This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft File: Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft (raw, json) Hash identifier: F8belchxyFWaRJNK2ww/QuTA5qfZDAa5cnHO/J8XHL4= Subject key identifier: 64:B0:3B:03:8D:17:33:6D:84:45:BE:AC:10:C3:A8:7E:80:F4:32:0B Authority key identifier: 16:2E:95:6F:88:DD:3E:09:A6:B0:44:D8:B2:B4:2D:EB:10:A8:3D:A1 Certificate issuer: /CN=A91E6F07/serialNumber=162E956F88DD3E09A6B044D8B2B42DEB10A83DA1 Certificate serial: 0CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft Manifest number: 1558 Signing time: Mon 22 Dec 2025 17:54:26 +0000 Manifest this update: Mon 22 Dec 2025 17:54:26 +0000 Manifest next update: Mon 29 Dec 2025 17:54:26 +0000 Files and hashes: 1: Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl (hash: jN/tSl4Me5dB3m5fFXjGRdApRpuypzea1F1ypVHnJj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6F07, serialNumber=162E956F88DD3E09A6B044D8B2B42DEB10A83DA1 Validity Not Before: Dec 22 17:54:26 2025 GMT Not After : Dec 29 17:54:26 2025 GMT Subject: CN=694985d2-7b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:d2:b3:97:10:40:e9:50:4e:9b:4d:d3:23: 5e:a9:35:ad:4c:76:80:7b:ac:f8:8a:de:9d:56:54: 32:50:98:d7:d4:2d:3c:73:34:98:0b:01:c6:20:2b: 71:ca:30:c9:96:fc:14:ec:2c:a4:d5:8b:98:db:09: 60:37:86:8f:33:66:22:f6:8e:15:85:be:5a:93:c3: aa:28:64:61:ed:47:44:c5:39:82:22:33:f8:4d:64: a1:1a:4d:68:35:83:3f:b4:3a:dc:c2:42:27:91:b8: ff:0f:f6:6e:17:0c:75:ef:28:86:db:9e:d3:c1:7f: 98:e0:e9:7d:d2:75:6c:97:a0:4e:b5:10:65:f7:a5: 00:51:fe:84:ad:57:0c:5c:9c:cf:fe:27:a9:3b:a2: b7:6e:14:43:7e:de:b4:6f:3b:fd:1b:75:66:93:03: cd:64:02:f6:9d:be:2a:31:88:10:c9:39:d2:fc:5c: c1:91:52:e9:47:b7:1b:95:9e:9f:06:f7:d1:22:53: b1:a4:8b:cf:aa:53:61:2f:94:3f:6a:75:1e:27:36: b0:0e:fb:62:ad:31:9f:9e:60:7e:5b:f5:f1:05:6e: ce:12:99:cc:5f:30:85:ec:f8:36:6f:0e:f9:48:63: 81:f0:07:0e:4d:d8:8d:4c:f3:1b:96:65:dd:96:6b: 6e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B0:3B:03:8D:17:33:6D:84:45:BE:AC:10:C3:A8:7E:80:F4:32:0B X509v3 Authority Key Identifier: keyid:16:2E:95:6F:88:DD:3E:09:A6:B0:44:D8:B2:B4:2D:EB:10:A8:3D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:ea:6c:0c:2f:ae:53:29:e0:95:9a:7e:01:94:46:5b:bc:39: 19:e1:3f:9a:bf:85:79:c5:f1:93:95:13:ca:db:be:4c:73:56: d3:e3:a8:5f:e4:ef:8b:af:67:9f:fc:3b:37:7e:ee:35:a3:11: 20:91:86:b3:0b:a2:ab:2e:36:68:f7:3e:55:1b:8e:23:5a:fe: f8:ce:4c:e0:db:09:cd:12:46:04:69:fd:fd:76:80:a4:6b:96: fd:e2:d4:67:63:6c:c1:35:b5:f2:bb:b9:87:10:25:66:46:28: b4:b3:11:15:46:83:49:87:ea:45:c4:09:ed:59:e3:b2:ed:8d: 3e:66:a6:fe:41:a9:f0:f2:79:ba:72:6e:4d:c9:15:13:03:82: 66:1f:91:da:4d:84:b6:d9:17:f7:b9:ed:b1:b7:a3:a6:28:02: e0:95:4b:f5:4e:e0:7e:4f:41:a9:5a:8a:e0:00:a0:31:35:57: 03:77:4e:a6:57:ce:75:9c:d8:ef:bf:35:8a:e5:2d:8e:ff:7e: 43:45:58:c8:67:b8:d3:d2:d6:b0:3e:98:c4:c4:a1:18:09:f0: 18:d7:07:aa:2d:67:85:59:47:d7:bf:a4:4d:17:85:46:bc:0b: cb:95:4e:4f:b5:1c:de:ad:ae:c1:82:91:d2:55:29:ee:89:1a: 1a:7e:00:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZGMDcxMTAvBgNVBAUTKDE2MkU5NTZGODhERDNFMDlBNkIwNDREOEIyQjQyREVC MTBBODNEQTEwHhcNMjUxMjIyMTc1NDI2WhcNMjUxMjI5MTc1NDI2WjAYMRYwFAYD VQQDDA02OTQ5ODVkMi03Yjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNXSs5cQQOlQTptN0yNeqTWtTHaAe6z4it6dVlQyUJjX1C08czSYCwHGICtx yjDJlvwU7Cyk1YuY2wlgN4aPM2Yi9o4Vhb5ak8OqKGRh7UdExTmCIjP4TWShGk1o NYM/tDrcwkInkbj/D/ZuFwx17yiG257TwX+Y4Ol90nVsl6BOtRBl96UAUf6ErVcM XJzP/iepO6K3bhRDft60bzv9G3VmkwPNZAL2nb4qMYgQyTnS/FzBkVLpR7cblZ6f BvfRIlOxpIvPqlNhL5Q/anUeJzawDvtirTGfnmB+W/XxBW7OEpnMXzCF7Pg2bw75 SGOB8AcOTdiNTPMblmXdlmtuqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSwOwON FzNthEW+rBDDqH6A9DILMB8GA1UdIwQYMBaAFBYulW+I3T4JprBE2LK0LesQqD2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkYwNy9DMTNEODFEODA1 MjkxMUVBODJENzQzMzdDNEY5QUUwMi9GaTZWYjRqZFBnbW1zRVRZc3JRdDZ4Q29Q YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZpNlZiNGpkUGdtbXNFVFlzclF0NnhDb1BhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkYwNy9DMTNEODFEODA1MjkxMUVBODJENzQzMzdDNEY5QUUwMi9GaTZWYjRqZFBn bW1zRVRZc3JRdDZ4Q29QYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA36mwML65TKeCVmn4BlEZbvDkZ4T+av4V5xfGTlRPK275Mc1bT46hf 5O+Lr2ef/Ds3fu41oxEgkYazC6KrLjZo9z5VG44jWv74zkzg2wnNEkYEaf39doCk a5b94tRnY2zBNbXyu7mHECVmRii0sxEVRoNJh+pFxAntWeOy7Y0+Zqb+Qanw8nm6 cm5NyRUTA4JmH5HaTYS22Rf3ue2xt6OmKALglUv1TuB+T0GpWorgAKAxNVcDd06m V851nNjvvzWK5S2O/35DRVjIZ7jT0tawPpjExKEYCfAY1weqLWeFWUfXv6RNF4VG vAvLlU5PtRzera7BgpHSVSnuiRoafgC3 -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:37 2025 by rpki-client