This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft File: FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft (raw, json) Hash identifier: wFPzq0t13cNBYcKJ84HEdOUIWKoTTXUK+cj/Owk2y+Y= Subject key identifier: 88:1E:E0:E9:CD:3F:8A:7E:99:A1:BC:EC:C0:08:50:12:1E:0E:5B:CE Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 Certificate issuer: /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft Manifest number: 011D Signing time: Tue 23 Dec 2025 03:45:32 +0000 Manifest this update: Tue 23 Dec 2025 03:45:32 +0000 Manifest next update: Tue 30 Dec 2025 03:45:32 +0000 Files and hashes: 1: FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl (hash: 8Et66vt//5/Xk7mFXXXkkDfY+/ACgpFx5ZLvgygzC+s=) 2: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (hash: cjQ8z/DvzlqVIyc0XMrCXb6k6xXs+7KEwBIQYpqVtTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5EBA, serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Validity Not Before: Dec 23 03:45:32 2025 GMT Not After : Dec 30 03:45:32 2025 GMT Subject: CN=694a105c-1d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a0:22:fc:66:14:b7:31:78:1c:45:e3:24:68: 85:51:c5:9d:13:4f:23:cb:b6:a6:b4:81:2b:ab:0b: 8d:41:55:ba:1c:4b:56:86:ac:54:e3:ad:0e:32:4a: e7:8e:91:80:b1:b7:50:6c:df:c2:46:05:db:35:84: e6:09:c9:aa:0d:c3:cc:d8:e9:c6:9a:3e:60:b4:ae: 6d:65:ec:eb:2b:fe:a5:3e:7e:8c:28:4a:ae:1f:8c: 3e:db:06:ff:ca:4f:56:8f:63:8a:bd:05:60:0d:f5: 68:84:98:b8:e0:d7:ce:52:3a:65:44:32:7d:04:b8: 8e:6b:bf:27:70:d4:81:9f:c9:78:ab:e3:95:4c:74: fa:cf:ab:b2:43:cd:50:30:1b:5d:d1:db:95:0a:5d: 45:5f:01:33:fd:76:ba:f3:8d:68:50:e9:0c:7c:01: e6:36:e8:1e:50:29:9f:0f:00:e6:b2:b1:f1:9e:ca: f7:97:a4:af:4d:e2:19:08:86:9e:81:86:37:de:22: 9c:8c:5e:53:e6:9d:6d:e5:99:7a:47:3e:00:fd:1a: fd:dc:e9:4c:2a:1e:71:27:c8:59:77:54:9e:ac:25: 52:81:e4:e3:16:32:18:6f:b8:db:70:18:6f:70:33: e8:75:2d:3f:b2:b7:25:79:c6:d9:b9:6c:b7:42:03: f8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1E:E0:E9:CD:3F:8A:7E:99:A1:BC:EC:C0:08:50:12:1E:0E:5B:CE X509v3 Authority Key Identifier: keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:94:06:08:f9:ae:ef:4f:1a:26:cb:be:18:32:b1:05:b2:9a: 86:22:bc:cb:45:41:ab:c3:02:37:be:36:ba:9e:31:6e:85:cb: 47:46:7b:72:93:31:2b:10:17:f3:ac:1a:29:ad:f2:fb:2a:43: 91:5d:44:cd:80:4f:9a:70:8a:90:6c:dc:90:ad:7f:71:38:6e: 85:88:be:0a:e7:b8:24:b7:b7:60:8f:18:24:a4:bd:30:db:5f: 92:86:24:24:c9:89:4b:10:ce:d8:e5:57:58:46:97:68:36:f4: d2:6a:c3:2c:9f:43:d9:13:8e:92:23:1e:96:4f:e9:0d:56:5f: 8b:a3:80:b2:d4:c1:65:9a:cf:e0:a1:30:5a:4e:1f:fe:f8:60: d5:7c:31:a9:51:93:84:fa:82:7e:0e:b5:4a:73:f7:b6:13:09: fe:e3:fb:7d:e3:d0:2b:45:c2:65:54:2c:dc:75:d6:52:27:b5: 5a:12:72:47:c7:48:59:be:05:80:3b:f3:37:03:a1:b4:b1:0e: 5c:69:67:87:87:29:7e:58:ea:51:0a:67:12:bc:04:da:06:2f: da:49:9f:45:72:15:96:d2:47:fc:69:1a:39:52:ee:1d:13:8a: 1c:bc:fb:c1:3e:16:be:66:b8:0b:7c:71:c3:66:84:ee:37:fe: a6:7b:ba:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFQkExMTAvBgNVBAUTKDE1NkQ0QTlDNkYxNUVCMkI0QjNGMzY3RDY5RkFBMjUx MDEyODA3ODgwHhcNMjUxMjIzMDM0NTMyWhcNMjUxMjMwMDM0NTMyWjAYMRYwFAYD VQQDDA02OTRhMTA1Yy0xZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqAi/GYUtzF4HEXjJGiFUcWdE08jy7amtIErqwuNQVW6HEtWhqxU460OMkrn jpGAsbdQbN/CRgXbNYTmCcmqDcPM2OnGmj5gtK5tZezrK/6lPn6MKEquH4w+2wb/ yk9Wj2OKvQVgDfVohJi44NfOUjplRDJ9BLiOa78ncNSBn8l4q+OVTHT6z6uyQ81Q MBtd0duVCl1FXwEz/Xa6841oUOkMfAHmNugeUCmfDwDmsrHxnsr3l6SvTeIZCIae gYY33iKcjF5T5p1t5Zl6Rz4A/Rr93OlMKh5xJ8hZd1SerCVSgeTjFjIYb7jbcBhv cDPodS0/srclecbZuWy3QgP49QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIge4OnN P4p+maG87MAIUBIeDlvOMB8GA1UdIwQYMBaAFBVtSpxvFesrSz82fWn6olEBKAeI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVCQS83MkU1NENGRTJD NTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5dExQelo5YWZxaVVRRW9C NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXMUtuRzhWNnl0TFB6WjlhZnFpVVFFb0I0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUVCQS83MkU1NENGRTJDNTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5 dExQelo5YWZxaVVRRW9CNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3lAYI+a7vTxomy74YMrEFspqGIrzLRUGrwwI3vja6njFuhctHRnty kzErEBfzrBoprfL7KkORXUTNgE+acIqQbNyQrX9xOG6FiL4K57gkt7dgjxgkpL0w 21+ShiQkyYlLEM7Y5VdYRpdoNvTSasMsn0PZE46SIx6WT+kNVl+Lo4Cy1MFlms/g oTBaTh/++GDVfDGpUZOE+oJ+DrVKc/e2Ewn+4/t949ArRcJlVCzcddZSJ7VaEnJH x0hZvgWAO/M3A6G0sQ5caWeHhyl+WOpRCmcSvATaBi/aSZ9FchWW0kf8aRo5Uu4d E4ocvPvBPha+ZrgLfHHDZoTuN/6me7p3 -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:00 2025 by rpki-client