This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json) Hash identifier: JgQ/CVnrdfJ1y1XlGlf3LBu7z04L20A9F106G1yojaU= Subject key identifier: 45:5B:CF:CB:5F:B1:A2:AD:79:73:57:0C:F9:E4:5F:D4:6F:FD:F6:9F Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Certificate serial: 0B50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft Manifest number: 0B66 Signing time: Mon 22 Dec 2025 18:44:44 +0000 Manifest this update: Mon 22 Dec 2025 18:44:43 +0000 Manifest next update: Mon 29 Dec 2025 18:44:43 +0000 Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: +MjMCe6qcnX+4YVpMIwzhbms9/P6vi96Il3dts3iwVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Validity Not Before: Dec 22 18:44:43 2025 GMT Not After : Dec 29 18:44:43 2025 GMT Subject: CN=6949919c-9ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:94:e3:da:c7:24:c7:22:a4:af:51:38:3a: 1d:04:ee:1e:9f:1a:55:bc:43:58:b8:0d:1e:5d:32: 3e:92:0c:d8:28:81:16:4d:ea:d3:0d:94:0a:84:89: a9:01:86:ca:36:e8:aa:78:33:72:02:0b:c4:ab:93: 38:f2:48:89:12:0a:ac:35:fa:44:5e:6f:30:08:11: b7:fe:28:77:73:63:a7:44:99:19:bb:b9:1b:7a:be: 7a:ff:2a:6c:76:e8:09:64:c0:02:b1:e4:c2:c3:34: cc:c3:3c:e7:50:97:a3:20:80:7f:f2:06:02:eb:9b: 75:68:91:60:cc:34:48:7e:c9:4a:33:f3:8c:81:ac: 7d:59:2e:10:5e:ce:9b:a8:3a:55:93:12:72:f1:97: 0c:f4:e3:3f:59:fa:e5:49:c8:6a:08:68:4f:13:3f: ca:e3:7d:07:a5:2e:03:85:44:48:17:6c:0e:ac:0a: 39:28:d4:76:8e:cc:55:10:bd:ea:4b:d7:87:7f:23: 26:05:0e:f4:17:23:84:8d:b2:78:2e:97:3d:43:54: db:fa:b3:ac:2c:b4:7b:2b:13:34:d6:8b:5b:b0:f6: 1f:67:7c:03:84:f7:62:a9:82:db:49:9e:28:b3:d2: 06:a1:f0:cd:bb:61:cb:d9:5d:0f:e9:b7:4c:6e:b4: 43:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5B:CF:CB:5F:B1:A2:AD:79:73:57:0C:F9:E4:5F:D4:6F:FD:F6:9F X509v3 Authority Key Identifier: keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b4:ed:78:bd:7f:4a:a0:d8:1e:c4:40:a8:5f:f3:0f:02:cd: 45:41:92:1f:a2:9c:b6:6f:45:e1:5f:56:64:3d:53:b8:15:45: dd:2c:0c:f2:78:4e:a3:fa:c9:47:5c:ae:0f:0f:ac:6f:92:db: a7:2f:6a:53:91:6c:b7:89:f4:c7:28:dd:c5:86:c0:e2:3e:49: 5a:21:03:02:c6:d6:bd:e1:f2:0f:b8:92:97:03:61:c8:24:ec: c3:fc:76:da:cf:76:61:c0:51:58:cc:9e:ce:5e:42:84:b7:04: 21:e3:81:81:7e:06:e5:ea:22:05:1e:ec:4c:0c:c9:03:40:88: 12:7a:b6:8d:55:81:7a:8e:4a:ba:7b:b7:ce:cc:0b:0a:d1:4f: 9d:94:91:dc:ef:3e:cf:91:2d:94:0e:67:a3:57:64:02:01:44: a0:bd:92:33:04:e4:5b:1b:6e:85:80:fc:d4:5b:06:59:4e:3f: 17:1b:ee:39:e5:04:ba:25:54:f1:5f:5f:16:0a:f9:0b:b5:03: 28:94:c4:b4:9b:d0:ca:99:b9:e8:26:6d:9b:fe:a6:5e:df:84: 05:dd:88:85:89:e8:2e:58:61:ce:87:94:19:ec:0c:c5:e0:9e: ce:1c:9c:b4:f8:5f:90:b4:95:0b:17:fa:01:e6:29:6d:8d:0f: c4:2b:74:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE MUE4MzI3MEYwHhcNMjUxMjIyMTg0NDQzWhcNMjUxMjI5MTg0NDQzWjAYMRYwFAYD VQQDDA02OTQ5OTE5Yy05YWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/CU49rHJMcipK9RODodBO4enxpVvENYuA0eXTI+kgzYKIEWTerTDZQKhImp AYbKNuiqeDNyAgvEq5M48kiJEgqsNfpEXm8wCBG3/ih3c2OnRJkZu7kber56/yps dugJZMACseTCwzTMwzznUJejIIB/8gYC65t1aJFgzDRIfslKM/OMgax9WS4QXs6b qDpVkxJy8ZcM9OM/WfrlSchqCGhPEz/K430HpS4DhURIF2wOrAo5KNR2jsxVEL3q S9eHfyMmBQ70FyOEjbJ4Lpc9Q1Tb+rOsLLR7KxM01otbsPYfZ3wDhPdiqYLbSZ4o s9IGofDNu2HL2V0P6bdMbrRD/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVbz8tf saKteXNXDPnkX9Rv/fafMB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhx RlZEZWNQUllReTNScURKdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEtO14vX9KoNgexECoX/MPAs1FQZIfopy2b0XhX1ZkPVO4FUXdLAzy eE6j+slHXK4PD6xvktunL2pTkWy3ifTHKN3FhsDiPklaIQMCxta94fIPuJKXA2HI JOzD/Hbaz3ZhwFFYzJ7OXkKEtwQh44GBfgbl6iIFHuxMDMkDQIgSeraNVYF6jkq6 e7fOzAsK0U+dlJHc7z7PkS2UDmejV2QCAUSgvZIzBORbG26FgPzUWwZZTj8XG+45 5QS6JVTxX18WCvkLtQMolMS0m9DKmbnoJm2b/qZe34QF3YiFieguWGHOh5QZ7AzF 4J7OHJy0+F+QtJULF/oB5iltjQ/EK3Q7 -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:44 2025 by rpki-client