This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft File: cFWB1AyVgaJlHlMlI42zvcs6fQU.mft (raw, json) Hash identifier: voQKoEDmPVyqO1go/EuVTRwHKwEA0xJlf0r0TcH7pZw= Subject key identifier: D7:39:B2:3D:04:23:D4:B0:19:6D:E4:BA:77:36:95:90:FE:D5:69:5D Authority key identifier: 70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05 Certificate issuer: /CN=A91E1D91/serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05 Certificate serial: 0404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft Manifest number: 03FB Signing time: Mon 22 Dec 2025 23:33:36 +0000 Manifest this update: Mon 22 Dec 2025 23:33:35 +0000 Manifest next update: Mon 29 Dec 2025 23:33:35 +0000 Files and hashes: 1: cFWB1AyVgaJlHlMlI42zvcs6fQU.crl (hash: P4bLB/8RO6HYQHij4wsCEXS0xLkfAZn+sCbjSFbav98=) 2: 6CDC639EA04411EC8A7E5E2CC4F9AE02.roa (hash: WktAZLAHSw7QkU+hNH84sEG4OXo+/tq5XSlAqKGLv18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D91, serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05 Validity Not Before: Dec 22 23:33:35 2025 GMT Not After : Dec 29 23:33:35 2025 GMT Subject: CN=6949d54f-5ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:48:1a:78:58:0e:e1:19:ba:54:df:12:7a:3d: ac:fd:75:9a:9d:e0:a9:0a:c5:64:57:d7:84:38:4e: 19:bf:1f:3e:d5:fa:a4:be:44:22:8d:05:d3:ef:00: c6:85:92:dc:b6:7c:a5:94:4d:3c:49:1f:30:07:2d: 2d:f8:2c:8d:1b:a2:5e:b8:7a:98:66:0b:01:d0:9e: f4:19:6c:8d:da:2d:ae:70:52:33:3f:e6:dd:52:d9: 10:8f:32:65:78:45:df:49:92:43:c3:9e:05:a9:32: 02:45:d6:9d:e6:49:54:64:38:1d:df:4e:9d:87:08: e0:4d:16:34:1f:c3:da:d7:c2:4c:aa:21:2e:28:fb: 61:c5:0b:38:fa:8c:03:c8:5a:bf:a1:7f:e8:b6:8e: 1a:ce:4c:14:7b:ab:55:f3:2c:5d:97:48:59:0a:f6: 00:66:0f:80:c7:4f:51:8a:ab:9b:a0:37:7f:a8:6a: 11:ee:c1:79:81:70:0c:89:7c:96:67:33:92:c5:38: 97:1e:c9:36:c6:d9:b1:07:03:f4:aa:51:e8:20:cd: 3f:c8:c7:9f:bf:d0:b9:70:eb:be:3d:7a:43:59:ca: 95:20:c8:85:9f:7b:8c:0b:21:84:b9:cf:24:a1:77: e5:44:2d:7c:fd:f7:df:25:44:9a:08:47:d6:45:19: bf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:39:B2:3D:04:23:D4:B0:19:6D:E4:BA:77:36:95:90:FE:D5:69:5D X509v3 Authority Key Identifier: keyid:70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a9:66:7f:db:3e:bb:65:da:cd:60:7b:cf:fc:c4:ca:b2:28: d9:4f:92:8f:b6:c2:c4:14:c4:f8:ed:44:49:3c:99:94:c9:11: bb:fc:25:68:65:36:05:c6:3a:28:d1:1a:4c:8e:83:af:7a:d8: 48:7d:a7:a5:24:66:e3:f2:56:38:72:2d:77:f1:e7:81:3b:16: 6f:36:cc:49:96:76:8e:1a:0d:90:7e:48:93:90:9c:53:43:0f: e0:6a:f6:40:5b:ae:af:3c:16:29:af:86:29:2a:19:c1:b0:f1: 0c:87:86:05:03:69:ab:3e:77:a6:48:1b:3b:fa:86:8c:cc:01: c9:75:cb:d4:36:11:12:fa:d6:6e:b3:cf:61:33:d6:41:e2:54: b5:90:11:74:bc:94:74:72:43:04:84:f9:4f:e0:1f:20:82:62: 00:c7:92:65:2f:a4:c9:43:82:e3:07:67:fd:c4:f2:b8:a7:d0: 1a:c6:a7:f3:75:94:00:ad:15:d8:85:29:7d:26:6c:08:76:fa: aa:08:8e:e6:ab:6d:cd:ab:83:0b:3c:80:35:ca:1d:a2:18:7b: b2:aa:4b:fc:7b:d1:c7:cc:fa:94:c1:d2:22:ff:6b:2e:87:24: 30:50:d3:75:eb:7c:02:73:72:91:b2:94:92:cd:74:20:fb:83: ed:3e:c6:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFEOTExMTAvBgNVBAUTKDcwNTU4MUQ0MEM5NTgxQTI2NTFFNTMyNTIzOERCM0JE Q0IzQTdEMDUwHhcNMjUxMjIyMjMzMzM1WhcNMjUxMjI5MjMzMzM1WjAYMRYwFAYD VQQDDA02OTQ5ZDU0Zi01Y2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUgaeFgO4Rm6VN8Sej2s/XWaneCpCsVkV9eEOE4Zvx8+1fqkvkQijQXT7wDG hZLctnyllE08SR8wBy0t+CyNG6JeuHqYZgsB0J70GWyN2i2ucFIzP+bdUtkQjzJl eEXfSZJDw54FqTICRdad5klUZDgd306dhwjgTRY0H8Pa18JMqiEuKPthxQs4+owD yFq/oX/oto4azkwUe6tV8yxdl0hZCvYAZg+Ax09RiquboDd/qGoR7sF5gXAMiXyW ZzOSxTiXHsk2xtmxBwP0qlHoIM0/yMefv9C5cOu+PXpDWcqVIMiFn3uMCyGEuc8k oXflRC18/fffJUSaCEfWRRm/5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNc5sj0E I9SwGW3kunc2lZD+1WldMB8GA1UdIwQYMBaAFHBVgdQMlYGiZR5TJSONs73LOn0F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ5MS81RDhDMTcxMkEw NDAxMUVDODQ1QUU5MjZDNEY5QUUwMi9jRldCMUF5VmdhSmxIbE1sSTQyenZjczZm UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGV0IxQXlWZ2FKbEhsTWxJNDJ6dmNzNmZRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ5MS81RDhDMTcxMkEwNDAxMUVDODQ1QUU5MjZDNEY5QUUwMi9jRldCMUF5Vmdh SmxIbE1sSTQyenZjczZmUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfqWZ/2z67ZdrNYHvP/MTKsijZT5KPtsLEFMT47URJPJmUyRG7/CVo ZTYFxjoo0RpMjoOvethIfaelJGbj8lY4ci138eeBOxZvNsxJlnaOGg2QfkiTkJxT Qw/gavZAW66vPBYpr4YpKhnBsPEMh4YFA2mrPnemSBs7+oaMzAHJdcvUNhES+tZu s89hM9ZB4lS1kBF0vJR0ckMEhPlP4B8ggmIAx5JlL6TJQ4LjB2f9xPK4p9Aaxqfz dZQArRXYhSl9JmwIdvqqCI7mq23Nq4MLPIA1yh2iGHuyqkv8e9HHzPqUwdIi/2su hyQwUNN163wCc3KRspSSzXQg+4PtPsbz -----END CERTIFICATE-----Generated at Tue Dec 23 20:20:30 2025 by rpki-client