This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft File: fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft (raw, json) Hash identifier: 0raK1hzvrpoVj/WjSRHqEO90c7/3h/HoZ0Bd12t1XZg= Subject key identifier: BC:69:E9:07:15:17:64:06:BB:24:48:0A:BB:2D:76:CA:13:1B:EB:99 Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Certificate serial: 1032 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft Manifest number: 1025 Signing time: Mon 22 Dec 2025 17:07:18 +0000 Manifest this update: Mon 22 Dec 2025 17:07:17 +0000 Manifest next update: Mon 29 Dec 2025 17:07:17 +0000 Files and hashes: 1: fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl (hash: 5JHKQGAFOdBXBAlKI8eOsBN1xh+h2SI72587XI+EBwE=) 2: 1BB9CAB6578011E99E80631AC4F9AE02.roa (hash: frN4lZuv4ZlRLTeZDqpWstvGTNjkjq8jINytoj03BxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4146 (0x1032) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C96A7, serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Validity Not Before: Dec 22 17:07:17 2025 GMT Not After : Dec 29 17:07:17 2025 GMT Subject: CN=69497ac6-36fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:66:52:06:6c:6c:53:ff:f7:0d:b5:d0:cc: c8:da:a2:84:36:cb:ed:d3:cf:24:9a:cd:8f:c1:9d: 4b:cb:9c:eb:21:46:80:9c:d8:c2:ad:e0:c6:7c:ae: 0b:df:98:50:9b:e3:a0:82:7c:89:a0:99:c3:2a:36: ce:e0:73:b3:26:51:7b:1f:15:b0:78:a6:50:f7:81: 6d:b9:a9:b2:74:a3:c9:d7:be:7a:8f:c4:30:6b:ab: ea:76:5e:a3:9f:4c:a5:d4:63:33:ae:59:7f:08:5b: 0d:65:63:2e:97:0f:04:e2:ce:42:0b:e1:30:08:19: b2:4f:0c:2c:03:0f:c3:72:64:53:8b:e3:5f:b1:df: 33:e7:50:c8:c3:18:41:4d:24:b8:5b:8b:83:ca:c1: 0c:23:4a:55:3f:5c:d6:6e:67:7c:17:ed:c2:d9:23: 94:0e:87:03:34:8f:40:a7:75:a7:1b:c6:55:6d:0e: 78:e6:a9:ae:3a:99:18:f5:57:c9:fa:8a:0c:c3:26: 8f:93:80:ad:30:f8:18:c7:7f:9f:79:70:cf:63:54: 21:12:5e:23:d4:b7:43:04:43:ba:ce:e1:c7:5c:c5: 76:38:4a:01:1e:08:82:3b:24:da:e8:2b:ff:92:67: 50:94:09:ac:d0:81:58:bb:14:b5:fd:67:b3:ef:d6: be:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:69:E9:07:15:17:64:06:BB:24:48:0A:BB:2D:76:CA:13:1B:EB:99 X509v3 Authority Key Identifier: keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c9:b4:5e:9f:2d:7a:32:9e:90:42:c1:c7:6d:c7:57:28:44: fc:81:8c:1b:4f:86:10:d6:fb:40:2b:1a:7b:d5:01:b1:4b:79: 9d:6c:1b:2c:93:e2:64:3c:63:00:d5:28:a4:ec:a8:1e:57:55: 0d:24:e7:03:14:c4:16:1e:ee:d1:c0:3c:21:65:58:f1:9d:b2: d7:a1:6d:fb:54:c4:03:c3:b8:bc:5c:14:d8:86:19:25:68:e0: ca:ed:a3:3a:6c:16:b3:a8:f1:0c:89:46:d5:83:21:7c:bf:70: cc:a7:6b:cd:26:9a:8a:4d:b4:47:61:47:ad:71:c2:9c:35:90: 0e:2a:3b:bd:8f:f3:d4:0d:77:d1:bf:eb:97:4c:8d:3e:46:9e: 64:f7:64:1c:5b:f0:1d:05:4f:4f:5b:51:b8:ca:f5:ed:3e:97: 84:6f:be:d1:bf:b3:7c:55:71:b6:28:06:9e:39:63:88:77:13: 0e:4b:be:b9:ce:6c:59:50:cd:0a:77:32:14:15:43:06:cb:00: dd:7c:ee:48:85:2e:0e:57:14:73:66:19:d5:0a:8c:20:7b:41: c8:c9:59:12:49:0c:f8:69:94:f5:1a:92:c1:2f:4f:1e:ea:a2: 86:ed:a4:dd:1e:1c:a8:90:fa:7c:ac:c5:7e:02:2f:0f:35:d9: 58:f6:9e:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx N0I2RTNCM0IwHhcNMjUxMjIyMTcwNzE3WhcNMjUxMjI5MTcwNzE3WjAYMRYwFAYD VQQDDA02OTQ5N2FjNi0zNmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRJmUgZsbFP/9w210MzI2qKENsvt088kms2PwZ1Ly5zrIUaAnNjCreDGfK4L 35hQm+OggnyJoJnDKjbO4HOzJlF7HxWweKZQ94FtuamydKPJ1756j8Qwa6vqdl6j n0yl1GMzrll/CFsNZWMulw8E4s5CC+EwCBmyTwwsAw/DcmRTi+Nfsd8z51DIwxhB TSS4W4uDysEMI0pVP1zWbmd8F+3C2SOUDocDNI9Ap3WnG8ZVbQ545qmuOpkY9VfJ +ooMwyaPk4CtMPgYx3+feXDPY1QhEl4j1LdDBEO6zuHHXMV2OEoBHgiCOyTa6Cv/ kmdQlAms0IFYuxS1/Wez79a+bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxp6QcV F2QGuyRICrstdsoTG+uZMB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3 N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTZBNy8yNkU3NDk5NjU3N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNE X1pDVTN3TlFUZUlYdHVPenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqybReny16Mp6QQsHHbcdXKET8gYwbT4YQ1vtAKxp71QGxS3mdbBss k+JkPGMA1Sik7KgeV1UNJOcDFMQWHu7RwDwhZVjxnbLXoW37VMQDw7i8XBTYhhkl aODK7aM6bBazqPEMiUbVgyF8v3DMp2vNJpqKTbRHYUetccKcNZAOKju9j/PUDXfR v+uXTI0+Rp5k92QcW/AdBU9PW1G4yvXtPpeEb77Rv7N8VXG2KAaeOWOIdxMOS765 zmxZUM0KdzIUFUMGywDdfO5IhS4OVxRzZhnVCowge0HIyVkSSQz4aZT1GpLBL08e 6qKG7aTdHhyokPp8rMV+Ai8PNdlY9p7F -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:57 2025 by rpki-client