This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft File: FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft (raw, json) Hash identifier: 23AHcTSKUe6rZKlhIhHkdUMsoyNr/GGVEelpCmMfoxM= Subject key identifier: 1C:55:C9:97:74:5B:7A:BD:73:16:8D:21:9D:B3:D5:0C:3B:CB:D4:CC Authority key identifier: 14:7A:0E:04:87:11:B6:25:06:B0:9F:08:8A:05:99:2A:3A:31:02:0A Certificate issuer: /CN=A91DEC3C/serialNumber=147A0E048711B62506B09F088A05992A3A31020A Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft Manifest number: 020C Signing time: Tue 23 Dec 2025 01:21:40 +0000 Manifest this update: Tue 23 Dec 2025 01:21:40 +0000 Manifest next update: Tue 30 Dec 2025 01:21:40 +0000 Files and hashes: 1: FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl (hash: iAFZqWCGGv1gyVDjs5vrTIkTi7kJmCWmW/Aaqs1qIYk=) 2: 5153E9DAC0B911ED99A12312C4F9AE02.roa (hash: A4mMoOgqhrpbmnUE3oA6zWgyEjfGMI0KKDHAWWwT+kY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC3C, serialNumber=147A0E048711B62506B09F088A05992A3A31020A Validity Not Before: Dec 23 01:21:40 2025 GMT Not After : Dec 30 01:21:40 2025 GMT Subject: CN=6949eea4-19ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:97:02:26:dc:70:3b:6c:56:72:68:77:58:2c: 55:2a:3b:7f:87:0c:71:56:08:25:c7:4e:2f:d2:da: 1b:03:f0:c8:a9:b5:52:51:96:6e:30:00:1f:a7:73: b9:a5:19:31:b7:15:fe:a7:64:c7:5c:8f:96:a4:ea: 9f:99:ac:cc:6e:f5:aa:22:de:b0:6b:c8:cc:cb:05: dd:af:f1:cf:0a:0a:db:d6:78:95:06:55:31:fc:05: 23:55:3a:da:27:79:bb:cc:44:d8:07:ea:c3:f0:1a: 22:15:3a:a2:8a:22:74:95:36:19:80:cb:11:03:48: 7b:43:da:b3:d3:e5:4e:ae:f1:ea:7d:9a:bf:37:d1: fe:5c:d6:28:24:87:50:93:68:4a:9d:4d:af:13:b2: ad:8c:ce:5e:8e:b7:84:b9:b7:1e:7a:94:b5:f5:c6: ee:e7:1e:6b:4d:d6:f1:e5:dc:e9:c4:07:77:bc:19: 74:78:49:24:e9:c0:b9:48:e2:d2:a4:ce:17:ec:58: 12:dd:41:0b:05:59:04:a1:45:0d:7b:76:a3:d8:4a: 39:7c:e5:38:a8:04:c0:bc:2e:bf:02:0f:53:8a:8c: ac:b1:91:48:92:b6:72:57:aa:48:0f:ab:fa:22:95: 37:60:a7:1e:42:fd:f8:30:5c:c9:78:8f:af:29:65: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:55:C9:97:74:5B:7A:BD:73:16:8D:21:9D:B3:D5:0C:3B:CB:D4:CC X509v3 Authority Key Identifier: keyid:14:7A:0E:04:87:11:B6:25:06:B0:9F:08:8A:05:99:2A:3A:31:02:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:a6:f9:71:26:43:2c:65:74:65:6f:bc:39:8f:01:e7:12:ba: