This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json) Hash identifier: pFGtQiNTq21H/nMRh45UI7MqFrOSNDRUrgp92WroYzw= Subject key identifier: 18:EE:BC:B5:BC:7C:14:E3:08:CC:27:CA:DB:46:45:62:61:70:53:CC Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Certificate serial: 34EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft Manifest number: 398E Signing time: Mon 22 Dec 2025 14:34:42 +0000 Manifest this update: Mon 22 Dec 2025 14:34:42 +0000 Manifest next update: Mon 29 Dec 2025 14:34:42 +0000 Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: LOr2fLF/85L4Bribv4UeSKSc7jZpfoCfmZ5vtd5ZM1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13551 (0x34ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Validity Not Before: Dec 22 14:34:42 2025 GMT Not After : Dec 29 14:34:42 2025 GMT Subject: CN=69495702-821a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1d:c4:b7:48:24:70:f4:bd:db:d3:71:9a:41: 9f:b4:82:eb:81:59:06:e7:71:7e:b9:57:14:e5:6a: 59:7c:56:8a:db:1b:92:f1:d2:be:1a:83:02:10:09: 65:89:81:f2:82:97:c1:0d:a9:9e:16:df:22:b8:4e: 5c:40:c3:ef:08:4c:60:6d:1f:34:71:b3:ed:1a:c7: cc:3b:50:a4:93:1c:41:d0:ed:79:93:ea:53:c3:e5: 70:0c:a1:31:8b:94:54:b3:d1:6b:01:0a:59:ee:aa: 4a:52:29:5a:b9:6e:11:d4:c6:67:00:a7:4f:ca:6a: c3:bc:00:ed:79:f7:2b:a8:21:f7:16:e1:6d:d6:f2: 19:8d:9e:0d:ae:7b:5a:22:ef:1f:6d:4e:b0:7a:be: a9:bc:56:bf:65:1c:2e:52:71:6e:d9:29:23:18:48: 17:2e:c9:a7:69:fb:42:b8:4c:0e:98:9d:50:d8:a4: aa:cc:e3:ff:29:14:11:21:8c:b7:7b:5d:c8:34:b3: aa:24:4d:d1:9a:d0:7a:5f:0b:12:42:ee:ff:64:2d: a2:d2:3e:fd:da:d7:6d:26:a9:7c:1e:b4:7f:bd:dd: 0e:66:c1:c9:e1:7c:43:33:cd:e5:d6:27:77:91:84: e1:15:16:9f:b1:96:0e:a2:5b:52:58:79:c5:cc:c3: 75:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EE:BC:B5:BC:7C:14:E3:08:CC:27:CA:DB:46:45:62:61:70:53:CC X509v3 Authority Key Identifier: keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:35:17:fb:2b:2d:98:b4:ba:a8:57:60:07:3d:34:91:45:8d: 1d:b3:88:ed:20:31:81:ea:5b:9f:fb:85:e7:41:b7:59:85:03: d2:6e:9f:b8:9f:49:83:a5:49:0a:d9:f5:9f:18:14:46:05:a3: b3:b9:8b:77:4e:6d:2c:a5:1a:b7:78:26:59:78:bd:1b:49:bd: 72:a5:35:d0:2a:30:2d:bb:8a:68:33:cd:08:5a:26:09:88:bb: 73:40:fc:14:ce:12:73:e6:6f:9a:01:46:87:0e:50:aa:7a:bc: bf:26:f8:38:c0:bb:90:27:17:83:cd:2b:f6:59:87:35:f3:88: 24:ff:01:15:34:d5:2b:27:94:65:c3:2b:fc:9c:1c:57:89:5f: ab:6d:86:55:49:eb:68:d2:0b:fa:08:3f:cf:59:03:6d:f0:b9: f4:89:bd:b0:39:7f:ab:a6:c9:5c:dc:24:20:57:bb:63:e1:63: 97:75:71:bd:a0:2e:de:06:f2:8c:10:2e:f9:69:44:81:0f:cf: e6:d1:d2:63:d1:19:37:dc:db:23:44:3e:87:11:b1:53:27:8c: 70:fb:51:8e:50:cf:53:8d:6a:20:7d:39:84:a1:53:eb:57:45: b4:a8:12:f9:e0:d2:13:6f:30:e9:87:11:34:ef:38:8d:e0:49: d9:b5:4a:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDE2MjEwREM2NTJBMTYwREVFNEU0MDE1QkJDQjQwOUZB ODc3MjQ2NDAwHhcNMjUxMjIyMTQzNDQyWhcNMjUxMjI5MTQzNDQyWjAYMRYwFAYD VQQDDA02OTQ5NTcwMi04MjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1B3Et0gkcPS929NxmkGftILrgVkG53F+uVcU5WpZfFaK2xuS8dK+GoMCEAll iYHygpfBDameFt8iuE5cQMPvCExgbR80cbPtGsfMO1CkkxxB0O15k+pTw+VwDKEx i5RUs9FrAQpZ7qpKUilauW4R1MZnAKdPymrDvADtefcrqCH3FuFt1vIZjZ4Nrnta Iu8fbU6wer6pvFa/ZRwuUnFu2SkjGEgXLsmnaftCuEwOmJ1Q2KSqzOP/KRQRIYy3 e13INLOqJE3RmtB6XwsSQu7/ZC2i0j792tdtJql8HrR/vd0OZsHJ4XxDM83l1id3 kYThFRafsZYOoltSWHnFzMN16QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjuvLW8 fBTjCMwnyttGRWJhcFPMMB8GA1UdIwQYMBaAFBYhDcZSoWDe5OQBW7y0CfqHckZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlON2s1QUZidkxRSi1vZHlS a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZpRU54bEtoWU43azVBRmJ2TFFKLW9keVJrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlO N2s1QUZidkxRSi1vZHlSa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBNRf7Ky2YtLqoV2AHPTSRRY0ds4jtIDGB6luf+4XnQbdZhQPSbp+4 n0mDpUkK2fWfGBRGBaOzuYt3Tm0spRq3eCZZeL0bSb1ypTXQKjAtu4poM80IWiYJ iLtzQPwUzhJz5m+aAUaHDlCqery/Jvg4wLuQJxeDzSv2WYc184gk/wEVNNUrJ5Rl wyv8nBxXiV+rbYZVSeto0gv6CD/PWQNt8Ln0ib2wOX+rpslc3CQgV7tj4WOXdXG9 oC7eBvKMEC75aUSBD8/m0dJj0Rk33NsjRD6HEbFTJ4xw+1GOUM9TjWogfTmEoVPr V0W0qBL54NITbzDphxE07ziN4EnZtUp2 -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:04 2025 by rpki-client