This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft File: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft (raw, json) Hash identifier: nkz2qzci7ze/d4FlgWmHRHiaUjNFM26KoULTK4Jd89A= Subject key identifier: B8:07:77:97:1E:08:94:83:68:97:63:B2:91:EA:C0:3C:3F:EF:37:14 Authority key identifier: 7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2 Certificate issuer: /CN=A91AF4CC/serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft Manifest number: DA Signing time: Tue 23 Dec 2025 04:33:46 +0000 Manifest this update: Tue 23 Dec 2025 04:33:46 +0000 Manifest next update: Tue 30 Dec 2025 04:33:46 +0000 Files and hashes: 1: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl (hash: BPUkJKK2YbyDBbL54P2P5PNXZfqrCTeS1Kpb++d5bgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF4CC, serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2 Validity Not Before: Dec 23 04:33:46 2025 GMT Not After : Dec 30 04:33:46 2025 GMT Subject: CN=694a1baa-e90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:3d:65:21:0c:54:33:4f:1f:09:6d:a3:b0: 0c:60:3f:d5:eb:a6:0f:ef:00:d5:4f:37:09:45:f0: af:af:88:6a:58:44:43:c1:c3:fb:3d:d9:9b:ea:b8: 8c:a9:d2:96:6a:40:e0:e7:30:fa:74:05:d1:ff:2a: dc:00:a1:07:d3:f9:f9:d5:42:2d:dd:44:f0:b6:dc: 35:a8:59:12:c7:4f:69:18:b5:2c:21:65:3e:0d:14: d4:04:39:4e:b4:c0:d6:5a:73:14:2f:ac:df:e9:26: 89:1c:59:38:e2:9a:06:14:68:ef:54:7c:22:a2:1b: c2:8d:b1:6a:79:06:42:9b:75:4a:74:71:ad:4c:0a: de:38:df:0f:e7:c9:0e:08:4b:9f:20:ba:23:67:62: 1c:1f:33:1b:b3:8f:30:50:c4:09:01:ed:76:84:6e: 7a:2b:41:6e:b1:1d:0b:4b:fd:a4:4d:f5:54:81:25: 9e:96:9d:38:36:ea:66:02:be:d9:dc:f0:a0:9f:1f: cd:dd:c7:48:d2:1b:0a:0a:72:ef:86:33:0e:6d:c1: 1e:c7:b8:83:fb:49:04:4a:ec:8a:79:4c:6d:e8:8d: 49:4d:57:00:a8:38:9b:5a:c1:5a:e4:61:32:f2:de: 18:34:ea:c5:f9:4e:8a:56:b1:0e:6d:1f:57:76:90: 1d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:07:77:97:1E:08:94:83:68:97:63:B2:91:EA:C0:3C:3F:EF:37:14 X509v3 Authority Key Identifier: keyid:7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:98:07:49:b7:20:8e:33:8d:57:a7:b6:1e:1d:88:6a:e8:ba: 49:19:3c:80:35:72:3f:88:7d:dd:a9:82:6a:d9:ee:7d:48:aa: 9a:47:b7:6e:68:cb:2f:e4:e0:8c:cd:e7:2d:13:de:ef:ae:ea: 71:b3:21:9b:68:c1:a3:58:c6:6d:a0:5d:e3:fe:fe:5d:b0:5a: 39:cd:a3:b2:8e:96:bc:ea:9e:d4:c3:01:e0:bf:19:5a:6e:37: 04:84:12:e9:55:e6:cf:60:e7:bb:77:88:6c:7e:fb:ee:52:64: 3a:06:84:e8:e3:d2:c7:76:9d:f0:6e:b1:fe:2a:41:13:c5:2a: ea:d5:9b:22:54:dd:c6:04:06:3b:72:f7:57:d4:a1:43:bc:59: 21:c8:f5:49:28:d8:47:3c:00:16:7c:fc:0b:8b:c0:33:d0:a7: 27:fc:56:f3:d4:8e:45:48:e0:0f:22:3b:b6:4d:fd:98:54:0f: 9e:50:67:ab:26:8a:89:bc:a5:21:3b:7b:98:32:24:d3:1d:e7: 1a:d8:a2:d3:e9:d2:85:97:f7:99:13:ad:4b:cd:b6:08:9c:7f: 22:bf:46:1e:59:6a:b5:60:0b:50:e6:e7:74:b9:03:61:58:f5: 2a:30:b5:31:19:a9:fb:c2:af:bc:92:b8:c4:4c:d0:f6:c1:bb: 1a:31:28:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0Q0MxMTAvBgNVBAUTKDdFMzlGRTIxRjlEMTU4NUNBRUY1OThGQjdENkEwNkVC RkQzMTA2QzIwHhcNMjUxMjIzMDQzMzQ2WhcNMjUxMjMwMDQzMzQ2WjAYMRYwFAYD VQQDDA02OTRhMWJhYS1lOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruU9ZSEMVDNPHwlto7AMYD/V66YP7wDVTzcJRfCvr4hqWERDwcP7Pdmb6riM qdKWakDg5zD6dAXR/yrcAKEH0/n51UIt3UTwttw1qFkSx09pGLUsIWU+DRTUBDlO tMDWWnMUL6zf6SaJHFk44poGFGjvVHwiohvCjbFqeQZCm3VKdHGtTAreON8P58kO CEufILojZ2IcHzMbs48wUMQJAe12hG56K0FusR0LS/2kTfVUgSWelp04NupmAr7Z 3PCgnx/N3cdI0hsKCnLvhjMObcEex7iD+0kESuyKeUxt6I1JTVcAqDibWsFa5GEy 8t4YNOrF+U6KVrEObR9XdpAd5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgHd5ce CJSDaJdjspHqwDw/7zcUMB8GA1UdIwQYMBaAFH45/iH50VhcrvWY+31qBuv9MQbC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjRDQy9ENTgxQzFCQzkx NDgxMUVGODdFQURENTJDNEY5QUUwMi9mam4tSWZuUldGeXU5Wmo3ZldvRzZfMHhC c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Zqbi1JZm5SV0Z5dTlaajdmV29HNl8weEJzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjRDQy9ENTgxQzFCQzkxNDgxMUVGODdFQURENTJDNEY5QUUwMi9mam4tSWZuUldG eXU5Wmo3ZldvRzZfMHhCc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdmAdJtyCOM41Xp7YeHYhq6LpJGTyANXI/iH3dqYJq2e59SKqaR7du aMsv5OCMzectE97vrupxsyGbaMGjWMZtoF3j/v5dsFo5zaOyjpa86p7UwwHgvxla bjcEhBLpVebPYOe7d4hsfvvuUmQ6BoTo49LHdp3wbrH+KkETxSrq1ZsiVN3GBAY7 cvdX1KFDvFkhyPVJKNhHPAAWfPwLi8Az0Kcn/Fbz1I5FSOAPIju2Tf2YVA+eUGer JoqJvKUhO3uYMiTTHeca2KLT6dKFl/eZE61LzbYInH8iv0YeWWq1YAtQ5ud0uQNh WPUqMLUxGan7wq+8krjETND2wbsaMSgb -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:58 2025 by rpki-client