This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft File: FMxtyeCRBW52oT-Pinw1duzx27E.mft (raw, json) Hash identifier: dQYOY1bdC3YIYtgOL0NUWiLN8HD/mCt5pLdjdF6xJDM= Subject key identifier: 9D:DF:3F:3C:7B:3B:CB:C3:11:C7:6B:17:80:CE:E5:34:44:A9:16:99 Authority key identifier: 14:CC:6D:C9:E0:91:05:6E:76:A1:3F:8F:8A:7C:35:76:EC:F1:DB:B1 Certificate issuer: /CN=A91C9D04/serialNumber=14CC6DC9E091056E76A13F8F8A7C3576ECF1DBB1 Certificate serial: 163F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft Manifest number: 1FB2 Signing time: Sat 20 Dec 2025 16:30:08 +0000 Manifest this update: Sat 20 Dec 2025 16:30:08 +0000 Manifest next update: Sat 27 Dec 2025 16:30:08 +0000 Files and hashes: 1: FMxtyeCRBW52oT-Pinw1duzx27E.crl (hash: auFCgY3Bw27p+Ir8OxpMZcwaUr2E02jsQhDLaBAXo0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.crl rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5695 (0x163f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D04, serialNumber=14CC6DC9E091056E76A13F8F8A7C3576ECF1DBB1 Validity Not Before: Dec 20 16:30:08 2025 GMT Not After : Dec 27 16:30:08 2025 GMT Subject: CN=6946cf10-eb5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:33:58:d7:b1:27:34:4e:9b:2e:bc:09:62:91: 9a:a3:65:2b:dd:7c:f8:6b:3d:58:8f:47:fa:75:b6: da:e6:9c:24:f3:26:23:7f:ed:32:c7:c6:e3:c3:d9: a3:40:8f:df:a0:6e:f8:fd:e8:19:b7:cf:6d:25:2a: ce:d3:63:33:43:f7:a2:dd:fe:ef:4a:a4:ea:07:02: d6:8b:17:84:be:92:3a:30:2e:e3:50:f4:a4:5d:d6: 3a:39:b5:60:d0:22:31:02:2e:03:6f:02:b8:16:8d: 3c:16:27:16:82:29:7c:62:c7:00:8f:f9:92:e1:fa: 09:19:a7:7d:fa:04:40:3a:fe:95:4d:7e:55:f9:dd: 73:71:c0:7b:fd:8c:7d:74:a5:5e:8a:9c:e1:26:a1: 03:45:e5:f6:82:c6:9c:f1:ed:6e:2a:0e:66:c7:f6: ca:c6:18:38:81:ab:88:65:57:1f:e6:93:28:c7:5c: c4:91:a4:2e:c0:43:96:2b:79:9d:39:c8:16:c5:32: 19:16:35:b3:36:6b:7d:34:f3:51:02:82:86:1b:c5: f7:6c:d6:6e:29:2b:4a:b6:3f:45:00:3c:90:bc:ce: e6:db:e9:34:29:20:f1:eb:02:79:0d:1c:91:2e:98: f4:fc:5f:83:2a:e2:be:f8:36:ae:ab:73:e7:44:1f: 90:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DF:3F:3C:7B:3B:CB:C3:11:C7:6B:17:80:CE:E5:34:44:A9:16:99 X509v3 Authority Key Identifier: keyid:14:CC:6D:C9:E0:91:05:6E:76:A1:3F:8F:8A:7C:35:76:EC:F1:DB:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:fa:50:25:d0:dd:c3:a8:3d:51:cc:97:ba:1f:f5:d4:2d:d2: d1:44:9c:8d:f2:40:e8:df:42:00:8c:d6:a2:21:27:68:03:78: