H2KyP5CEe691Ff9p5/fW qr4O/8PIVglS5nR9G8/tLm52gtJMHCyTHclgQ3knITlXqWk8BfOhi8ZAeKyEgIyA dpep8G0CletwQh/B8woqYXBo6WZlCdUQZXJQWX+RMOMwxvqe9e5UM14J+4AbEE1J XvbOhqt38BmfsZcmNYBO1Dz9TsVSpmSBEn6VmQgs7e/ddNKwXFaLxxQTizL/8gaP ttswVSwWeOGW66zC24eE8vMEXgMxG6H5 -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:38 2025 by rpki-client