This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft File: fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json) Hash identifier: FK+mIwrPVwDwVMnSLMllA6eQxzZYRbd1xzX4Wg1H1PM= Subject key identifier: 20:E6:96:C1:F6:61:B0:86:4C:43:70:E4:F5:7C:5E:01:72:97:1F:46 Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft Manifest number: 5C Signing time: Tue 09 Dec 2025 05:02:42 +0000 Manifest this update: Tue 09 Dec 2025 05:02:42 +0000 Manifest next update: Tue 16 Dec 2025 05:02:42 +0000 Files and hashes: 1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: HaCxFWx2o802He23YJKI9T5bIp0QViAK9Nvd4jv0knU=) 2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: qiTyDM4L6mog1MdHqwGPY5fp1OlDtmdk/4+Gu1p7lHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 05:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Validity Not Before: Dec 9 05:02:42 2025 GMT Not After : Dec 16 05:02:42 2025 GMT Subject: CN=6937ad72-5ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c8:f7:d2:6b:45:e8:83:9f:f5:6f:d6:79:53: 1a:3f:d9:54:56:08:e8:40:2b:0d:cc:75:ae:e3:1a: 97:4d:9e:f8:b7:4e:3d:8c:18:d3:67:f9:2a:d5:5c: 0f:8e:47:33:96:3f:f0:4a:4e:13:2d:2f:4a:01:d4: 87:59:76:73:c8:df:77:92:d8:6d:3c:a9:6c:7b:78: dc:5d:b8:4d:17:1d:33:83:db:f6:77:97:0b:8e:5f: f3:7b:7c:5e:12:68:d6:ae:5e:11:b2:85:74:77:fd: a0:e5:30:2d:aa:c8:e0:9d:ee:61:d2:af:09:e1:9b: b2:31:77:08:c5:1b:09:ac:95:4d:de:10:3d:db:b6: 25:a6:03:19:1f:35:92:ce:2d:0d:8c:07:77:a4:fd: d1:43:6f:2a:42:c6:74:ae:af:91:69:89:13:a7:98: 5f:6b:37:01:50:5c:2a:44:16:3c:9c:fc:89:8d:cc: 2d:87:88:54:2f:fd:a9:c6:08:c9:a3:a1:7b:dc:7a: fe:8c:61:d6:0a:88:72:d9:b1:08:0c:85:b6:a3:f6: e0:e5:d7:2a:ba:9b:c9:67:14:50:5f:85:30:58:d7: 56:6c:93:85:59:c3:79:8c:6a:76:5b:aa:c9:b0:db: 3c:98:3a:e9:9a:53:ac:b5:2c:e0:df:15:64:35:b8: ed:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E6:96:C1:F6:61:B0:86:4C:43:70:E4:F5:7C:5E:01:72:97:1F:46 X509v3 Authority Key Identifier: keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:8c:21:55:ac:f9:dd:08:e0:21:ff:cc:38:64:eb:12:f8:63: a8:bf:74:95:0b:bf:0c:23:21:1f:01:a8:f7:22:44:b4:cb:8b: 2b:4b:45:af:5e:41:32:b3:a4:fc:5f:ea:f5:65:79:84:62:a4: bc:a8:69:5a:5c:4d:3c:6f:a5:2a:72:ad:5b:78:02:7d:50:7a: 59:8d:0f:23:d0:42:0e:fc:53:8b:cd:c4:2d:10:b6:97:df:25: 13:43:cb:17:63:6c:68:56:83:dd:72:81:6d:c2:88:77:1f:48: be:3c:f8:f8:ca:bc:ba:80:4f:ac:10:13:fb:ab:9f:bb:a9:d2: fd:10:75:4d:a6:4a:3c:20:79:52:41:5f:c1:22:4d:79:d7:0a: 0d:4d:f3:26:82:7c:91:5b:e8:fa:d1:77:04:f7:c3:c5:d0:a0: 67:c1:b4:b1:4e:94:21:69:31:7c:09:a4:24:8e:19:3f:ad:1b: 71:ec:db:69:6d:f0:a0:31:b7:09:a8:bf:98:71:0b:85:39:d6: 5d:7c:7a:1c:00:a8:d7:6d:03:c9:7d:fc:43:39:16:23:74:45: 0d:55:c8:55:24:8e:89:70:d5:69:cd:81:68:e9:0a:fc:34:b5: d8:f0:7e:fe:79:97:80:ee:86:af:cd:cd:55:75:93:d8:0c:fb: 59:6e:99:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REM2ODExMC8GA1UEBRMoN0UzQUM2OTE5QzIyOEY5ODAxQUNGOTA3NUQ5MDhFNTEy REQ2REEzNDAeFw0yNTEyMDkwNTAyNDJaFw0yNTEyMTYwNTAyNDJaMBgxFjAUBgNV BAMTDTY5MzdhZDcyLTVlZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7yPfSa0Xog5/1b9Z5Uxo/2VRWCOhAKw3Mda7jGpdNnvi3Tj2MGNNn+SrVXA+O RzOWP/BKThMtL0oB1IdZdnPI33eS2G08qWx7eNxduE0XHTOD2/Z3lwuOX/N7fF4S aNauXhGyhXR3/aDlMC2qyOCd7mHSrwnhm7IxdwjFGwmslU3eED3btiWmAxkfNZLO LQ2MB3ek/dFDbypCxnSur5FpiROnmF9rNwFQXCpEFjyc/ImNzC2HiFQv/anGCMmj oXvcev6MYdYKiHLZsQgMhbaj9uDl1yq6m8lnFFBfhTBY11Zsk4VZw3mManZbqsmw 2zyYOumaU6y1LODfFWQ1uO1FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIOaWwfZh sIZMQ3Dk9XxeAXKXH0YwHwYDVR0jBBgwFoAUfjrGkZwij5gBrPkHXZCOUS3W2jQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEQzY4LzU2RkNFMDhDNTE5 NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVnQnJQa0hYWkNPVVMzVzJq US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmpyR2tad2lqNWdCclBrSFhaQ09VUzNXMmpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE QzY4LzU2RkNFMDhDNTE5NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVn QnJQa0hYWkNPVVMzVzJqUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK6MIVWs+d0I4CH/zDhk6xL4Y6i/dJULvwwjIR8BqPciRLTLiytLRa9e QTKzpPxf6vVleYRipLyoaVpcTTxvpSpyrVt4An1QelmNDyPQQg78U4vNxC0Qtpff JRNDyxdjbGhWg91ygW3CiHcfSL48+PjKvLqAT6wQE/urn7up0v0QdU2mSjwgeVJB X8EiTXnXCg1N8yaCfJFb6PrRdwT3w8XQoGfBtLFOlCFpMXwJpCSOGT+tG3Hs22lt 8KAxtwmov5hxC4U51l18ehwAqNdtA8l9/EM5FiN0RQ1VyFUkjolw1WnNgWjpCvw0 tdjwfv55l4Duhq/NzVV1k9gM+1lumS8= -----END CERTIFICATE-----Generated at Fri Dec 12 13:23:34 2025 by rpki-client