This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft File: FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json) Hash identifier: OmK+iD9pgsx0K1whV/NqepyT4fmeZGvI0dH6kEJwEvU= Subject key identifier: D2:96:6A:89:01:32:5E:07:6F:8B:7E:B4:9B:35:0F:EA:C2:74:A3:CA Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 Certificate issuer: /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Certificate serial: 04B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft Manifest number: 0487 Signing time: Sat 06 Dec 2025 22:54:24 +0000 Manifest this update: Sat 06 Dec 2025 22:54:23 +0000 Manifest next update: Sat 13 Dec 2025 22:54:23 +0000 Files and hashes: 1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: X3QeG0QVfPqAbQPKjqftXL+BZlKKrecoqMV6fRgD1hs=) 2: F29967B22B0011F0B0319E61C4F9AE02.roa (hash: AWipWCwfBJg9FTHPHDUNW5DfQTImAx6KbbjHRDTBNc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1204 (0x4b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD4A6, serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Validity Not Before: Dec 6 22:54:23 2025 GMT Not After : Dec 13 22:54:23 2025 GMT Subject: CN=6934b420-e6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:19:8c:e9:15:8c:6f:56:a3:12:fc:a8:d1: eb:b0:b2:f7:40:7d:03:88:04:17:2c:d8:32:4f:e4: d6:47:f3:99:ae:93:4b:50:df:99:b1:09:df:97:99: f7:30:b3:f2:1c:32:ad:e0:6f:f5:9a:e8:3f:55:20: 05:53:fc:79:75:17:f9:d0:b5:9a:69:f1:89:90:39: 15:7e:81:dc:97:80:ee:ea:db:77:a6:c4:93:ab:38: 83:af:59:1a:20:d2:e2:6d:4d:4e:e2:30:0a:c3:1f: 79:0b:67:bb:6b:e6:7b:2a:0a:bd:c6:df:b7:01:80: 18:41:c0:e6:9c:3f:16:2b:6c:85:38:2d:34:86:4a: 57:e3:b2:ab:93:0c:e6:85:de:b6:f3:c4:a9:a5:c7: 4c:2c:3a:43:ea:fe:43:a2:b9:30:74:0a:7f:85:0a: 47:db:e3:98:6b:ff:15:e1:c4:ad:b6:b6:1c:b8:5d: 4f:a7:56:aa:63:5f:f2:91:ff:07:3e:65:c7:e0:66: d7:bc:6e:9f:f4:97:12:fd:04:09:3d:8f:14:03:66: 9d:ad:c8:a0:54:bd:d4:ed:e8:e5:62:bf:5b:43:ec: a2:ef:89:45:14:88:6c:c9:8d:c8:e1:b4:bc:e5:dc: cb:b0:79:32:f5:45:8a:7c:6c:7e:1c:d9:8b:ef:6a: fa:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:96:6A:89:01:32:5E:07:6F:8B:7E:B4:9B:35:0F:EA:C2:74:A3:CA X509v3 Authority Key Identifier: keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c3:ba:70:7f:d4:09:e9:7a:98:aa:8e:f7:7f:98:cc:f2:75: e7:b5:b8:27:02:92:30:de:08:82:46:d7:1c:65:44:36:8c:8c: 27:2e:f9:d7:a9:63:99:f1:f2:b3:53:ce:e0:cd:ed:20:27:f0: 74:d1:b4:00:63:40:cf:59:7e:f0:0d:7d:53:58:6b:6b:12:a4: 54:0f:9e:ae:74:5b:96:a6:d0:52:a3:f5:e3:e8:d2:29:11:0a: 29:0d:79:dd:19:7d:4f:63:ed:8e:e1:e5:93:99:d2:2d:bc:49: 86:3c:c6:6a:98:23:b8:d0:cb:0f:ce:16:43:c7:a1:42:88:86: 66:e9:6a:2b:fc:ec:c5:e6:6e:78:7c:8d:0d:cf:ac:8d:db:38: 32:56:ee:3a:3f:8c:3b:8b:01:13:b3:5a:b8:dd:44:4e:d8:e9: e6:56:a9:5a:8b:49:b3:e0:3e:fc:98:24:3b:15:a9:02:cd:c4: 7b:fb:27:e3:7e:cc:04:d7:c6:50:77:d6:36:24:cc:75:58:37: 03:31:36:a4:0a:bb:84:1a:05:bf:90:d7:b5:57:eb:33:4b:8b: 9e:f5:44:b4:87:f1:13:d4:b9:e6:61:76:ab:80:7e:f3:72:cd: 17:09:73:dc:a9:c4:77:06:55:2e:d1:43:06:02:aa:cf:f8:1b: f9:a3:1e:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0QTYxMTAvBgNVBAUTKDE3MDA0QUEzMzEwNUIwQTBFNkQzRUI0RTQ3QzUxMzA2 M0Q5MkNFQzIwHhcNMjUxMjA2MjI1NDIzWhcNMjUxMjEzMjI1NDIzWjAYMRYwFAYD VQQDEw02OTM0YjQyMC1lNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoI0ZjOkVjG9WoxL8qNHrsLL3QH0DiAQXLNgyT+TWR/OZrpNLUN+ZsQnfl5n3 MLPyHDKt4G/1mug/VSAFU/x5dRf50LWaafGJkDkVfoHcl4Du6tt3psSTqziDr1ka INLibU1O4jAKwx95C2e7a+Z7Kgq9xt+3AYAYQcDmnD8WK2yFOC00hkpX47Krkwzm hd6288SppcdMLDpD6v5DorkwdAp/hQpH2+OYa/8V4cSttrYcuF1Pp1aqY1/ykf8H PmXH4GbXvG6f9JcS/QQJPY8UA2adrcigVL3U7ejlYr9bQ+yi74lFFIhsyY3I4bS8 5dzLsHky9UWKfGx+HNmL72r6iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKWaokB Ml4Hb4t+tJs1D+rCdKPKMB8GA1UdIwQYMBaAFBcASqMxBbCg5tPrTkfFEwY9ks7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDRBNi82QTU5NjlBODdF OTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNLRG0wLXRPUjhVVEJqMlN6 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3QktvekVGc0tEbTAtdE9SOFVUQmoyU3pzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDRBNi82QTU5NjlBODdFOTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNL RG0wLXRPUjhVVEJqMlN6c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVw7pwf9QJ6XqYqo73f5jM8nXntbgnApIw3giCRtccZUQ2jIwnLvnX qWOZ8fKzU87gze0gJ/B00bQAY0DPWX7wDX1TWGtrEqRUD56udFuWptBSo/Xj6NIp EQopDXndGX1PY+2O4eWTmdItvEmGPMZqmCO40MsPzhZDx6FCiIZm6Wor/OzF5m54 fI0Nz6yN2zgyVu46P4w7iwETs1q43URO2OnmVqlai0mz4D78mCQ7FakCzcR7+yfj fswE18ZQd9Y2JMx1WDcDMTakCruEGgW/kNe1V+szS4ue9US0h/ET1LnmYXargH7z cs0XCXPcqcR3BlUu0UMGAqrP+Bv5ox74 -----END CERTIFICATE-----Generated at Mon Dec 8 06:57:04 2025 by rpki-client