This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft File: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft (raw, json) Hash identifier: GMWXWgShFZiADRRTSAYq+Lh01RO5pUXLNPClEId+E/E= Subject key identifier: 60:CE:D9:3B:E5:8E:3E:F7:97:B4:96:E2:C3:D1:00:F1:52:74:04:D5 Authority key identifier: 16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA Certificate issuer: /CN=A9197CBD/serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft Manifest number: 016B Signing time: Tue 23 Dec 2025 02:54:54 +0000 Manifest this update: Tue 23 Dec 2025 02:54:54 +0000 Manifest next update: Tue 30 Dec 2025 02:54:54 +0000 Files and hashes: 1: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl (hash: 0URtpOmnHFk4MFEob5+QCWiKWLTUhG+FDqiEWzRX5Ks=) 2: BD16D2BCB11411EE9B803C66C4F9AE02.roa (hash: lR8Bw6f2BJOLO8ooe7J/r1W5noPvKu/D4s9lgSl+fj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CBD, serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA Validity Not Before: Dec 23 02:54:54 2025 GMT Not After : Dec 30 02:54:54 2025 GMT Subject: CN=694a047e-64e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fa:53:2a:36:1f:83:02:00:6a:0b:e8:3c:95: 93:16:51:d9:8c:bb:cc:16:15:8b:31:92:db:01:1c: 70:09:11:de:97:0c:fc:2d:8a:a2:a6:71:5c:62:2d: a1:26:3f:ac:17:fb:00:6a:af:7d:5d:f8:9a:a1:ec: ab:4f:96:6e:84:22:5b:71:c3:f0:7b:28:9f:f7:fd: 59:8d:68:4b:96:72:5b:52:ed:11:7c:1d:86:8a:1b: e6:88:df:97:4c:4f:91:48:4d:c4:7a:cf:39:5b:90: 9f:ed:52:08:df:d1:36:f6:7b:18:02:28:88:63:78: 55:ff:8f:e9:30:8e:11:e5:44:b7:f2:7c:31:85:7b: 92:0d:37:8b:2f:0c:68:06:14:cb:9c:b4:42:6d:f8: 2f:8c:7f:a4:21:79:6f:55:63:45:bc:d9:6f:a9:06: 14:e0:20:ad:5a:dd:0b:e8:07:87:05:66:b9:1d:e0: 25:bd:96:6e:43:9f:53:44:b1:b1:5e:16:5f:ae:8b: dd:f8:b7:83:cd:10:9e:a0:3f:4a:85:13:11:1d:c4: 33:04:3a:1a:79:77:99:af:87:e6:f4:d6:41:cd:7a: ed:8c:fe:a7:c6:9f:e0:ad:06:eb:36:71:69:3b:a7: f9:9b:47:bd:0c:a9:fe:c0:f0:6a:f3:f3:06:f1:09: f3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CE:D9:3B:E5:8E:3E:F7:97:B4:96:E2:C3:D1:00:F1:52:74:04:D5 X509v3 Authority Key Identifier: keyid:16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:de:ce:18:73:c2:22:10:0b:b0:9b:35:10:59:76:5f:13:bc: 1a:7e:5c:5d:3d:3e:c8:f4:92:41:4e:c7:8d:08:ca:ab:03:29: 7d:e6:35:38:a6:43:d5:ae:14:5a:a9:ef:0a:7e:76:1e:10:e1: 29:29:69:8e:df:99:03:81:47:e8:e2:56:8a:20:54:bf:78:d1: c1:1e:4b:ca:70:e0:f4:9f:ef:5a:af:ec:d4:80:f1:36:f3:c5: ed:4d:ed:84:0d:69:f2:3b:e9:5a:68:2b:28:ee:f9:2d:de:04: 68:d6:75:79:8d:3e:91:b0:fa:f5:d0:f9:10:d8:30:ab:ae:d7: d3:e5:3d:b8:65:f9:bd:8c:19:9a:1b:61:77:d1:b8:49:e7:59: cb:e2:16:e7:8c:73:53:c4:de:fb:41:59:51:23:ae:1d:3b:0a: a1:ac:2a:88:b8:9e:fd:5b:f1:e9:12:22:96:b4:b4:89:ed:19: b6:dd:a8:96:38:d8:7f:c6:e0:50:74:50:f6:c9:dd:40:cb:cb: e0:e5:fa:c6:36:ab:49:fc:33:73:27:fb:40:ac:e9:f4:7b:c4: 88:4b:93:f3:8b:d3:8e:ff:6f:4c:39:92:67:d1:b7:38:3c:79: f0:57:bd:95:2f:1d:fa:ad:4a:0f:27:22:08:77:66:5b:48:f2: d0:79:f8:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDQkQxMTAvBgNVBAUTKDE2N0Q2RUMzMkFEMEIzNTgxNUYyODg0N0FERDc5NzBF QjY3RjJEQkEwHhcNMjUxMjIzMDI1NDU0WhcNMjUxMjMwMDI1NDU0WjAYMRYwFAYD VQQDDA02OTRhMDQ3ZS02NGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vpTKjYfgwIAagvoPJWTFlHZjLvMFhWLMZLbARxwCRHelwz8LYqipnFcYi2h Jj+sF/sAaq99XfiaoeyrT5ZuhCJbccPweyif9/1ZjWhLlnJbUu0RfB2GihvmiN+X TE+RSE3Ees85W5Cf7VII39E29nsYAiiIY3hV/4/pMI4R5US38nwxhXuSDTeLLwxo BhTLnLRCbfgvjH+kIXlvVWNFvNlvqQYU4CCtWt0L6AeHBWa5HeAlvZZuQ59TRLGx XhZfrovd+LeDzRCeoD9KhRMRHcQzBDoaeXeZr4fm9NZBzXrtjP6nxp/grQbrNnFp O6f5m0e9DKn+wPBq8/MG8QnzXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDO2Tvl jj73l7SW4sPRAPFSdATVMB8GA1UdIwQYMBaAFBZ9bsMq0LNYFfKIR63Xlw62fy26 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCRC8zRTQwMDY5OEIx MTQxMUVFOTVFNzQzNjVDNEY5QUUwMi9GbjF1d3lyUXMxZ1Y4b2hIcmRlWERyWl9M Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZuMXV3eXJRczFnVjhvaEhyZGVYRHJaX0xiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NCRC8zRTQwMDY5OEIxMTQxMUVFOTVFNzQzNjVDNEY5QUUwMi9GbjF1d3lyUXMx Z1Y4b2hIcmRlWERyWl9MYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP3s4Yc8IiEAuwmzUQWXZfE7waflxdPT7I9JJBTseNCMqrAyl95jU4 pkPVrhRaqe8KfnYeEOEpKWmO35kDgUfo4laKIFS/eNHBHkvKcOD0n+9ar+zUgPE2 88XtTe2EDWnyO+laaCso7vkt3gRo1nV5jT6RsPr10PkQ2DCrrtfT5T24Zfm9jBma G2F30bhJ51nL4hbnjHNTxN77QVlRI64dOwqhrCqIuJ79W/HpEiKWtLSJ7Rm23aiW ONh/xuBQdFD2yd1Ay8vg5frGNqtJ/DNzJ/tArOn0e8SIS5Pzi9OO/29MOZJn0bc4 PHnwV72VLx36rUoPJyIId2ZbSPLQefjn -----END CERTIFICATE-----Generated at Wed Dec 24 21:23:58 2025 by rpki-client