This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft File: Fq85Z82e72n-cs9m28bg-wDKONQ.mft (raw, json) Hash identifier: f5gJ5dlMxS6C88jn0Nlj8aw6WgvEEew+metZEA8TIBY= Subject key identifier: 92:CD:F0:79:44:40:92:48:F4:A9:4B:7F:C7:25:F4:BE:82:62:0B:5A Authority key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 Certificate issuer: /CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft Manifest number: 010A Signing time: Tue 23 Dec 2025 03:59:15 +0000 Manifest this update: Tue 23 Dec 2025 03:59:15 +0000 Manifest next update: Tue 30 Dec 2025 03:59:15 +0000 Files and hashes: 1: Fq85Z82e72n-cs9m28bg-wDKONQ.crl (hash: sku2EZG4yeBq+crXQLxK1LB4bBmk2NicVnOOwPyGB/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Validity Not Before: Dec 23 03:59:15 2025 GMT Not After : Dec 30 03:59:15 2025 GMT Subject: CN=694a1393-2c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:f8:df:78:9f:fe:ed:1f:20:bf:32:60:a4: 4b:f1:2b:44:52:2d:24:2b:b9:12:41:54:99:1b:a6: be:ec:cb:3e:00:d1:fc:99:47:4f:a8:21:a3:70:09: 9f:88:02:8b:05:8c:d9:a7:1b:e2:54:8c:1f:be:7f: c1:c4:84:4d:ca:06:ea:d9:ad:5b:b3:c2:d6:51:bd: 83:78:aa:53:90:b5:fa:c4:eb:9b:f7:20:19:99:15: 8b:e0:bf:ab:97:e1:1e:a2:24:f7:b7:bc:23:42:21: fb:8a:9e:8b:6c:1b:42:68:b7:33:b5:4e:23:44:57: 91:24:0e:57:bc:04:95:97:8d:96:9d:d4:f4:a8:e3: 23:2b:ed:8e:b4:b2:fe:a8:f1:25:77:02:b8:36:90: 88:a6:da:3d:97:f9:07:d7:ab:07:e5:24:2a:3f:54: a2:7f:69:6e:d2:20:3e:ef:96:1a:70:ce:e7:91:69: 53:c6:dc:e4:b7:2b:06:14:0b:ce:76:26:3f:f4:5d: 8c:5b:c8:d0:49:aa:c8:fa:3b:1b:d1:27:84:6a:84: 30:2c:f7:c0:75:35:71:d0:d8:bb:72:45:ef:f0:34: 13:9a:3c:3c:ab:9e:af:93:77:47:08:3c:e0:79:7d: 07:22:9b:49:d2:f6:a4:17:30:8b:65:a4:1e:00:e3: c8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CD:F0:79:44:40:92:48:F4:A9:4B:7F:C7:25:F4:BE:82:62:0B:5A X509v3 Authority Key Identifier: keyid:16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:9f:2c:f0:ac:39:4c:95:0d:58:40:84:95:eb:8c:97:8b:09: 36:c0:d1:1e:3f:eb:47:83:6b:83:b1:91:18:1a:a8:8c:1a:01: a3:c9:ec:71:60:d4:22:9b:3c:4c:34:0d:e9:da:41:5d:ef:3b: 90:95:3d:57:af:e2:b7:28:e2:6c:5e:4f:de:da:ca:49:1c:f6: 93:16:82:90:3f:e7:ac:2d:30:48:eb:76:bd:42:06:da:9d:4d: 1e:25:39:69:61:e5:68:ac:a5:de:32:5e:86:8a:f3:69:46:4d: 9a:d0:9d:7f:af:d0:85:c7:0b:45:ed:81:e3:fd:59:52:ff:fe: 20:fb:91:5f:c9:e3:dc:05:9c:0a:da:a8:dc:20:9e:37:9c:41: fd:e9:e6:ce:d5:e0:97:19:3b:b5:ed:4f:0b:06:cf:43:43:2c: 04:a6:74:a0:dd:1c:67:7c:eb:7b:ff:ef:1d:a5:9a:65:f8:02: de:13:5e:d5:5c:2f:19:c4:c0:ea:9a:d5:4d:71:27:01:15:95: 78:60:d3:2c:11:a7:87:35:66:12:6c:54:7c:ad:17:0c:d5:5b: a8:f3:af:4c:db:09:5f:56:15:ba:43:77:18:4c:5a:03:ee:c2: 9f:b4:80:f4:ae:0f:e3:0b:c7:c3:44:27:5a:0f:dd:a8:48:0e: 4a:f6:a1:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM0RDAxMTAvBgNVBAUTKDE2QUYzOTY3Q0Q5RUVGNjlGRTcyQ0Y2NkRCQzZFMEZC MDBDQTM4RDQwHhcNMjUxMjIzMDM1OTE1WhcNMjUxMjMwMDM1OTE1WjAYMRYwFAYD VQQDDA02OTRhMTM5My0yYzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1L433if/u0fIL8yYKRL8StEUi0kK7kSQVSZG6a+7Ms+ANH8mUdPqCGjcAmf iAKLBYzZpxviVIwfvn/BxIRNygbq2a1bs8LWUb2DeKpTkLX6xOub9yAZmRWL4L+r l+EeoiT3t7wjQiH7ip6LbBtCaLcztU4jRFeRJA5XvASVl42WndT0qOMjK+2OtLL+ qPEldwK4NpCIpto9l/kH16sH5SQqP1Sif2lu0iA+75YacM7nkWlTxtzktysGFAvO diY/9F2MW8jQSarI+jsb0SeEaoQwLPfAdTVx0Ni7ckXv8DQTmjw8q56vk3dHCDzg eX0HIptJ0vakFzCLZaQeAOPI3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLN8HlE QJJI9KlLf8cl9L6CYgtaMB8GA1UdIwQYMBaAFBavOWfNnu9p/nLPZtvG4PsAyjjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9GNTQwM0VGMjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcybi1jczltMjhiZy13REtP TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxODVaODJlNzJuLWNzOW0yOGJnLXdES09OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9GNTQwM0VGMjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcy bi1jczltMjhiZy13REtPTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAnyzwrDlMlQ1YQISV64yXiwk2wNEeP+tHg2uDsZEYGqiMGgGjyexx YNQimzxMNA3p2kFd7zuQlT1Xr+K3KOJsXk/e2spJHPaTFoKQP+esLTBI63a9Qgba nU0eJTlpYeVorKXeMl6GivNpRk2a0J1/r9CFxwtF7YHj/VlS//4g+5FfyePcBZwK 2qjcIJ43nEH96ebO1eCXGTu17U8LBs9DQywEpnSg3RxnfOt7/+8dpZpl+ALeE17V XC8ZxMDqmtVNcScBFZV4YNMsEaeHNWYSbFR8rRcM1Vuo869M2wlfVhW6Q3cYTFoD 7sKftID0rg/jC8fDRCdaD92oSA5K9qF2 -----END CERTIFICATE-----Generated at Wed Dec 24 19:31:16 2025 by rpki-client