a1:0d:61:d9:87:fc:46:6a:0c:b4:34:37:5d:4f:2e:5d:6b:7b: a1:bf:2d:32:63:44:e6:6c:7c:7a:6e:58:00:cd:f6:9b:66:7e: 1d:1d:71:b2:2f:3f:dc:fc:c9:3b:ba:69:66:64:0b:fc:07:72: 49:43:12:3b:35:2d:1d:b6:a6:f6:d0:49:de:ec:6c:c3:c4:5a: ba:f0:89:e3:67:c1:0c:08:62:b1:a1:2a:5d:3c:6f:b9:9d:2b: 1a:d3:fa:3e:8d:3c:2b:71:1e:2d:84:bc:4d:c4:54:58:15:63: 45:53:01:e0:ed:7d:68:fc:a9:f2:af:26:87:b8:37:32:98:bb: be:e8:9e:75:9d:2d:ed:ef:fc:24:d2:27:7e:e9:d2:b7:b8:86: 1d:01:c3:c4:e4:0a:b0:2e:be:36:a1:46:5f:fc:73:a6:83:23: f9:25:b9:1c:92:fd:e9:37:1f:cf:5d:ec:c0:c5:00:8b:a6:2f: 41:ae:d8:cc:36:37:3c:c6:3e:64:04:23:df:b3:89:c7:15:07: 2f:df:ed:ed:4a:39:00:78:6d:34:e9:78:9b:81:db:60:34:ce: 65:de:34:c0:75:2b:cf:14:88:4f:43:e8:89:ca:0e:cc:98:15: fe:c9:a7:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDM0MxMTAvBgNVBAUTKDE0N0EwRTA0ODcxMUI2MjUwNkIwOUYwODhBMDU5OTJB M0EzMTAyMEEwHhcNMjUxMjIzMDEyMTQwWhcNMjUxMjMwMDEyMTQwWjAYMRYwFAYD VQQDDA02OTQ5ZWVhNC0xOWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl5cCJtxwO2xWcmh3WCxVKjt/hwxxVgglx04v0tobA/DIqbVSUZZuMAAfp3O5 pRkxtxX+p2THXI+WpOqfmazMbvWqIt6wa8jMywXdr/HPCgrb1niVBlUx/AUjVTra J3m7zETYB+rD8BoiFTqiiiJ0lTYZgMsRA0h7Q9qz0+VOrvHqfZq/N9H+XNYoJIdQ k2hKnU2vE7KtjM5ejreEubceepS19cbu5x5rTdbx5dzpxAd3vBl0eEkk6cC5SOLS pM4X7FgS3UELBVkEoUUNe3aj2Eo5fOU4qATAvC6/Ag9TioyssZFIkrZyV6pID6v6 IpU3YKceQv34MFzJeI+vKWW6vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxVyZd0 W3q9cxaNIZ2z1Qw7y9TMMB8GA1UdIwQYMBaAFBR6DgSHEbYlBrCfCIoFmSo6MQIK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMzQy9GNjMwODA5NEMw QjQxMUVEQTc3RjcwMEVDNEY5QUUwMi9GSG9PQkljUnRpVUdzSjhJaWdXWktqb3hB Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZIb09CSWNSdGlVR3NKOElpZ1daS2pveEFnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMzQy9GNjMwODA5NEMwQjQxMUVEQTc3RjcwMEVDNEY5QUUwMi9GSG9PQkljUnRp VUdzSjhJaWdXWktqb3hBZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVpvlxJkMsZXRlb7w5jwHnErqhDWHZh/xGagy0NDddTy5da3uhvy0y Y0TmbHx6blgAzfabZn4dHXGyLz/c/Mk7umlmZAv8B3JJQxI7NS0dtqb20Ene7GzD xFq68InjZ8EMCGKxoSpdPG+5nSsa0/o+jTwrcR4thLxNxFRYFWNFUwHg7X1o/Kny ryaHuDcymLu+6J51nS3t7/wk0id+6dK3uIYdAcPE5AqwLr42oUZf/HOmgyP5Jbkc kv3pNx/PXezAxQCLpi9BrtjMNjc8xj5kBCPfs4nHFQcv3+3tSjkAeG006Xibgdtg NM5l3jTAdSvPFIhPQ+iJyg7MmBX+yaed -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:34 2025 by rpki-client