fc:b1:35:d4:bd:0e:d4:0e:2c:f4:9f:70:59:c2:29:65:d2:e9: 78:63:64:da:a8:c9:a4:6b:45:22:df:9a:e2:70:b8:e7:c2:ea: 4d:1c:cc:93:91:d4:81:fc:e8:74:59:69:1f:c5:c4:36:12:d8: 94:5a:90:b4:01:7a:1d:79:c6:d5:55:d6:9a:b3:f8:7a:f4:81: 63:d4:2c:53:f0:e4:d2:5e:aa:66:e7:71:e7:07:de:4a:38:5e: 16:3e:82:f6:3a:33:01:51:91:ee:f6:31:bd:07:68:35:ee:be: 84:1e:19:35:24:07:37:8f:3d:3a:32:7d:a3:25:1a:18:98:d1: 98:fd:84:40:aa:aa:ec:ba:5f:5a:ab:02:54:09:77:0a:48:1b: 1d:a9:dc:6e:b6:b0:c9:27:55:9b:ce:71:f3:a6:9e:29:70:ef: 04:d2:e2:f0:39:01:07:5b:9a:69:e3:9e:2b:c0:20:2c:53:4c: d2:7b:46:60:1e:2d:dd:ea:63:10:c9:91:c6:de:c8:b5:57:b4: 23:a9:09:aa:4f:ff:b1:64:8b:f3:0d:b6:ee:ce:e0:0a:1c:40: fc:bb:b5:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlEMDQxMTAvBgNVBAUTKDE0Q0M2REM5RTA5MTA1NkU3NkExM0Y4RjhBN0MzNTc2 RUNGMURCQjEwHhcNMjUxMjIwMTYzMDA4WhcNMjUxMjI3MTYzMDA4WjAYMRYwFAYD VQQDDA02OTQ2Y2YxMC1lYjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjNY17EnNE6bLrwJYpGao2Ur3Xz4az1Yj0f6dbba5pwk8yYjf+0yx8bjw9mj QI/foG74/egZt89tJSrO02MzQ/ei3f7vSqTqBwLWixeEvpI6MC7jUPSkXdY6ObVg 0CIxAi4DbwK4Fo08FicWgil8YscAj/mS4foJGad9+gRAOv6VTX5V+d1zccB7/Yx9 dKVeipzhJqEDReX2gsac8e1uKg5mx/bKxhg4gauIZVcf5pMox1zEkaQuwEOWK3md OcgWxTIZFjWzNmt9NPNRAoKGG8X3bNZuKStKtj9FADyQvM7m2+k0KSDx6wJ5DRyR Lpj0/F+DKuK++Dauq3PnRB+QcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3fPzx7 O8vDEcdrF4DO5TREqRaZMB8GA1UdIwQYMBaAFBTMbcngkQVudqE/j4p8NXbs8dux MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQwNC83MTY2RjM4RTIz NUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9GTXh0eWVDUkJXNTJvVC1QaW53MWR1engy N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZNeHR5ZUNSQlc1Mm9ULVBpbncxZHV6eDI3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQwNC83MTY2RjM4RTIzNUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9GTXh0eWVDUkJX NTJvVC1QaW53MWR1engyN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl+lAl0N3DqD1RzJe6H/XULdLRRJyN8kDo30IAjNaiISdoA3j8sTXU vQ7UDiz0n3BZwill0ul4Y2TaqMmka0Ui35ricLjnwupNHMyTkdSB/Oh0WWkfxcQ2 EtiUWpC0AXodecbVVdaas/h69IFj1CxT8OTSXqpm53HnB95KOF4WPoL2OjMBUZHu 9jG9B2g17r6EHhk1JAc3jz06Mn2jJRoYmNGY/YRAqqrsul9aqwJUCXcKSBsdqdxu trDJJ1WbznHzpp4pcO8E0uLwOQEHW5pp454rwCAsU0zSe0ZgHi3d6mMQyZHG3si1 V7QjqQmqT/+xZIvzDbbuzuAKHED8u7U8 -----END CERTIFICATE-----Generated at Mon Dec 22 07:06:22 2025 by rpki-client