This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft File: Fm664SGI_4_HXurj7PjTvearJxo.mft (raw, json) Hash identifier: 3ZZZyggbxLTCL10YHiku/xvAuSw3yZRA1BAacCug7mo= Subject key identifier: C5:A3:71:F0:1A:47:6E:2E:6A:79:17:88:8F:E4:77:51:5F:3A:8F:25 Authority key identifier: 16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A Certificate issuer: /CN=A91C654A/serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft Manifest number: 097A Signing time: Sat 20 Dec 2025 20:52:57 +0000 Manifest this update: Sat 20 Dec 2025 20:52:57 +0000 Manifest next update: Sat 27 Dec 2025 20:52:57 +0000 Files and hashes: 1: Fm664SGI_4_HXurj7PjTvearJxo.crl (hash: /pGWAFoqNm5r9NTp7504IvNPUmamTl/OVR2AIN0PLqg=) 2: 50F8849CFDC111ED95AAA041C4F9AE02.roa (hash: 0DD71MyNn/a0ClFzY+negnwcfIlHkrg4N1Q4gkDWcxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C654A, serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A Validity Not Before: Dec 20 20:52:57 2025 GMT Not After : Dec 27 20:52:57 2025 GMT Subject: CN=69470ca9-55ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:31:a4:af:87:9f:e7:e4:58:42:bd:57:e1: 4b:b5:0e:83:dd:e9:7b:18:8c:4f:b9:ed:94:3c:2c: 7c:88:37:2f:55:82:1f:bb:a5:eb:79:7a:1d:48:ea: 6d:7d:27:51:ff:51:fa:d3:83:d4:d2:4a:76:e3:56: 4a:7c:53:7d:9c:b8:07:8d:97:47:7f:77:3e:90:54: c3:68:ff:61:4a:39:04:d7:d8:88:98:97:d0:cd:79: 0b:c2:04:e6:bf:6b:52:cb:5c:e4:78:cd:15:e9:ad: 95:99:27:b7:cb:92:ed:de:2a:5d:ec:3a:ea:12:9f: 7a:b5:04:bc:1a:60:d1:1c:cd:71:b6:78:f9:fb:d3: 5c:8f:72:5f:ef:f0:9d:a2:4c:ae:ce:10:15:80:43: cc:5f:81:d4:71:0e:66:5c:53:29:6f:bf:b3:86:10: 20:03:7c:bc:d3:e5:d3:9a:3b:2d:14:a9:d4:a9:e0: 72:25:17:84:97:1e:87:36:77:b4:f1:0d:82:5c:32: 0b:aa:eb:81:08:0f:03:8e:02:fb:7c:10:ca:3f:ae: e0:3f:be:b6:52:29:89:02:a4:d6:4a:08:32:18:a6: 93:42:36:52:35:d1:8d:79:48:96:29:a0:74:fa:60: 37:a8:76:99:7f:5d:f1:9d:41:b9:5b:17:e3:48:3f: 98:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A3:71:F0:1A:47:6E:2E:6A:79:17:88:8F:E4:77:51:5F:3A:8F:25 X509v3 Authority Key Identifier: keyid:16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ac:ea:ae:01:4e:c7:dc:77:e2:1f:63:b8:79:8e:da:e7:8e: 1c:5a:7b:55:83:73:1e:dc:57:0c:06:2b:18:68:6d:39:7b:55: a7:8f:11:7b:04:ac:a3:fb:80:da:31:d2:5d:79:ae:46:0c:76: 4e:f3:67:0d:3a:65:68:d4:a6:e5:23:1d:dd:f4:e7:2d:78:dd: 54:a5:43:b0:6a:42:ac:cc:64:e5:f4:5c:04:66:c1:ad:6c:19: c1:15:25:e7:98:fb:51:86:c5:54:50:67:ba:59:8c:cb:70:4b: dc:19:a3:dd:55:52:75:d7:47:ff:77:4e:46:d0:48:fe:04:8b: 03:c4:6f:ef:bd:31:bd:9d:ab:9e:50:d0:09:75:7a:76:0e:07: dc:c7:9e:b9:cf:7c:35:9d:bd:46:fb:d6:90:1f:78:91:e9:83: 9c:b9:d6:ad:a6:96:e9:71:c4:e8:a8:18:e0:f3:2c:fd:da:bf: 7e:e8:05:34:31:78:63:52:c0:dd:eb:f0:72:d4:10:47:c3:26: db:51:df:12:16:43:f5:0e:e3:3d:da:de:64:7b:35:86:28:19: f3:b9:cb:15:8b:48:80:54:16:91:0d:92:f1:16:39:57:33:b2: 6a:f4:a6:20:ff:1f:69:7a:aa:45:ed:78:8e:c3:0d:1b:e5:58: 1d:6f:00:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NEExMTAvBgNVBAUTKDE2NkVCQUUxMjE4OEZGOEZDNzVFRUFFM0VDRjhEM0JE RTZBQjI3MUEwHhcNMjUxMjIwMjA1MjU3WhcNMjUxMjI3MjA1MjU3WjAYMRYwFAYD VQQDDA02OTQ3MGNhOS01NWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCExpK+Hn+fkWEK9V+FLtQ6D3el7GIxPue2UPCx8iDcvVYIfu6XreXodSOpt fSdR/1H604PU0kp241ZKfFN9nLgHjZdHf3c+kFTDaP9hSjkE19iImJfQzXkLwgTm v2tSy1zkeM0V6a2VmSe3y5Lt3ipd7DrqEp96tQS8GmDRHM1xtnj5+9Ncj3Jf7/Cd okyuzhAVgEPMX4HUcQ5mXFMpb7+zhhAgA3y80+XTmjstFKnUqeByJReElx6HNne0 8Q2CXDILquuBCA8DjgL7fBDKP67gP762UimJAqTWSggyGKaTQjZSNdGNeUiWKaB0 +mA3qHaZf13xnUG5WxfjSD+Y4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWjcfAa R24uankXiI/kd1FfOo8lMB8GA1UdIwQYMBaAFBZuuuEhiP+Px17q4+z4073mqyca MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU0QS83MUZBQjBEODM1 MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9GbTY2NFNHSV80X0hYdXJqN1BqVHZlYXJK eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZtNjY0U0dJXzRfSFh1cmo3UGpUdmVhckp4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjU0QS83MUZBQjBEODM1MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9GbTY2NFNHSV80 X0hYdXJqN1BqVHZlYXJKeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPrOquAU7H3HfiH2O4eY7a544cWntVg3Me3FcMBisYaG05e1WnjxF7 BKyj+4DaMdJdea5GDHZO82cNOmVo1KblIx3d9OcteN1UpUOwakKszGTl9FwEZsGt bBnBFSXnmPtRhsVUUGe6WYzLcEvcGaPdVVJ110f/d05G0Ej+BIsDxG/vvTG9naue UNAJdXp2Dgfcx565z3w1nb1G+9aQH3iR6YOcudatppbpccToqBjg8yz92r9+6AU0 MXhjUsDd6/By1BBHwybbUd8SFkP1DuM92t5kezWGKBnzucsVi0iAVBaRDZLxFjlX M7Jq9KYg/x9peqpF7XiOww0b5VgdbwB3 -----END CERTIFICATE-----Generated at Sun Dec 21 03:02:44 2025 by rpki-client