This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json) Hash identifier: /uHTRfeuwJvSccQ8gCQS/yZYAs8AQ/PMO9vWd1yvDAI= Subject key identifier: 8D:5D:89:03:26:75:59:64:51:2D:72:0A:A0:F9:73:AD:E0:4B:6C:64 Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft Manifest number: 0226 Signing time: Tue 23 Dec 2025 01:07:17 +0000 Manifest this update: Tue 23 Dec 2025 01:07:17 +0000 Manifest next update: Tue 30 Dec 2025 01:07:17 +0000 Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: cQ/zlItYuAjPVE6BpC3SisDvh26BFkYbH/jn5xpkFJc=) 2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 5eORjOKdJA5R5JqKv9kUobgVioj38QF3cQAhkx2yC1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Validity Not Before: Dec 23 01:07:17 2025 GMT Not After : Dec 30 01:07:17 2025 GMT Subject: CN=6949eb45-21d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:14:81:53:e2:8b:ab:bf:f0:c2:0e:0f:df:0d: 2c:8a:eb:31:13:ba:96:ad:9a:9e:eb:ca:f4:52:7e: ed:8a:79:e7:e9:1a:c8:36:25:f8:3e:52:fd:ef:70: 91:07:5a:06:16:53:84:70:35:36:0d:9e:f3:83:fb: 2b:60:07:44:1e:41:b0:87:56:50:8d:09:c1:85:0a: 78:4a:5e:5e:7d:1d:68:3b:7b:e4:f4:e8:d3:bf:09: 07:85:d8:e6:f2:f3:5b:ef:b2:c9:d3:11:50:d8:c4: b0:fd:e5:ac:9a:a2:70:10:7b:76:50:f7:b9:51:fa: 4a:42:b0:ee:46:c6:f9:31:a5:98:ca:eb:46:ba:ed: c0:25:1a:86:5c:a8:d6:ea:10:b3:45:43:24:6d:d5: 4c:ad:94:cf:22:08:c7:09:05:fd:16:91:cb:65:1e: 47:f3:6e:70:5d:7c:55:59:06:c4:0b:c4:9f:4f:8c: 47:87:ad:c3:2b:78:44:72:be:7a:a9:5c:5d:2e:e4: 6e:ca:3a:fd:92:d1:d3:c4:3c:f3:49:2b:db:dd:d1: 6e:a3:75:56:0f:27:7e:d3:38:4e:03:bc:13:e4:69: e7:6e:ac:64:bc:8d:94:f3:00:37:c6:c0:ac:b4:92: 79:c6:45:94:ec:cc:65:1e:b5:14:3c:3d:d4:8a:77: 62:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5D:89:03:26:75:59:64:51:2D:72:0A:A0:F9:73:AD:E0:4B:6C:64 X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4f:a9:61:b6:58:f2:12:7b:1c:c2:41:9f:4f:8e:d0:84:f1: 31:79:af:a6:29:ff:60:61:28:2a:ce:a3:81:8a:aa:fa:76:2a: 2f:f7:b4:f6:2e:75:58:69:43:13:88:81:19:fe:f4:58:46:dd: 1d:d9:c8:35:f8:5f:3c:43:8c:5f:a3:b0:a5:ec:e0:3b:05:ec: 1b:0f:d9:2b:5a:90:bc:d4:31:a0:20:98:2d:26:66:cc:04:c7: 7b:d6:ba:c2:cc:26:4c:9a:ec:79:9f:4f:b1:2f:e1:40:f8:c7: 77:6f:91:15:48:88:9c:22:79:55:86:3b:a9:a2:3d:54:05:15: d3:06:7b:f3:8f:cc:87:eb:3f:e9:01:17:89:ce:bd:a7:c1:62: 42:64:65:b0:cc:5b:b2:14:5a:8c:c0:b7:15:10:eb:eb:17:2d: 42:ed:c1:e5:6c:e7:39:3f:44:40:2c:ee:16:d1:50:17:6e:f4: 94:bb:87:f7:72:2e:a0:e1:f4:5f:81:da:24:38:43:b6:8f:a7: 47:54:0f:c1:50:83:37:36:47:b9:9c:e0:a9:50:66:a6:c7:b1: d3:da:a8:30:3b:5e:94:f1:66:49:f8:36:43:5d:25:60:da:76: c0:15:fd:01:dc:2d:3b:a5:88:34:43:fb:26:87:89:58:ae:d7: a8:06:0b:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjUxMjIzMDEwNzE3WhcNMjUxMjMwMDEwNzE3WjAYMRYwFAYD VQQDDA02OTQ5ZWI0NS0yMWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAghSBU+KLq7/wwg4P3w0siusxE7qWrZqe68r0Un7tinnn6RrINiX4PlL973CR B1oGFlOEcDU2DZ7zg/srYAdEHkGwh1ZQjQnBhQp4Sl5efR1oO3vk9OjTvwkHhdjm 8vNb77LJ0xFQ2MSw/eWsmqJwEHt2UPe5UfpKQrDuRsb5MaWYyutGuu3AJRqGXKjW 6hCzRUMkbdVMrZTPIgjHCQX9FpHLZR5H825wXXxVWQbEC8SfT4xHh63DK3hEcr56 qVxdLuRuyjr9ktHTxDzzSSvb3dFuo3VWDyd+0zhOA7wT5GnnbqxkvI2U8wA3xsCs tJJ5xkWU7MxlHrUUPD3UindiIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1diQMm dVlkUS1yCqD5c63gS2xkMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0 cGpRdndQUkdrWWRlb19rb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/T6lhtljyEnscwkGfT47QhPExea+mKf9gYSgqzqOBiqr6diov97T2 LnVYaUMTiIEZ/vRYRt0d2cg1+F88Q4xfo7Cl7OA7BewbD9krWpC81DGgIJgtJmbM BMd71rrCzCZMmux5n0+xL+FA+Md3b5EVSIicInlVhjupoj1UBRXTBnvzj8yH6z/p AReJzr2nwWJCZGWwzFuyFFqMwLcVEOvrFy1C7cHlbOc5P0RALO4W0VAXbvSUu4f3 ci6g4fRfgdokOEO2j6dHVA/BUIM3Nke5nOCpUGamx7HT2qgwO16U8WZJ+DZDXSVg 2nbAFf0B3C07pYg0Q/smh4lYrteoBgui -----END CERTIFICATE-----Generated at Tue Dec 23 12:02:13 2025 by rpki-client