This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft File: FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft (raw, json) Hash identifier: EmZBJeyH95Ak0vQJ+PTGwZIKdAg4iJf2WWDmGQjdeMI= Subject key identifier: 58:06:62:B7:5E:B0:81:33:0D:B4:9C:5E:03:19:58:D1:C6:88:F4:97 Authority key identifier: 15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 Certificate issuer: /CN=A91DD299/serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft Manifest number: D1 Signing time: Tue 23 Dec 2025 04:41:01 +0000 Manifest this update: Tue 23 Dec 2025 04:41:01 +0000 Manifest next update: Tue 30 Dec 2025 04:41:01 +0000 Files and hashes: 1: FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl (hash: 919KmAZhCJEBV0NUGe+MEIi0BgLLTW8RxvBfB8NJ7u8=) 2: F7AA5B1CA1DA11EF86B88981C4F9AE02.roa (hash: DGxrKRXPi2bgrxreeXRQjRNOo70ByLeA01zODoILz2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD299, serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Validity Not Before: Dec 23 04:41:01 2025 GMT Not After : Dec 30 04:41:01 2025 GMT Subject: CN=694a1d5d-4327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:a0:a5:8f:32:a6:91:4e:8e:f0:d5:d4:b5: 97:db:71:81:ec:9a:7c:f2:b6:7d:a2:22:2a:c0:85: d5:ef:10:c7:5d:f4:93:de:ca:24:d6:0e:d2:38:eb: 3a:13:f9:81:f3:d1:a7:9f:73:75:8f:ff:76:76:8d: 74:26:41:ef:0e:27:95:8d:94:5d:c3:83:2d:92:7d: 13:95:29:c3:9d:b1:81:e9:3e:0f:8f:f5:6a:86:95: e3:7a:7d:57:1a:4e:c2:33:42:e4:bc:2a:cd:5b:04: 69:eb:6c:c4:30:77:0d:5b:97:9b:0e:3c:28:57:c5: 0d:aa:2f:16:6f:88:a5:fa:d7:d4:9d:df:1b:23:ce: 08:db:6e:9f:85:af:22:74:71:23:7f:87:e6:5c:b3: 03:2a:74:0a:ce:c8:d6:ad:00:74:ae:d0:d4:92:1f: c6:27:ef:ab:d6:95:1e:75:6b:3c:4c:56:46:6b:8a: 8e:04:b4:fc:b5:e1:12:1c:0d:0b:f5:ad:6e:4b:23: 4c:92:c9:0d:5d:c7:21:49:cf:ff:ae:bc:5a:81:56: fa:2a:b7:cc:93:41:bf:c2:6d:42:8a:87:1f:23:27: 7c:17:d5:41:26:68:31:c9:4b:36:d5:99:82:ae:c3: 54:03:04:6d:db:fe:2a:71:34:3c:62:69:60:ec:fe: bb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:06:62:B7:5E:B0:81:33:0D:B4:9C:5E:03:19:58:D1:C6:88:F4:97 X509v3 Authority Key Identifier: keyid:15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:83:a7:a2:ea:d3:0d:c2:47:87:7e:cf:d0:84:04:6c:1f:be: fb:51:2a:39:e4:bf:61:a6:df:f8:a6:74:0f:d1:d9:5c:00:18: ce:13:ed:18:e1:78:d4:f5:3e:97:5a:27:58:be:2f:0a:40:fd: 5a:9c:e6:5b:01:40:24:a3:f0:7b:67:92:cf:d8:80:e3:fe:bb: ec:d2:81:02:e9:d8:95:72:83:dd:27:24:35:34:4f:35:5f:68: 4d:d1:aa:1e:61:6f:ff:c5:21:09:fd:b8:62:4e:97:b1:91:30: 7e:43:d6:ea:6e:3a:ff:f0:5a:18:f2:3e:f0:3e:cd:85:95:39: 90:5e:5c:8d:e3:b9:28:f1:eb:6b:0f:60:7d:51:b4:61:9b:a3: 1d:22:30:df:e8:ec:ec:b3:2b:0b:76:11:ea:92:0d:a0:00:88: 57:20:bf:70:40:df:0f:dd:94:5c:ed:a7:07:be:c9:63:e0:bc: c4:4a:1b:c7:b5:e9:68:25:5b:e2:77:00:34:d5:35:91:f8:21: a9:2b:3f:8b:6e:20:7e:53:1d:c1:1b:52:5b:d6:0c:cb:a3:ea: 9e:3d:50:d9:90:69:cd:5f:94:46:3b:65:ae:55:be:a4:4a:91: d7:51:ce:6a:1e:8e:a7:38:3b:0f:eb:47:83:fb:15:94:ae:93: 65:e4:18:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQyOTkxMTAvBgNVBAUTKDE1NkVENUJGODE0MzdDMUI3MUU3MUNCMDJFRUMyN0FC MThBRjc5QTQwHhcNMjUxMjIzMDQ0MTAxWhcNMjUxMjMwMDQ0MTAxWjAYMRYwFAYD VQQDDA02OTRhMWQ1ZC00MzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDugpY8yppFOjvDV1LWX23GB7Jp88rZ9oiIqwIXV7xDHXfST3sok1g7SOOs6 E/mB89Gnn3N1j/92do10JkHvDieVjZRdw4Mtkn0TlSnDnbGB6T4Pj/VqhpXjen1X Gk7CM0LkvCrNWwRp62zEMHcNW5ebDjwoV8UNqi8Wb4il+tfUnd8bI84I226fha8i dHEjf4fmXLMDKnQKzsjWrQB0rtDUkh/GJ++r1pUedWs8TFZGa4qOBLT8teESHA0L 9a1uSyNMkskNXcchSc//rrxagVb6KrfMk0G/wm1CiocfIyd8F9VBJmgxyUs21ZmC rsNUAwRt2/4qcTQ8Ymlg7P67RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgGYrde sIEzDbScXgMZWNHGiPSXMB8GA1UdIwQYMBaAFBVu1b+BQ3wbceccsC7sJ6sYr3mk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDI5OS81RUI5M0E3MkEx REExMUVGQjIzMzNBNDVDNEY5QUUwMi9GVzdWdjRGRGZCdHg1eHl3THV3bnF4aXZl YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXN1Z2NEZEZkJ0eDV4eXdMdXducXhpdmVhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDI5OS81RUI5M0E3MkExREExMUVGQjIzMzNBNDVDNEY5QUUwMi9GVzdWdjRGRGZC dHg1eHl3THV3bnF4aXZlYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDg6ei6tMNwkeHfs/QhARsH777USo55L9hpt/4pnQP0dlcABjOE+0Y 4XjU9T6XWidYvi8KQP1anOZbAUAko/B7Z5LP2IDj/rvs0oEC6diVcoPdJyQ1NE81 X2hN0aoeYW//xSEJ/bhiTpexkTB+Q9bqbjr/8FoY8j7wPs2FlTmQXlyN47ko8etr D2B9UbRhm6MdIjDf6OzssysLdhHqkg2gAIhXIL9wQN8P3ZRc7acHvslj4LzEShvH teloJVvidwA01TWR+CGpKz+LbiB+Ux3BG1Jb1gzLo+qePVDZkGnNX5RGO2WuVb6k SpHXUc5qHo6nODsP60eD+xWUrpNl5BiF -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:16 2025 by rpki-client