This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft File: fmfojMQDeKlwRj3y0LBgiOZdubA.mft (raw, json) Hash identifier: y/w0B3571YJgFqa3ZFnl74YrPK9dRoyeGVgybRelm4Q= Subject key identifier: 9D:4E:7A:2E:49:4A:3D:EB:3E:A7:3E:66:52:87:1B:A1:28:07:B9:58 Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0 Certificate issuer: /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0 Certificate serial: 0980 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft Manifest number: 1FB5 Signing time: Mon 22 Dec 2025 16:28:25 +0000 Manifest this update: Mon 22 Dec 2025 16:28:24 +0000 Manifest next update: Mon 29 Dec 2025 16:28:24 +0000 Files and hashes: 1: fmfojMQDeKlwRj3y0LBgiOZdubA.crl (hash: eS2weivgZSj6uyIW5Fw2mKepeAmCFLLxp9rVv6zK2pY=) 2: A1DFD796A65511EABDAED713C4F9AE02.roa (hash: vKmmh6WIOEqHjc9HRB9xmdHJEo2LxIyyZG3CXzn2ZyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2432 (0x980) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D04, serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0 Validity Not Before: Dec 22 16:28:24 2025 GMT Not After : Dec 29 16:28:24 2025 GMT Subject: CN=694971a9-9a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:89:46:2b:13:6e:b2:1e:df:6d:a7:e8:35:a5: bc:37:a5:f6:f0:71:7a:c4:3a:5f:d7:06:05:2b:0f: f3:a1:42:20:40:0b:65:ba:7c:dc:c0:1a:bb:fd:ed: 8f:08:f1:11:3b:04:c8:0a:9d:7a:94:13:13:38:b0: 9f:7a:cb:00:8e:ed:19:4b:35:05:0d:a1:6f:7b:ba: 78:5e:5d:72:d0:c3:36:07:ed:17:bd:84:32:14:e8: 19:17:d1:3b:2a:64:c8:e1:7a:01:9f:2f:da:22:16: b6:62:b1:79:77:3c:00:1d:1d:2a:de:a9:c8:b4:05: 16:f9:6b:e5:d5:b5:2a:2f:80:41:a4:2b:01:10:85: 89:b1:61:d4:7c:a9:8a:73:b3:5d:fd:f6:94:a2:bd: 5a:6b:f5:25:f7:f7:61:42:5c:f1:7b:98:e3:84:a2: de:97:cc:c7:c4:53:9d:3c:fa:69:7f:a5:26:ef:43: 93:fc:e5:98:18:ac:f5:bd:ce:c3:f4:30:83:f4:f0: bf:3a:0d:ce:ab:3b:d0:90:0d:de:d8:a6:cc:c9:c3: 7d:5f:dd:3f:ea:b9:4b:4b:1e:bc:18:44:f1:0d:72: 52:5f:f0:66:db:aa:50:ca:87:01:e4:61:ba:03:e1: 37:d3:3a:19:fc:de:b6:54:fb:82:34:15:c7:0a:34: 23:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4E:7A:2E:49:4A:3D:EB:3E:A7:3E:66:52:87:1B:A1:28:07:B9:58 X509v3 Authority Key Identifier: keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:04:d5:08:be:bc:4a:12:63:e1:94:f4:99:6a:ca:cd:b3:68: 6b:39:ae:f2:b0:d2:cc:9f:82:a0:aa:2c:bf:26:4f:38:d7:cc: fc:8c:b7:a4:a0:22:08:38:38:21:ab:1e:b1:16:c8:e4:92:a7: 00:4c:52:e1:69:68:72:35:43:f0:c4:01:63:fe:25:38:a4:95: 4a:65:a4:36:13:97:f6:f1:8d:07:9b:6d:3b:d7:b2:3d:bb:2e: 90:38:b5:84:87:e8:d7:0e:be:c2:25:63:38:73:67:1e:9b:ab: cc:66:ed:94:3b:78:b3:27:3d:4f:19:df:5c:f0:f5:33:f7:21: 4d:7b:c4:56:61:d4:41:a4:01:d6:ca:e9:be:48:8d:1f:31:01: dd:cf:3a:32:6d:f6:2e:e8:ed:eb:ed:c1:7d:c0:90:ad:8a:12: 0d:8c:71:9b:51:0f:6a:cd:db:27:5b:4b:1f:6b:21:f5:38:71: f5:e8:0e:16:65:40:a6:f0:92:38:4f:f1:70:e7:6f:c7:1f:67: 0e:0f:fe:bf:b0:d7:3a:ce:aa:d1:aa:43:94:f6:a5:30:4b:53: a3:09:29:b4:4d:6e:bb:67:08:d1:46:32:12:7a:a4:77:45:c3: ca:ab:9c:eb:93:07:82:11:f6:7d:bf:d4:c9:01:f7:f8:7c:e4: 1d:a6:40:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlEMDQxMTAvBgNVBAUTKDdFNjdFODhDQzQwMzc4QTk3MDQ2M0RGMkQwQjA2MDg4 RTY1REI5QjAwHhcNMjUxMjIyMTYyODI0WhcNMjUxMjI5MTYyODI0WjAYMRYwFAYD VQQDDA02OTQ5NzFhOS05YTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmolGKxNush7fbafoNaW8N6X28HF6xDpf1wYFKw/zoUIgQAtlunzcwBq7/e2P CPEROwTICp16lBMTOLCfessAju0ZSzUFDaFve7p4Xl1y0MM2B+0XvYQyFOgZF9E7 KmTI4XoBny/aIha2YrF5dzwAHR0q3qnItAUW+Wvl1bUqL4BBpCsBEIWJsWHUfKmK c7Nd/faUor1aa/Ul9/dhQlzxe5jjhKLel8zHxFOdPPppf6Um70OT/OWYGKz1vc7D 9DCD9PC/Og3OqzvQkA3e2KbMycN9X90/6rlLSx68GETxDXJSX/Bm26pQyocB5GG6 A+E30zoZ/N62VPuCNBXHCjQjNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1Oei5J Sj3rPqc+ZlKHG6EoB7lYMB8GA1UdIwQYMBaAFH5n6IzEA3ipcEY98tCwYIjmXbmw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQwNC83MTY2RjM4RTIz NUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9mbWZvak1RRGVLbHdSajN5MExCZ2lPWmR1 YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZtZm9qTVFEZUtsd1JqM3kwTEJnaU9aZHViQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQwNC83MTY2RjM4RTIzNUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9mbWZvak1RRGVL bHdSajN5MExCZ2lPWmR1YkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1BNUIvrxKEmPhlPSZasrNs2hrOa7ysNLMn4Kgqiy/Jk8418z8jLek oCIIODghqx6xFsjkkqcATFLhaWhyNUPwxAFj/iU4pJVKZaQ2E5f28Y0Hm20717I9 uy6QOLWEh+jXDr7CJWM4c2cem6vMZu2UO3izJz1PGd9c8PUz9yFNe8RWYdRBpAHW yum+SI0fMQHdzzoybfYu6O3r7cF9wJCtihINjHGbUQ9qzdsnW0sfayH1OHH16A4W ZUCm8JI4T/Fw52/HH2cOD/6/sNc6zqrRqkOU9qUwS1OjCSm0TW67ZwjRRjISeqR3 RcPKq5zrkweCEfZ9v9TJAff4fOQdpkBe -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:32 2025 by rpki-client