This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft File: FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft (raw, json) Hash identifier: De4mAtl8z6CLCExA7Ht7P9VhbTqjMhA3Qtu/h6HvGAo= Subject key identifier: 81:A3:13:66:77:2E:B7:9E:F9:8E:B3:74:28:34:0D:7D:E4:B4:ED:D3 Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31 Certificate issuer: /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft Manifest number: 97 Signing time: Tue 23 Dec 2025 05:20:34 +0000 Manifest this update: Tue 23 Dec 2025 05:20:34 +0000 Manifest next update: Tue 30 Dec 2025 05:20:34 +0000 Files and hashes: 1: FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl (hash: tjfKZAenOHz3U6GcVhUMDVFtWrgUA5Aw1cbA8G/v7QA=) 2: E2D9B7A6B32611F0BE8DF029C4F9AE02.roa (hash: blGbXq2yiWVicTOuyyoxLGQafJr97/lYQbfApO8b37w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831 Validity Not Before: Dec 23 05:20:34 2025 GMT Not After : Dec 30 05:20:34 2025 GMT Subject: CN=694a26a2-b904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:23:5c:23:f2:46:0c:ef:e3:0a:96:20:e5: 5e:db:80:f4:2b:c0:e6:1b:e6:28:2d:c1:9f:29:60: fe:c9:0f:c0:9b:4b:6b:28:70:bb:38:97:cf:08:72: fa:c1:a5:6c:47:3e:93:68:b7:d1:7b:69:e9:ac:81: 77:25:45:5a:eb:2a:9f:f0:5b:a1:2e:8a:1d:64:2e: 48:f5:16:c0:d1:b1:d3:12:51:c5:d1:7f:60:fc:32: 84:e4:33:44:f9:72:1d:cc:a6:67:76:e8:8a:15:a3: 10:94:db:db:f3:53:9e:f2:c4:8d:be:2d:7b:a3:8a: 70:d8:49:33:e8:a8:79:3e:ec:79:bf:a0:2f:74:e3: 4e:a2:8d:ed:b2:77:68:7d:b3:46:61:9b:15:70:a3: 7b:41:63:52:ed:c4:67:5f:03:0a:ef:bf:f2:88:0c: 00:83:71:1d:a0:1b:72:cd:5e:4b:db:1f:c1:29:d3: ec:84:0f:fa:23:56:33:7a:fc:73:de:f8:eb:44:94: a7:5d:43:00:85:a1:68:a2:2b:f5:8b:ef:ed:3e:22: cf:e3:0f:b4:43:37:72:ba:ca:4c:62:b6:6c:a9:74: b9:22:45:de:d4:79:ae:e0:99:c7:da:c1:11:6d:21: 51:28:2f:30:bc:82:61:63:39:55:ce:93:dd:12:a5: 64:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A3:13:66:77:2E:B7:9E:F9:8E:B3:74:28:34:0D:7D:E4:B4:ED:D3 X509v3 Authority Key Identifier: keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:2b:d8:7c:f9:b5:ae:a0:55:e5:74:aa:83:d5:92:6f:9c:9a: 05:c6:4b:fe:35:1c:a6:38:f0:da:6c:dd:27:a7:51:8f:5f:66: bc:68:c4:22:87:15:84:40:6d:98:07:7a:cd:cf:6b:32:9e:5a: ac:db:a2:25:91:e2:2b:30:95:28:eb:eb:23:33:d4:99:b0:b4: 9d:49:52:2e:05:73:c1:92:aa:06:c7:39:0d:88:6c:d6:5e:e3: 47:37:34:01:9e:73:df:15:d7:c4:e4:50:76:fc:fc:cb:94:1a: 87:2c:68:a7:35:5b:f4:f5:52:64:17:38:04:db:5f:f5:01:1e: 40:0a:93:4a:ad:ba:0d:c7:b0:24:bc:44:60:63:69:21:71:0c: 32:14:c6:83:f7:cc:fe:73:42:aa:26:3c:8d:b2:50:2e:e1:f2: 5b:23:4a:fd:e4:fe:8f:01:57:d8:e8:6b:76:84:7e:ec:f7:95: 79:ec:a9:40:b1:e0:7a:20:bf:09:2e:70:72:d2:c6:3d:66:6f: 52:de:4c:a5:b7:9a:0d:dd:cc:44:30:41:0b:d9:93:14:c2:36: 0f:1b:26:6f:6e:87:0d:e3:a1:8d:13:1c:89:35:74:fb:a0:d9: aa:6f:4a:fc:5c:ad:42:0e:59:ae:2c:80:e0:e2:26:06:0c:8b: 8f:f5:a2:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRCODYxMTAvBgNVBAUTKDE0RDVBRDI3MjJBQ0E4NkFEMzRGMEY5QTM0NDcyNkNC NjY5ODA4MzEwHhcNMjUxMjIzMDUyMDM0WhcNMjUxMjMwMDUyMDM0WjAYMRYwFAYD VQQDDA02OTRhMjZhMi1iOTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SQjXCPyRgzv4wqWIOVe24D0K8DmG+YoLcGfKWD+yQ/Am0trKHC7OJfPCHL6 waVsRz6TaLfRe2nprIF3JUVa6yqf8FuhLoodZC5I9RbA0bHTElHF0X9g/DKE5DNE +XIdzKZnduiKFaMQlNvb81Oe8sSNvi17o4pw2Ekz6Kh5Pux5v6AvdONOoo3tsndo fbNGYZsVcKN7QWNS7cRnXwMK77/yiAwAg3EdoBtyzV5L2x/BKdPshA/6I1Yzevxz 3vjrRJSnXUMAhaFooiv1i+/tPiLP4w+0QzdyuspMYrZsqXS5IkXe1Hmu4JnH2sER bSFRKC8wvIJhYzlVzpPdEqVkwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGjE2Z3 Lree+Y6zdCg0DX3ktO3TMB8GA1UdIwQYMBaAFBTVrScirKhq008PmjRHJstmmAgx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEI4Ni85MzA2QTJDNEY3 RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9GTld0SnlLc3FHclRUdy1hTkVjbXkyYVlD REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZOV3RKeUtzcUdyVFR3LWFORWNteTJhWUNERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEI4Ni85MzA2QTJDNEY3RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9GTld0SnlLc3FH clRUdy1hTkVjbXkyYVlDREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxK9h8+bWuoFXldKqD1ZJvnJoFxkv+NRymOPDabN0np1GPX2a8aMQi hxWEQG2YB3rNz2synlqs26IlkeIrMJUo6+sjM9SZsLSdSVIuBXPBkqoGxzkNiGzW XuNHNzQBnnPfFdfE5FB2/PzLlBqHLGinNVv09VJkFzgE21/1AR5ACpNKrboNx7Ak vERgY2khcQwyFMaD98z+c0KqJjyNslAu4fJbI0r95P6PAVfY6Gt2hH7s95V57KlA seB6IL8JLnBy0sY9Zm9S3kylt5oN3cxEMEEL2ZMUwjYPGyZvbocN46GNExyJNXT7 oNmqb0r8XK1CDlmuLIDg4iYGDIuP9aLn -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:13 2025 by rpki-client